Information System Audit in SaaS Start-Up Company using COBIT 4.1 Focus on Deliver and Support Domain

Abstract

Information system audit is a series of processes undertaken to ensure the standard of company operational procedures based on a particular framework—in this case is COBIT 4.1 focus on Deliver and Support domain. In this article, we have audited one of Startup Company in Jakarta, Indonesia which engaged in Software as a Service (SaaS), specifically HR and Accounting Software. From these audit process, we realized that the startup company does not think that the standard operational procedure is important enough to be made. They still focused on developing product and the company is not stable enough. In this case, SaaS Start-Up Company got low maturity level in some control objectives that not their major operational—e.g. data and configuration management—but have a stable operational standard on service desk management and user training.