The Evolving Nature of Information Systems Controls in Healthcare Organisations
The Case of a Blood Banking Enterprise System from Western Europe
Information Systems (IS) projects are found to be complex, unpredictable, and prone to time and cost overruns. Perhaps that is why organisations put a strong focus on IS controls during the planning and execution of such projects.IS control literature in the past has focussed on dyadic control relationships during an outsourced IS development project and relatively little is known about such controls during a complex enterprise systems project. Existing studies usually take a static view of IS controls and do not investigate how controls evolve during different phases of the system lifecycle, as well as across projects. This study presents a processual view of IS controls in the enterprise systems lifecycle in a national blood processing organisation. Traditional research in a blood banking context has focussed on optimising the process of blood collection, inventory management, and distribution with relatively limited attention to the implementation of the supporting information systems. This research focusses on the evolution of control based on a study of three enterprise system implementation projects in the case organisation. The study demonstrates that while all five control modes (input, outcome, behaviour, clan, and self-control) are applied across the phases of enterprise systems projects, the nature and extent of control mechanisms changes across the phases of the enterprise system lifecycle. The findings also suggest a teleological evolution of a project’s control portfolio in which the portfolio evolves based on adaptive learning processes from earlier projects. Finally, by exhibiting the influence of institutional and market context, this study also underlines the multi-stakeholder and contextual nature of enterprise systems implementation and associated controls in health service organisations.
Adam, F., & O'Doherty, P. (2000). Lessons from enterprise resource planning implementations in Ireland–towards smaller and shorter ERP projects. Journal of Information Technology, 15(4), 305-316.
Alfonso, E., Xie, X., Augusto, V., & Garraud, O. (2012). Modeling and simulation of blood collection systems. Health Care Management Science, 15(1), 63-78.
Ali, M., & Miller, L. (2017). ERP system implementation in large enterprises–a systematic literature review. Journal of Enterprise Information Management, 30(4), 666-692.
Ashford, P., Gozzard, D., Jones, J., Revill, J., Wallis, J. ... & Cohen, H. (2000). Guidelines for blood bank computing. Transfusion Medicine, 10(4), 307-314.
Avgerou, C. (2019). Contextual explanation: alternative approaches and persistent challenges. MIS Quarterly, 43(3), 977-1006.
Barth, C., & Koch, S. (2019). Critical success factors in ERP upgrade projects. Industrial Management & Data Systems, 119(3), 656-675
Berente, N., Gal, U., & Yoo, Y. (2010). Dressage, control, and enterprise systems: the case of NASA's Full Cost initiative. European Journal of Information Systems, 19(1), 21-34.
Berente, N., Lyytinen, K., Yoo, Y., & Maurer, C. (2019). Institutional logics and pluralistic responses to enterprise system implementation: a qualitative meta-analysis. MIS Quarterly, 43(3), 873-902.
Bernroider, E. W. (2013). Effective ERP adoption processes: the role of project activators and resource investments. European Journal of Information Systems, 22(2), 235-250.
Bhoola, V., Hiremath, S. B., & Mallik, D. (2014). An Assessment of risk response strategies practiced in software projects. Australasian Journal of Information Systems, 18(3). https://doi.org/10.3127/ajis.v18i3.923
Bunduchi, R., Tursunbayeva, A., & Pagliari, C. (2019). Coping with institutional complexity. Information Technology & People. 33(1), 311-339.
Campbell, J., McDonald, C., & Sethibe, T. (2009). Public and private sector IT governance: Identifying contextual differences. Australasian Journal of Information Systems, 16(2), 5-18. https://doi.org/10.3127/ajis.v16i2.538
Chang, S. I., Yen, D. C., Chang, I. C., & Jan, D. (2014). Internal control framework for a compliant ERP system. Information & Management, 51(2), 187-205.
Choudhury, V., & Sabherwal, R. (2003). Portfolios of control in outsourced software development projects. Information Systems Research, 14(3), 291-314.
Chua, C. E. H., Lim, W. K., Soh, C., & Sia, S. K. (2012). Enacting clan control in complex IT projects: A social capital perspective. MIS Quarterly, 36(2), 577-600.
Chua, C. E. H., & Myers, M. D. (2018). Social control in information systems development: a negotiated order perspective. Journal of Information Technology, 33(3), 173-187.
Cram, W. A., Brohman, K., & Gallupe, R. B. (2016). Information systems control: A review and framework for emerging information systems processes. Journal of the Association for Information Systems, 17(4), 2.
