Measuring Maturity Index of Risk Management for IT-Governance Using Fuzzy Ahp and Fuzzy Topsis

Abstract

Increased business competition among the companies demand them to develop more. The development is not separated from the business risk and weaknesses. The business risks and weaknesses can be known and evaluated quickly using SOP (Standard Operating Procedure) which is simulated through YAWL application. Once the simulated weaknesses are identified, then it is conducted the index maturity of risk management to determine the company's understanding and concern on the existence of risks in the company's business process and risk management responsibilities within the organization itself. The method of measuring the evaluation of maturity index on risk management mostly uses measurement step by assessing and weighing the result from observation, interview, survey, etc., but if the data is not quite good then it will cause problem. Therefore, we need a new model for measuring and knowing the risk alternatives faster to be able to initiate risk-prevention. In this research, fuzzy logic model is used in making decision of the biggest risk alternative and to be handled for the first time. Fuzzy AHP will be used to calculate the value of the criteria, taken from the maturity index COBIT and Fuzzy TOPSIS to determine the selected alternative rating. It is observed that Managed and Measurable maturity index have the smallest weight of 0.0355 compared to other criteria (That means the company does not reach the level of maturity to understand risks in managed and measure) and Database Server achieves very serious attention because the score is very high compared to the other alternatives of 1.1186.