SAQA All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.
SOUTH AFRICAN QUALIFICATIONS AUTHORITY 
REGISTERED QUALIFICATION: 

Master of Philosophy in Information Technology Governance 
SAQA QUAL ID QUALIFICATION TITLE
97665  Master of Philosophy in Information Technology Governance 
ORIGINATOR
Nelson Mandela University 
PRIMARY OR DELEGATED QUALITY ASSURANCE FUNCTIONARY NQF SUB-FRAMEWORK
CHE - Council on Higher Education  HEQSF - Higher Education Qualifications Sub-framework 
QUALIFICATION TYPE FIELD SUBFIELD
Master's Degree  Field 10 - Physical, Mathematical, Computer and Life Sciences  Information Technology and Computer Sciences 
ABET BAND MINIMUM CREDITS PRE-2009 NQF LEVEL NQF LEVEL QUAL CLASS
Undefined  180  Not Applicable  NQF Level 09  Regular-Provider-ELOAC 
REGISTRATION STATUS SAQA DECISION NUMBER REGISTRATION START DATE REGISTRATION END DATE
Registered-data under construction  EXCO 0324/24  2024-07-01  2027-06-30 
LAST DATE FOR ENROLMENT LAST DATE FOR ACHIEVEMENT
2028-06-30   2031-06-30  

Registered-data under construction

The qualification content is currently being updated for the qualifications with the status “Registered-data under construction” or showing “DETAILS UNDER CONSTRUCTION” to ensure compliance with SAQA’S Policy and Criteria for the registration of qualifications and part-qualifications on the National Qualifications Framework (NQF) (As amended, 2022). These qualifications are re-registered until 30 June 2027 and can legitimately be offered by the institutions to which they are registered.

 

In all of the tables in this document, both the pre-2009 NQF Level and the NQF Level is shown. In the text (purpose statements, qualification rules, etc), any references to NQF Levels are to the pre-2009 levels unless specifically stated otherwise.  

PURPOSE AND RATIONALE OF THE QUALIFICATION 
Purpose:
The purpose of this qualification is to prepare and equip learners with advance knowledge and skills that can contribute to the effective governance and assurance of IT services. A qualified learner will be able to:
  • Integrate and apply the latest advances in the broad field of information technology governance with specialised knowledge and skills in related fields such as Information Systems Assurance, Information Security Management, Information Technology Risk Management and Information
    Technology Service Management.
  • Critically review and analyse information technology systems and demonstrate competency to manage vulnerabilities, ensure compliance and institute control activities to address risk and information security related aspects within an organisation.
  • Promote and implement international IT governance related practices through using international standards, regulations, and best practices, [such as, ISO38500, ISO 27000 series and CobiT], as well as national legislation.
  • Oversee and assess an organisation's information, IT and/or IS risk management processes.

    Rationale:
    The Master of Philosophy in Information Technology Governance is designed to provide learners with specialised skills on governing Information Communication Technology. Chapter 5 of the King III Report in Corporate Governance holds Information Technology (IT) in high regard. It is stipulated that IT resources need to be governed properly through the process of IT governance. It is further stipulated that, such processes should be applicable to all public and private enterprises. In this regard, the Board of Directors has the responsibility of overseeing such processes.

    The following is also stated in the King III Report:
  • A suitable information security management programme should be developed and implemented in the enterprise.
  • IT should form an integral part of the company risk management process.
  • an IT internal control framework is adopted and assurances thereof are regularly reported to the Board of Directors.
  • IT related laws, regulations and standards should be considered.