Cumming, P. D., Kendall, K. E., Pegels, C. C., Seagle, J. P., & Shubsda, J. F. (1976). A collections planning model for regional blood suppliers: description and validation. Management Science, 22(9), 962-971.
Einhorn, F., Marnewick, C., & Meredith, J. (2019). Achieving strategic benefits from business IT projects: The critical importance of using the business case across the entire project lifetime. International Journal of Project Management, 37(8), 989-1002.
EDQM (2017). Guide to the preparation, use and quality assurance of blood components. European Directorate for the Quality of Medicines & Healthcare. https://www.edqm.eu/en/blood-guide
Furneaux, B., & Wade, M. (2017). Impediments to information systems replacement: a calculus of discontinuance. Journal of Management Information Systems, 34(3), 902-932.
George, A. L., & Bennett, A. (2005). Case study and theory development in the social sciences. Cambridge, MA.
Goldbach, T., & Benlian, A. (2015). How social capital facilitates clan control on software platforms to enhance App-developers’ performance and success. In Thirty Sixth International Conference on Information Systems, Fort Worth 2015
Gopal, A., & Gosain, S. (2010). Research note – The role of organizational controls and boundary spanning in software development outsourcing: Implications for project performance. Information Systems Research. 21(4), 960-982.
Grabski, S. V., & Leech, S. A. (2007). Complementary controls and ERP implementation success. International Journal of Accounting Information Systems, 8(1), 17-39.
Gregory, R. W., & Keil, M. (2014). Blending bureaucratic and collaborative management styles to achieve control ambidexterity in IS projects. European Journal of Information Systems, 23(3), 343-356.
Gregory, R. W., Beck, R., & Keil, M. (2013). Control balancing in information systems development offshoring projects. MIS Quarterly, 1211-1232.
Gupta, O., Priyadarshini, K., Massoud, S., & Agrawal, S. K. (2004). Enterprise resource planning: a case of a blood bank. Industrial Management & Data Systems, 104(7), 589-603.
Heiskanen, A., Newman, M., & Eklin, M. (2008). Control, trust, power, and the dynamics of information system outsourcing relationships: A process study of contractual software development. The Journal of Strategic Information Systems, 17(4), 268-286.
Henderson, J. C., & Lee, S. (1992). Managing I/S design teams: a control theories perspective. Management Science, 38(6), 757-777.
Inácio, H., & Marques, R. P. (2018, June). Analysis of the research on internal control in enterprise resource planning systems. In 2018 13th Iberian Conference on Information Systems and Technologies (CISTI). IEEE.
JPAC (2013). Handbook of Transfusion Medicine. Joint United Kingdom (UK) Blood Transfusion and Tissue Transplantation Services Professional Advisory Committee. https://www.transfusionguidelines.org/transfusion-handbook
Katsaliaki, K., & Brailsford, S. C. (2007). Using simulation to improve the blood supply chain. Journal of the Operational Research Society, 58(2), 219-227.
Kendall, K. E., & Lee, S. M. (1980). Formulating blood rotation policies with multiple objectives. Management Science, 26(11), 1145-1157.
Kirsch, L. J. (1997). Portfolios of control modes and IS project management. Information Systems Research, 8(3), 215-239.
Kirsch, L. J. (2004). Deploying common systems globally: The dynamics of control. Information Systems Research, 15(4), 374-395.
Kirsch, L. J., & Cummings, L. L. (1996). Contextual influences on self-control of IS professionals engaged in systems development. Accounting, Management and Information Technologies, 6(3), 191-219.
Koh, S. C. L., Gunasekaran, A., & Cooper, J. R. (2009). The demand for training and consultancy investment in SME-specific ERP systems implementation and operation. International journal of production economics, 122(1), 241-254.
Langley, A., & Meziani, N. (2020). Making Interviews Meaningful. The Journal of Applied Behavioral Science, 56(3) 370–391.
Langley, A., Smallman, C., Tsoukas, H., & Van de Ven, A. H. (2013). Process studies of change in organization and management: Unveiling temporality, activity, and flow. Academy of Management Journal, 56(1), 1-13.
Li, B. N., Chao, S., & Dong, M. C. (2007). SIBAS: A blood bank information system and its 5-year implementation at Macau. Computers in Biology and Medicine, 37(5), 588-597.
Loonam, J., McDonagh, J., Kumar, V., & O'Regan, N. (2014). Top managers & information systems: ‘Crossing the Rubicon!'. Strategic Change, 23(3-4), 205-224.
