R
, SK2601 Assignment 1 Semester 1 2026 - DUE 1 April 2026; 100% TRU
STED Com
RSK2601 Assignment 1 – Semester 1 (2026)
Corporate Governance and King IV Principle 16
Board Accountability for Technology and Information Governance in Terms of
King IV Principle 16
Corporate governance refers to the system by which organisations are directed and controlled in
order to ensure accountability, fairness, transparency, and responsibility in their operations. In
South Africa, corporate governance is guided primarily by the Companies Act 71 of 2008 and
the King IV Report on Corporate Governance for South Africa. King IV adopts a principles-
based and outcomes-driven approach, emphasising ethical leadership, good performance,
effective control, and legitimacy. Principle 16 of King IV specifically requires that the governing
body should govern technology and information in a way that supports the organisation in
setting and achieving its strategic objectives.
In the given scenario, a South African retail company introduced an artificial intelligence (AI)-
driven customer data analytics system to improve marketing strategies and increase sales.
Although the board approved the initiative, it failed to establish proper oversight mechanisms
and data governance policies. Six months later, the company faced regulatory penalties for
processing customer data without proper consent, in contravention of the Protection of
Personal Information Act (POPIA). This situation highlights shortcomings in the board’s
fulfilment of its responsibilities under King IV Principle 16.
King IV makes it clear that the board holds ultimate accountability for technology and
information governance. Even when implementation is delegated to management, oversight
and strategic direction remain the responsibility of the governing body. In this case, while the
board approved the AI system as part of its growth strategy, it failed to ensure that adequate
governance frameworks were in place. Principle 16 requires that technology and information be
governed in a manner that aligns with the organisation’s strategy, manages risks effectively, and
ensures compliance with relevant laws. By not establishing clear oversight structures, such as a
dedicated IT governance committee or defined reporting lines, the board neglected its duty to
exercise proper control over the technological innovation it endorsed.
Furthermore, King IV emphasises that information should be treated as a strategic asset. This
includes ensuring that personal data is collected, processed, stored, and used lawfully and
ethically. POPIA regulates the lawful processing of personal information and requires that
organisations obtain informed consent from data subjects. The company’s failure to secure
, SK2601 Assignment 1 Semester 1 2026 - DUE 1 April 2026; 100% TRU
STED Com
RSK2601 Assignment 1 – Semester 1 (2026)
Corporate Governance and King IV Principle 16
Board Accountability for Technology and Information Governance in Terms of
King IV Principle 16
Corporate governance refers to the system by which organisations are directed and controlled in
order to ensure accountability, fairness, transparency, and responsibility in their operations. In
South Africa, corporate governance is guided primarily by the Companies Act 71 of 2008 and
the King IV Report on Corporate Governance for South Africa. King IV adopts a principles-
based and outcomes-driven approach, emphasising ethical leadership, good performance,
effective control, and legitimacy. Principle 16 of King IV specifically requires that the governing
body should govern technology and information in a way that supports the organisation in
setting and achieving its strategic objectives.
In the given scenario, a South African retail company introduced an artificial intelligence (AI)-
driven customer data analytics system to improve marketing strategies and increase sales.
Although the board approved the initiative, it failed to establish proper oversight mechanisms
and data governance policies. Six months later, the company faced regulatory penalties for
processing customer data without proper consent, in contravention of the Protection of
Personal Information Act (POPIA). This situation highlights shortcomings in the board’s
fulfilment of its responsibilities under King IV Principle 16.
King IV makes it clear that the board holds ultimate accountability for technology and
information governance. Even when implementation is delegated to management, oversight
and strategic direction remain the responsibility of the governing body. In this case, while the
board approved the AI system as part of its growth strategy, it failed to ensure that adequate
governance frameworks were in place. Principle 16 requires that technology and information be
governed in a manner that aligns with the organisation’s strategy, manages risks effectively, and
ensures compliance with relevant laws. By not establishing clear oversight structures, such as a
dedicated IT governance committee or defined reporting lines, the board neglected its duty to
exercise proper control over the technological innovation it endorsed.
Furthermore, King IV emphasises that information should be treated as a strategic asset. This
includes ensuring that personal data is collected, processed, stored, and used lawfully and
ethically. POPIA regulates the lawful processing of personal information and requires that
organisations obtain informed consent from data subjects. The company’s failure to secure
