IT Governance Framework Research Articles

Improving Productivity and Reducing Costs in an IT Service Provider: Applying the Lean Six Sigma Methodology

Objective: to present the use of the Six Sigma framework as a framework for IT Governance, in a multinational company that operates in the market of IT outsourcing services, with a view to assisting in the improvement of productivity, in its consequent significant reduction of costs and a better operational performance in the processes of the company providing outsourced IT services. Theoretical Framework: The study addresses concepts of the Lean philosophy, as well as the Six Sigma framework and the marriage of Lean and Six Sigma as a way to obtain advantages from the application of its methods, meeting the needs of the organization. Method: In this study, quantitative and qualitative methods were used from a descriptive research. A literature review and associated issues were carried out and a case study was applied from the results obtained through a project in a large multinational company that provides IT outsourcing services. Outcome and Discussion: The combination of Six Sigma with the business process offered the company an opportunity for cost reduction and improved its competitive advantage in an increasingly competitive and quality-driven market. Regarding the implementation of the incident governance process, a reduction of 24% was obtained; Regarding actions to reduce the number of overtime, a reduction of 40% was obtained. A total monthly reduction of US$ 5,589 was obtained and annually the reduction amount plus benefits reached US$ 67,068. Research Implications: Research contributes to the improvement of quality and significant cost reduction with the application of the Six Sigma framework, properly tested and demonstrated in an organization. Originality/Value: This study contributes to the literature by using the Six Sigma framework as a framework for IT Governance in order to help improve productivity with consequent significant cost reduction and better operational performance in the processes of an outsourced IT service provider. The relevance and value of this research are evidenced by the demonstration of the benefits obtained in the environment of the company under analysis.

Establishing IT Governance Framework in Large Tertiary Hospital: Case Study, Challenges and Recommendations

Establishing IT Governance Framework in Large Tertiary Hospital: Case Study, Challenges and Recommendations

EVALUATION OF IT GOVERNANCE BASED ON SPBE USING COBIT 2019 AND ISO/IEC 38500:2015

SPBE is a mandatory IT Governance framework implemented by all government agencies in Indonesia. Since its implementation in 2018, the national average maturity level remains very low, with the main obstacle being in the fundamental domain of IT Governance, as identified during the 2022 evaluations. An evaluation was conducted on government agencies facing similar challenges using COBIT 2019 as the framework, providing the best practices and widely used standards for IT Governance. This was combined with the principles of ISO/IEC 38500:2015, an international standard for IT Governance. Maturity level measurements were taken to assess the current conditions of the agencies and provide improvement recommendations linked to indicators in the SPBE maturity level evaluation guidelines. The improvement recommendations provided were able to enhance maturity levels holistically, not only in the IT Governance domain but across the entire management processes and product services of the agencies, aiming to achieve sustainable benefits and objectives.

IT Governance Framework Ensuring Effective Management and Compliance

IT Governance Framework Ensuring Effective Management and Compliance

Audit Tata Kelola Teknologi Informasi Pada PT. XXX Menggunakan COBIT 2019 Dengan Domain Build, Acquire And Implement01

The rapidly growing development of Information Technology today has affected various business sectors. One of them is the manufacturing industry as carried out by PT. XXX. PT. XXX is one of the companies that has implemented information technology as a strategy to compete in the company's business. However, the information technology implemented is still not effective in achieving the company's goals. This study aims to evaluate IT governance at PT. XXX using the COBIT 2019 framework. COBIT is an internationally recognized framework for effective and efficient IT governance. This study uses a qualitative evaluation method, by collecting data through interviews with relevant parties at PT. XXX, as well as analysis of documents and policies related to IT governance. This data is then analyzed and compared with the COBIT 2019 framework to identify gaps and areas that need improvement. After the analysis, it was found that the objective that could be evaluated or audited was Managed Programs and Projects, BAI01. In this research, the results of the capability level on the PT XXX website were obtained at level 4 with an achievement value of 91%.