    It can therefore be accepted that IT service management integrates effective IT governance as IT should further be introduced in an enterprise as a service and not as technology. In the recent survey conducted with amongst three of the 'big four' auditing firms (KPMG, PWC and EY), it was generally confirmed there is lack of expertise in this field of study. They also indicated that a postgraduate qualification in the field of IT governance would address the need for skilled and knowledgeable expertise and that sound investigative and creative problem solving and research skills are required to properly apply the related subject knowledge to effectively devise IT governance frameworks. In this regard, the learner would be able to address IT governance and assurance needs in South Africa. 
    		•

    LEARNING ASSUMED TO BE IN PLACE AND RECOGNITION OF PRIOR LEARNING 
    Recognition of Prior Learning (RPL):
    A relevant bachelor's Honours Degree or Postgraduate Diploma would be the usual route to admission. However, in particular cases learners without such qualification but with proven expertise and competency will be allowed to apply for provisional admission status for acceptance to the qualification in line with the institution's and the national RPL policies.
    RPL will be considered by the appropriate Head of Department (HOD) based on a portfolio of evidence. This portfolio of evidence should be convincing to an extent that a sound knowledge of the theoretical underpinnings and appropriate practical skills, typical to an IT and/or information systems qualification at 4th year level, has been obtained. The experience gained in industry will typically be assessed against the Exit Level Outcomes of such a 4th year qualification.

    The RPL process in the Faculty of Engineering, the Built Environment and Information Technology is initiated by the HOD asking the learner to prepare a portfolio of evidence, based on previous studies as well as experience indicating that the Exit Level Outcomes of an IT and/or information systems qualification has been met. The HOD appoints a suitable independent assessor to assess the portfolio of evidence. The independent assessor will make a recommendation to the HOD. If the recommendation is positive, a Faculty RPL committee is constituted to assess the portfolio and recommendation of the initial independent assessor. This committee makes a final decision in this regard.

    Entry Requirements:
    The minimum entry requirement for access to this qualification is:
  • A four-year cognate Bachelor's Degree at NQF Exit Level 8, or equivalent. 
    		•

    RECOGNISE PREVIOUS LEARNING? 
    Y 

    QUALIFICATION RULES 
    This qualification consists of compulsory and elective modules at NQF Level 9 totalling 180 Credits.
    Compulsory Modules, 90 Credits:
  • Information Technology Management, 15 Credits.
  • Information Systems Assurance, 15 Credits.
  • Information Security Management, 15 Credits.
  • Information Technology Service Management, 15 Credits.
  • Information Technology Risk Management, 15 Credits.
  • Information Technology Law, 15 Credits.

    Elective Modules (select one):
  • Research Treatise in IS Auditing, 90 Credits.
  • Research Treatise in IT Law, 90 Credits.
  • Research Treatise in IS/IT Management, 90 Credits. 
    		•

    EXIT LEVEL OUTCOMES 
    1. Integrate and apply the latest advances in the broad field of Information Technology governance with specialised knowledge and skills in related fields such as Information Systems Assurance, Information Security Management, Information Technology Risk Management and Information Technology Service Management.
    2. Critically review and analyse information technology systems and demonstrate competency to manage vulnerabilities, ensure compliance and institute control activities to address risk and information security related aspects within an organisation.
    3. Promote and implement international IT governance related practices through using international standards, regulations, and best practices, [such as, ISO38500, ISO 27000 series and CobiT], as well as national legislation.
    4. Oversee and assess an organisation's information, IT and/or IS risk management processes.
    5. Master suitable IT and business related research skills. 

    ASSOCIATED ASSESSMENT CRITERIA 
    Associated Assessment Criteria for Exit-Level Outcome 1:
  • Specialist theoretical knowledge and fundamental IT governance concepts and principles are applied to address complex and challenging problems.
  • The ability to appropriately identify and solve problems and issues in the discipline of IT governance is demonstrated.
  • IT governance theories and best practices are evaluated and critiqued.
  • Sub-fields to IT governance are integrated in order to develop a macro vision of the enterprise IT governance.
  • Complex unstructured IT governance related problems are analysed, synthesised and resolved.

    Associated Assessment Criteria for Exit-Level Outcome 2:
  • Strategic theories, frameworks and best practices are applied in an IT governance context.
  • Sound and timeous decisions are made to assess effectiveness of information systems.
  • Vulnerabilities in information systems are properly assessed.
  • A sound set of controls are identified, implemented and managed.
  • Skills to manage an enterprise risk profile are demonstrated via suitable case studies.

