Information Systems Governance in Nigerian Universities: A Policy Compliance Assessment

Information systems (IS) governance in Nigerian universities determines the strategic alignment, risk management, and performance accountability of the technology platforms that support academic and administrative functions. This study assesses IS governance policy compliance at six Nigerian universities spanning the North West (Bayero University Kano), South West (University of Lagos), South East (University of Nigeria Nsukka), South South (University of Port Harcourt), North Central (University of Abuja), and North East (University of Maiduguri) zones. A governance assessment instrument derived from the COBIT 2019 framework was administered to 30 university IT directors and registrar staff. Findings reveal that fewer than 40 percent of assessed universities maintain board-approved IT governance policies, and only two institutions have defined IS risk appetite statements. Compliance with data protection obligations under the Nigeria Data Protection Regulation (NDPR) is inconsistent, with four of six universities lacking designated data protection officers. The study identifies weak linkages between university senate committees and IT governance oversight as a structural gap enabling technology decisions to proceed without formal academic leadership accountability. Professional recommendations include mandatory IS governance training for university management boards and NUC compliance requirements for IS governance policy documentation. Keywords: information systems governance, university, COBIT, NDPR, Nigeria