THE DETERMINANTS OF EFFECTIVE IT GOVERNANCE, CASE OF HIGHER EDUCATION INSTITUTION IN INDONESIA

This considers points to explore the impacts of an IT steering committee (ITS), involvement of senior management in IT (ISM), and an organizational performance measurement system (OPM) on efficient IT governance (ITG) within the framework of Indonesian higher instruction teach. This study used an online survey with self-administered, quantitatively based questionnaires as its methodology. 123 responders were given the tool, which was made using a Google Form and was intended for those who work in university IT governance. The findings indicate that a successful IT governance framework in HEI is significantly influenced by the IT steering committee and organizational performance measurement system. Nonetheless, senior management's involvement in IT had no effect on efficient IT governance. The study's findings can assist HEI management in determining the variables that affect the implementation of IT governance in an efficient manner.

Analisis Resiko Keamanan Informasi Website Repository Digital Library Menggunakan Framework ISO/IEC 27001 & 27002: Studi Kasus Perguruan tinggi X

The continuous evolution of digital repositories in the era of globalization, especially in context of higher education digital libraries, poses security risks that raise concerns among users. Existence of sensitive user data that requires protection by universities adds to this concern. This research aims to conduct comprehensive analysis of information security risks associated with digital library repository websites. This research seeks to identify potential vulnerabilities, threats that could compromise the confidentiality, integrity and availability of digital assets stored in repositories. Through detailed risk analysis, this research provides actionable insights and recommendations to improve the information security posture of digital libraries using the ISO/IEC 27001 and 27002 IT governance framework specifically tailored to information security standards. This research uses a literature review and interviews with responsible parties at the University of X's digital library repository. Findings show that the use of tools such as Acunetix helps identify vulnerabilities in web repositories. Risk mitigation in digital library web repositories involves the application of ISO/IEC 27001, 27002 standards, which results in specific risk mitigation actions. For example, universities should create policies to monitor information technology assets, ensuring regular monitoring to protect technology assets. In addition, for Database Management System (DBMS) management (e.g., MySQL, PostgreSQL, Oracle, Ms SQL Server), colleges must facilitate easy access and storage of information. By implementing the recommendations obtained from this research, higher education institutions can ensure safe environment for users accessing digital library web repositories, thereby reducing concerns about the security of their information.

Evaluasi Tata Kelola Repository Perpustakaan UIN SUSKA Menggunakan COBIT 2019

The development of information technology is very influential on the business world and organizations so that IT governance is needed. This information technology is expected to be useful for stakeholders in making decisions. COBIT 2019 is an IT governance framework that meets the standards in implementing IT governance. The library at UIN Suska Riau has implemented information technology in storing and managing student final assignments or what is known as the UIN SUSKA RIAU Repository system. In conducting a business evaluation, the implementation of the Repository system needs to be maintained, monitored and evaluated for IT governance to determine the process and management of IT usage. After the analysis, it can be seen that the results of the evaluation using the EDM 01, EDM 02 and EDM 03 domains, show that IT governance in the library is at level 3 - established. With some notes that must be analyzed in the EDM 01 domain there is still a lack of communication in IT management, in the EDM 02 domain the application of IT values is not optimal, and what needs to be considered in EDM 03 is the lack of awareness of IT risks.

ANALYSIS OF UNIVERSITY HELPDESK INFORMATION TECHNOLOGY GOVERNANCE USING COBIT 2019 AND FUZZY AHP

University Helpdesk as an information system service provider provided by PTIPD University assists students, staff, and lecturers in solving problems using information systems and networks, as well as updating information online and offline. Based on the Regulation Minister of Religion of the Republic of Indonesia Number 17 of 2013 to improve the quality of university delivery and services, and GUG (Good University Governance) implementation, governance framework is needed to align the vision, mission, and objectives. IT governance framework covering management, operational, maintenance, monitoring, and evaluation processes. The analysis of IT governance with COBIT 2019 resulted in the preparation of recommendations based on the mapping of the domain (area) of the 2019 COBIT design factors. These recommendations are needed for an analysis of the maturity level of PTIPD university helpdesk information technology governance. The research data were taken from annual reports and Key Performance Indicators, observations, and interviews. Based on Design Factors 1-11 to determine domain area, the result is needing improved governance perspective APO12-Managed Risk and DSS05-Managed Security Services. The focus area is risk management and service security management in terms of data and information. The expected ability level is at level 4, while the current ability level analysis is at level 2, the gap level analysis is 2 levels different. The result is to get 12 recommendations and 2 main recommendations using the Fuzzy-AHP method based on the weighting of the criteria of Regulation number 12 of 2012 the management of information technology in university.