Lyytinen, K., & Newman, M. (2015). A tale of two coalitions - marginalising the users while successfully implementing an enterprise resource planning system. Information Systems Journal, 25(2), 71–101.
Mao, J. Y., Zhang, X., & Song, W. (2008). Information Systems Development in a Low Maturity Environment: An Exploratory Case Study on Control Modes. PACIS 2008 Proceedings, 263.
Matinheikki, J., Aaltonen, K., & Walker, D. (2019). Politics, public servants, and profits: Institutional complexity and temporary hybridization in a public infrastructure alliance project. International Journal of Project Management, 37(2), 298-317.
Maxwell, J. A. (2017). The validity and reliability of research: A realist perspective. Eds. Wyse, D., Selwyn, N., Smith, E., & Suter, L. E. (Eds.). The BERA/SAGE handbook of educational research (pp. 116-140). UK: Sage.
Mazaheri, E., Lagzian, M., & Hemmat, Z. (2020). Research Directions in information Systems Field, Current Status and Future Trends. Australasian Journal of Information Systems, 24. https://doi.org/10.3127/ajis.v24i0.2045
Miah, S., Shen, J., Lamp, J. W., Kerr, D., & Gammack, J. (2019). Emerging Insights of Health Informatics Research: A Literature Analysis for Outlining New Themes. Australasian Journal of Information Systems, 23. https://doi.org/10.3127/ajis.v23i0.2137
Miles, M. B., Huberman, A. M., & Saldana, J. (2014). Qualitative Data Analysis. Sage.
Moe, C. E., Newman, M., & Sein, M. K. (2017). The public procurement of information systems: dialectics in requirements specification. European Journal of Information Systems, 26(2), 143-163.
Murungi, D., Wiener, M., & Marabelli, M. (2019). Control and emotions: Understanding the dynamics of controllee behaviours in a health care information systems project. Information Systems Journal, 29(5), 1058-1082.
Nafeeseh, R. A., & Al-Mudimigh, A. S. (2011). Justifying ERP investment: the role and impacts of business case a literature survey. International Journal of Computer Science and Network Security, 11(1), 185-193.
Niederman, F., Müller, B., & March, S. T. (2018). Using process theory for accumulating project management knowledge: A seven-category model. Project Management Journal, 49(1), 6-24.
Nuwangi, S. M., & Sedera, D. (2018). Too Tight – Too Loose: Controlling Lessons from a Failed IS Development Project. Australasian Conference on Information Systems 2018. UTS, Sydney.
Nuwangi, S. M., Sedera, D., & Srivastava, S. (2018). Multi-layered Control Mechanisms in Software Development Outsourcing. PACIS 2018 Proceedings. 167.
Obwegeser, N., Danielsen, P., Hansen, K. S., Helt, M. A., & Nielsen, L. H. (2019). Selection and training of super-users for ERP implementation projects. Journal of Information Technology Case and Application Research, 21(2), 74-89.
Olsen, K. A., & Saetre, P. (2007). IT for niche companies: is an ERP system the solution?. Information Systems Journal, 17(1), 37-58.
Ouchi, W. G. (1978). The transmission of control through organizational hierarchy. Academy of Management Journal, 21(2), 173-192.
Ouchi, W. G. (1979). A conceptual framework for the design of organizational control mechanisms. Management Science, 25(9), 833-848.
Ouchi, W. G. (1980). Markets, bureaucracies, and clans. Administrative Science Quarterly, 129-141.
Pandey, S., & Sumant, O. (2020). Blood Bank Market by Product Type, Function, Bank Type, and End User: Global Opportunity Analysis and Industry Forecast, 2020–2027. Allied Market Research. https://www.alliedmarketresearch.com/blood-bank-market
Pentland, B. T. (1999). Building process theory with narrative: From description to explanation. Academy of Management Review, 24(4), 711-724.
Petit, Y. (2012). Project portfolios in dynamic environments: Organizing for uncertainty. International Journal of Project Management, 30(5), 539-553.
Pettigrew, A. M. (2012). Context and Action in the Transformation of the Firm: A Reprise. Journal of Management Studies, 49(7), 1304-1328.
Poba-Nzaou, P., Uwizeyemungu, S., Raymond, L., & Paré, G. (2014). Motivations underlying the adoption of ERP systems in healthcare organizations: Insights from online stories. Information Systems Frontiers, 16(4), 591-605.