    Associated Assessment Criteria for Exit-Level Outcome 3:
  • Suitable best practices to govern IT are identified.
  • The most suitably best practices to senior management are effectively promote.
  • Best practices to govern IT are implemented, effectively managed and maintained.
  • Relevant applicable international standards are identified and organisational compliance to standards is evaluated.

    Associated Assessment Criteria for Exit-Level Outcome 4:
  • A sound knowledge of risk management practices are demonstrated through using suitable case studies.
  • Theoretical risk management practices are applied.
  • Organisational risk management processes are introduced, applied and managed.
  • Intellectual rigour regarding risk management practices is demonstrated through critical and analytical thinking through suitable case studies.

    Associated Assessment Criteria for Exit-Level Outcome 5:
  • Literature reviews to identify related subject information are conducted and applied.
  • Contextual information of the application domain is identified and assessed.
  • Suitable research methods are identified and applied.
  • IT governance solutions to application domains are designed.

    Integrated Assessment:
    Regular assessments of holistic knowledge skills and attributes of learners will be performed. The essence of the assessment approach will be that of formative and summative assessments, which will incorporate written assignments, practical work and a formal written examination. Written assignments are directly linked to theory and will incorporate the theory and skills related to the exit level outcomes.

    Each of the six modules will be offered and assessed in a manner to ensure that the subject theory and material are mastered. In each case assignments will be done where students will have to prove they have mastered the ability to understand, integrate and apply the theory learnt in the module in practice using suitable case studies. The learners' insight in integrating and applying knowledge in practical situations will be assessed through such case studies, assignments and tasks. The case studies, assignments and tasks will be constructed in such a manner that assessment moves gradually from the formative to the summative. The examination in each module will also contribute towards ensuring that formative and summative assessments do take place, specifically through the usage of appropriate case studies.

    The research treatise, where all theory, skills and competencies should be integrated towards effective design and development competencies will also provide an opportunity for effective summative assessment. 
    		•

    INTERNATIONAL COMPARABILITY 
    Information Technology Governance Institute:
    The Information Technology Governance Institute is responsible for the governance and management of enterprise IT and has become a critical facet of effective enterprise governance. It helps ensure that IT supports business goals, optimises business investment in IT, and appropriately manages IT-related risk and opportunities. This institute is recognised by the United Nation Public Administration Network for good practice and setting standard with regard to IT Governance.

    Conclusion:
    This qualification compares favourably with the roles and standards set by the Information Technology Governance Institute with regard to the objective of corporate governance of Information Communication Technology. They both integrate IT within governance planning and stress it as equal to other components of governance. 

    ARTICULATION OPTIONS 
    This qualification allows possibilities for both horizontal and vertical articulation.

    Horizontal articulation:
  • Master of Commerce in Information Technology Management, at NQF Level 9.

    Vertical articulation:
  • Doctor of Philosophy in Information Technology Management, at NQF Level 10. 
    		•

    MODERATION OPTIONS 
    N/A 

    CRITERIA FOR THE REGISTRATION OF ASSESSORS 
    N/A 

    NOTES 
    N/A 

    LEARNING PROGRAMMES RECORDED AGAINST THIS QUALIFICATION: 
     
    NONE 


    PROVIDERS CURRENTLY ACCREDITED TO OFFER THIS QUALIFICATION: 
    This information shows the current accreditations (i.e. those not past their accreditation end dates), and is the most complete record available to SAQA as of today. Some Primary or Delegated Quality Assurance Functionaries have a lag in their recording systems for provider accreditation, in turn leading to a lag in notifying SAQA of all the providers that they have accredited to offer qualifications and unit standards, as well as any extensions to accreditation end dates. The relevant Primary or Delegated Quality Assurance Functionary should be notified if a record appears to be missing from here.
     
    1. Nelson Mandela University 


    All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.