IoT-Gov: A structured framework for internet of things governance

The rise of artificial intelligence and smart devices with decision-making capabilities has highlighted the critical need for governance in the field of IoT. Effective governance can ensure accountability, reliability, security, and privacy in the development and use of these technologies, as well as safeguard against unethical or malicious activities. Moreover, it can drive innovation and growth in the IoT and AI industries, while fostering public trust in these technologies. The objective of this paper is to propose a new governance framework for IoT, called IoT-Gov. To achieve this objective, the paper first defines the requirements for IoT governance and assesses the compatibility of existing IT and IoT governance frameworks with these requirements. The limitations of current frameworks prove the need for a new framework, and IoT-Gov is presented as a solution. The paper explains the layers and processes of the proposed framework and provides a high-level simulation of its deployment. Specifically, the paper illustrates how the proposed framework can be applied in an example scenario of access control in a smart hospital parking, enabled with Blockchain technology. Finally, the paper concludes with an exploration of potential challenges and future research directions for the framework.

Leverage the COBIT 2019 Design Toolkit in an SME Context: A Multiple Case Study

Organizations today exploit IT to achieve business value and competitive advantages; it is the disruptive effect of digital transformation. However, investing in IT without proper control and governance over enterprise IT (GEIT) can expose organizations to cyber-risks and IT project failures. This problem affects both multinationals and small organizations. In particular, small and medium-sized enterprises (SMEs) struggle to implement IT-governance also due to the complexity of the standard IT-governance frameworks. In this study, five case studies were conducted with five manufacturing companies in Italy whose headquarters are located in the Lombardy region to investigate the potential benefits for IT practitioners of using the COBIT 2019 Design Toolkit, an Excel spreadsheet that facilitates the development of a governance system. The results are encouraging, the IT practitioners appreciated the COBIT 2019 Design Toolkit to map the IT resources and issues, prioritize the most important governance and management objectives, and align business and IT strategy. However, some criticalities emerged, for instance, the limited prescriptive power of the tool and the language, which is sometimes difficult to understand for IT practitioners. It should also be noted that current IT-governance implementation in Italian manufacturing SMEs appears to be very limited. Further, it should be highlighted that this study was using COBIT 2019 before ISACA issued “COBIT for Small and Medium Enterprises Using COBIT 2019” which could already have a positive impact on the level of comprehension.
 Keywords: COBIT 2019, IT-governance, IT-governance frameworks, multiple case study

The Challenges of Compliance it Governance Frameworks in the UAE

IT Governance frameworks such as COBIT, ITIL, and ISO have become the most important guidelines for IT Governance (ITG). These frameworks are used by organizations as a tool to evaluate their own ITG systems and to help the IT managers to bridge any gaps between the technical issues, business risks, and control requirements. The main objective of the research is to study the various IT governance frameworks used by the organizations and the challenges they face in compliance with the IT Governance framework, and the steps taken to overcome these challenges in the UAE. This objective was achieved by using a quantitative approach through a questionnaire felt by a sample of IT executives or IT professionals working at different private and public organizations in the UAE. The results of the study discovered that most of the organizations use ITIL and ISO as their preferred choice of the ITG framework, and the major challenge faced by the organizations in compliance with the ITG frameworks is the lack of people’s acceptance which overcomes by training people using tools and systems with the frameworks used in the organizations. This study provides useful information for future researchers to understand the challenges in implementing the ITG frameworks and how to overcome them in the context of the private and public sectors in the UAE.