Polykarpou, S., Barrett, M., Oborn, E., Salge, T. O., Antons, D., & Kohli, R. (2018). Justifying health IT investments: A process model of framing practices and reputational value. Information and Organization, 28(4), 153-169.
Salge, T. O., Kohli, R., & Barrett, M. (2015). Investing in information systems: On the behavioural and institutional search mechanisms underpinning hospitals’ IS investment decisions. MIS Quarterly, 39(1).
Saxena, D., & McDonagh, J. (2017). A Systematic Literature Review of the Enterprise Systems Research in Leading IS Journals (2000-2015). In Proceedings of the Twelfth Midwest Association for Information Systems Conference, US: Springfield, Illinois, May 2017
Soh, C., Chua, C. E. H., & Singh, H. (2011). Managing diverse stakeholders in enterprise systems projects: a control portfolio approach. Journal of Information Technology, 26(1), 16-31.
Somers, T. M., & Nelson, K. G. (2004). A taxonomy of players and activities across the ERP project life cycle. Information & Management, 41, 257–278.
Srivastava, S. C., & Teo, T. S. (2012). Contract performance in offshore systems development: Role of control mechanisms. Journal of Management Information Systems, 29(1), 115-158.
Sumner, M. (2018). ERP Project Retrospectives—55 Enterprise Systems: Evaluating Project Success, Lessons Learned, and Business Outcomes. In Proceedings of the Thirteenth Midwest Association for Information Systems Conference, US: Saint Louis, Missouri 2018.
Syed, R., Bandara, W., French, E., & Stewart, G. (2018). Getting it right! Critical success factors of BPM in the public sector: a systematic literature review. Australasian Journal of Information Systems, 22. https://doi.org/10.3127/ajis.v22i0.1265
Susilo, A., Heales, J., & Rohde, F. (2007). Project Management Effectiveness: the choice-formal or informal controls. Australasian Journal of Information Systems, 15(1). https://doi.org/10.3127/ajis.v15i1.480
Tiwana, A., & Keil, M. (2009). Control in internal and outsourced software projects. Journal of Management Information Systems, 26(3), 9-44.
Van de Ven, A. H., & Poole, M. S. (1995). Explaining development and change in organizations. Academy of management review, 20(3), 510-540.
Van de Ven, A. H., & Sun, K. (2011). Breakdowns in implementing models of organization change. Academy of Management Perspectives, 25(3), 58-74.
Wagner, E. L., & Newell, S. (2007). Exploring the Importance of Participation in the Post-Implementation Period of an ES Project : A Neglected Area. Journal of the Association for Information Systems, 8(10), 508–524.
Wagner, E. L., & Piccoli, G. (2007). Moving beyond user participation to achieve successful IS design. Communications of the ACM, 50(12), 51-55.
Wang, E. T., Ju, P. H., Jiang, J. J., & Klein, G. (2008). The effects of change control and management review on software flexibility and project performance. Information & Management, 45(7), 438-443.
Wiedemann, A., & Wiesche, M. (2018). How to Implement Clan Control in DevOps Team. Twenty-fourth Americas Conference on Information Systems, US: New Orleans, 2018.
Wiener, M., Remus, U., Heumann, J., & Mähring, M. (2015). The effective promotion of informal control in information systems offshoring projects. European Journal of Information Systems, 24(6), 569-587.
Wiener, M., Mähring, M., Remus, U., & Saunders, C. S. (2016). Control Configuration and Control Enactment in Information Systems Projects: Review and Expanded Theoretical Framework. MIS Quarterly, 40(3), 741-774.
Wiener, M., Cram, A., & Remus, U. (2017). The view from the top – how senior executives exercise control over information systems projects to enhance performance. In Proceedings of the 25th European Conference on Information Systems (ECIS), Guimarães, Portugal, June 5-10, 2017 (pp. 1423-1438).
Willis, R., & Chiasson, M. (2007). Do the ends justify the means? A Gramscian critique of the processes of consent during an ERP implementation. Information Technology & People, 20(3), 212-234.
Winter, S., Berente, N., Howison, J., & Butler, B. (2014). Beyond the organizational ‘container’: Conceptualizing 21st century sociotechnical work. Information and Organization, 24(4), 250-269.
Yin, R. K. (2017). Case study research and applications: Design and methods. Sage publications.
AJIS publishes open-access articles distributed under the terms of a Creative Commons Non-Commercial and Attribution License which permits non-commercial use, distribution, and reproduction in any medium, provided the original author and AJIS are credited. All other rights including granting permissions beyond those in the above license remain the property of the author(s).