Date of Conferral

10-26-2026

Date of Award

October 2026

Degree

Doctor of Information Technology (D.I.T.)

School

Information Systems and Technology

Advisor

Cheryl Waters

Abstract

Software upgrade decisions are a critical concern for Information Technology (IT) managers because ineffective upgrades can expose organizations to data breaches, ransomware, and operational disruption. The purpose of this qualitative pragmatic inquiry was to explore strategies IT managers use when making software upgrade decisions to ensure data integrity and data protection. The population consisted of experienced IT managers in the southeastern United States. Guided by the technology-organization-environment (TOE) framework, data were collected through semistructured interviews with 6 IT managers and analyzed thematically using the modified van Kaam phenomenological method. Key themes included risk-based decision-making, governance and compliance-driven security, and human factors and cybersecurity awareness. Findings indicated that effective upgrade decisions integrate technological capabilities, organizational governance, and environmental influences to strengthen cybersecurity resilience and protect information assets. IT managers should implement a structured, risk-based software upgrade process incorporating testing, governance, compliance requirements, and proactive lifecycle management. The implications for positive social change include the potential for IT managers across healthcare, education, financial services, government operations, defense, and critical infrastructure sectors to implement effective software upgrade strategies that strengthen data integrity, cybersecurity, and organizational resilience. These improvements may enhance public trust in digital systems by reducing security vulnerabilities, protecting sensitive personal information, and improving the security and privacy of citizens and employees.

Share

 
COinS