A Framework of IT Governance for Higher Educational Institutions in the Philippines Amid and Beyond COVID-19 Pandemic

Higher Education Institution are complex organizations that require an adequate IT infrastructure and information systems to fulfill their mission. IT governance as ‘an important part of enterprise (corporate) governance that articulates the processes, structures and relational mechanisms in the organization that enable both business and IT people to execute their responsibilities in support of business/IT alignment and the creation of business value’. It is evident that there is a lack of studies on IT governance for higher education and no studies conducted yet on this paradigm. Due to the considerable difficulty in implementing IT governance frameworks for different organizations, thus may require different solutions for IT governance. The propose model illustrates how IT governance align with enterprise governance and corporate governance of Philippines’s Higher Education Institution. A Design Science Research (DSR) methodology was adopted which is extensively used in information systems research to solve complex problems. The researchers thus recommends that a combination of COBIT and ISO/IEC 3800 guidelines be adopted and used with a balanced scorecard for enterprise governance as IT Governance Framework for higher education institutions in the Philippines. This will ensure effectiveness and efficiency of IT processes as well as accountability to all stakeholder in the higher educational institutions.

Information Technology Governance: Lessons Learned from The Covid-19 Crisis

IT governance focuses on how to align Information Technology with the organization's goals and strategy so that the organization can deliver value from IT. During the Covid-19 crisis, many lessons and insights for ITG have come to light. As the new reality imposed by the ongoing pandemic forced businesses to continuously adopt new technologies, it has also highlighted their need for a stronger IT Governance framework to face the uncertainties and the risks that go hand in hand with IT. This paper aims to reflect on Covid-19 implications for IT Governance. Lessons learned from this crisis can help us envision and adopt an improved Information Technology Governance approach that is even more resilient to deal with future disruptions.

Changes in IT governance and its impact on organizational business process: Case study at Indonesia Supreme Audit Institution (BPK)

IT rapid development has encouraged BPK to implement the best possible IT governance since their key performance indicator regarding audit result follow up does not meet the target, which is 55% of the 65% target. This study uses qualitative methods to identify the root causes and steps implemented through the IT governance framework. Data was obtained through document analysis, literature study, and interview validation. With limited related research discussing IT governance in the public sector, the results of this study: IT architecture, and business application needs as significant factors in promoting IT as a business process enabler, could be adopted by other similar organizations.

Delving Into the IT Governance-Management Communication Interface

This work is devoted to addressing the IT governance - management communication aspects, considering that their responsibilities are different, but complementary, in developing an IT governance framework. Our research question consists of finding which aspects (and subsequent themes) from IT governance literature may be considered. We performed a systematic scoping literature review, as our objective is to conduct a wide-ranging search on the aspects that communicate the governance of IT and its management. Because we want to broadly know the communication aspects and subthemes, we first filtered the articles reading each title and abstract and the relevant studies were reduced to 174. Finally, after an exhaustive reading, review, and categorization, 92 studies were selected. We identified 14 aspects and 50 themes regarding the communication interface between IT governance and IT management. Our study brings insights on a clearer IT governance-management interface conceptualization and identifies an agenda for further research on it.

Management’s Fiduciary Responsibility Towards IT Governance In The Context Of The King III Code Of Corporate Governance In South Africa

The purpose of this study was to examine the extent to which South African listed companies trading on the Johannesburg Securities Exchange (JSE) are complying with IT governance imperatives in the context of the King III Code of Corporate Governance. Management information systems and usage of computers are now embedded in business processes to the extent that most firms will be dysfunctional should these tools become unavailable. The underlying theoretical setting for this study is anchored on the agency theory and the Porter’s competitive five forces model. Since there were inadequate constructs on the subject, a combination of research methods were used: desk-top review, exploratory study, and content analysis, by reviewing the annual financial statements of fifty JSE-listed companies (the main board) in South Africa. The general outcome of the study was that JSE-listed companies in South Africa were compliant with IT governance practices as prescribed in the King III Code of Corporate Governance. Most JSE-listed companies in South Africa utilized both generic and bespoke or owned-designed IT governance frameworks to meet IT governance requirements. The study also revealed that issues relating to IT governance were among priority issues for South African listed companies. The study concludes that JSE-listed companies in South Africa have indeed fulfilled their fiduciary responsibility towards IT governance.

