Navigating Framework Misfit: A Systematic Literature Review of IT Governance Suitability Across Resource-Constrained SMEs And Large Enterprises In South Africa

This research project investigates the suitability of Information Technology Governance (ITG) frameworks within South African organisations, with particular emphasis on the differences between resource-constrained Small and Medium Enterprises (SMEs) and large enterprises. The study is motivated by the growing strategic importance of IT governance in ensuring cybersecurity resilience, regulatory compliance, digital transformation, and organisational sustainability. Although internationally recognised frameworks such as COBIT, ITIL, and ISO/IEC 38500 are widely promoted as governance best practices, these frameworks were primarily developed for highly formalised and resource-rich organisations. As a result, many South African SMEs experience significant challenges implementing these governance structures due to limited financial resources, insufficient governance expertise, organisational informality, and technological constraints. The project therefore seeks to examine how governance frameworks align—or fail to align—with differing organisational environments, a phenomenon conceptualised in this study as “framework misfit.” Using a PRISMA-guided Systematic Literature Review (SLR), the study systematically analyses peer-reviewed literature published between 2016 and 2026 to identify governance implementation patterns, governance maturity differences, implementation barriers, and governance adaptation strategies across organisational categories.\n\nThe primary purpose of the research is to develop a deeper understanding of how organisational scale, governance capability, institutional pressures, and resource availability influence IT governance effectiveness within emerging-market contexts. The study aims to contribute both theoretically and practically. Theoretically, it advances the concept of framework misfit and proposes Adaptive Governance Suitability Theory, which argues that governance effectiveness depends on aligning governance complexity with organisational capability and contextual realities. Practically, the research is expected to generate recommendations for policymakers, governance practitioners, SMEs, and large organisations by proposing scalable and context-sensitive governance approaches rather than one-size-fits-all governance models. Expected outcomes include the development of an IT Governance Framework Suitability Matrix tailored to the South African environment, improved understanding of governance barriers affecting SMEs, and policy recommendations supporting more inclusive and adaptive governance implementation. Ultimately, the study seeks to contribute to the broader discourse on digital governance in emerging economies by promoting governance models that balance compliance, cybersecurity, strategic agility, and operational feasibility.