Data Mining to Assess Organizational Transparency across Technology Processes: An Approach from IT Governance and Knowledge Management

Information quality and organizational transparency are relevant issues for corporate governance and sustainability of companies, as they contribute to reducing information asymmetry, decreasing risks, and improving the conduct of decision-makers, ensuring an ethical standard of organizational control. This work uses the COBIT framework of IT governance, knowledge management, and machine learning techniques to evaluate organizational transparency considering the maturity levels of technology processes applied in 285 companies of southern Brazil. Data mining techniques have been methodologically applied to analyze the 37 processes in four different domains: Planning and organization, acquisition and implementation, delivery and support, and monitoring. Four learning techniques for knowledge discovery have been used to build a computational model that allowed us to evaluate the organizational transparency level. The results evidence the importance of IT performance monitoring and assessment, and internal control processes in enabling organizations to improve their levels of transparency. These processes depend directly on the establishment of IT strategic plans and quality management, as well as IT risk and project management, therefore an improvement in the maturity of these processes implies an increase in the levels of organizational transparency and their reputational, financial, and accountability impact.

Maturity Level Analysis of Inventory Information Systems Using COBIT 4.1 Framework at PT. MEDISTA UTAMA

PT. Medista Utama is a company engaged in the distribution of medical devices. We have implemented an information system in the inventory section that is used to control the movement of products in the company. The system used must be able to manage, convey and maintain information security properly. So it is necessary to carry out an audit that aims to evaluate the information system governance that is running and ensure that the existing procedures support the existing business processes in the company. The audits were conducted following the standards of the COBIT 4.1 Framework for IT governance. This study will focus on the Delivery Service and Support (DSS) domain to analyze several aspects of IT that are currently running in this company, from the level of system security used to the management carried out by the system. In this domain, the research is focused on the DS5, DS10, and DS11 sub-domains. From the research results it is known that DS5 is at the level of 1.3; DS10 and DS11 are at level 2 (Repetitive but Intuitive). The conclusion is the level of capability obtained from the inventory information system of PT. Medista Utama is still below the expected level. And many improvements are needed to maximize the company's performance to achieve the expected Maturity Level value.

Analysis of Processes Information Flows and Items as Additional Design Factor in COBIT Framework

COBIT is a process-oriented IT governance framework. In the 2019 version, the framework offers a significantly redesigned approach to prioritise processes and set process target capability levels. The design phase is very important to achieve a governance system in future. Although there are several design factors defined in the design phase of COBIT 2019, these factors do not assess process suitability and value for the governance system. Thus, connections and continuity among processes are not taken into consideration enough. Therefore, the aim of the article is to suggest another design factor based on the interrelationships of processes in the COBIT framework represented by its information flows. The nature of the proposed innovation is described, and the analysis of process information flows and items is performed. The article also publishes several inconsistencies in COBIT 2019 documentation that have been identified in the process of research. The application of process information flows and items analysis has been illustrated in two case studies. We have identified new information that can be relevant to decision making in the design phase and discussed their importance for the planned governance system. The results could help to improve the quality of the design phase by providing additional information about the context of the processes designed to ensure the governance system. Implications for Central European audience: The implications for senior managers in the Central European region will be beneficial. Optimisation and effective use of information technologies is a prerequisite for achieving long-term competitiveness. COBIT is a best practice framework, and its implementation in companies is largely based on the specifics of each organisation. Therefore, it is important to pay close attention to the implementation phase of the application of COBIT. Framework application positively supports the holistic approach to management, resource optimisation, management based on responsibility and measurability. Today, these attributes of the organisation’s management are emphasised not only in Central Europe but in developed countries in general.