IT Governance Implementation Research Articles

Audit Tata Kelola Teknologi Informasi Menggunakan Framework Cobit 5 (Studi Kasus : Badan Narkotika Nasional Provinsi Bali)

One of the organizations requiring the implementation of good IT governance is BNNP Bali. This audit is conducted to determine the level of IT process capability based on COBIT 5 standard to know the level of gap (GAP) owned by BNNP Bali. The process of conducting the audit begins by making observations in the environment related institutions and activities of data implementation and then carried out from the data is mapping with business goals according to COBIT 5, followed by mapping business goals with IT goals to obtain IT process. The acquired IT process is then selected to get an important IT process according to company officials. The process of IT obtained then performed data processing that is by using guttman method. Results of the capability level of the IT process ie EDM01, EDM02 and APO09 are at level 3 (Establised). The GAP found need to be given improvement strategy to achieve the expected capability of the institution that is 4 (predictable process) by providing recommendations related steps to achieve the expected capability value. Recommendations and improvements provided using ISO / IEC 15504: 2 2003 and ISO27002 standards obtained by mapping the IT process on COBIT 5.

USING COBIT FRAMEWORK FOR REDUCING THE AUDIT RISKS OF ACCOUNTING INFORMATION SYSTEMS

The fast transition of accounting information systems from manual to electronic media impacts the financial reporting process linked to information technology. First, significant dependence on electronic accounting information systems may expose the company’s databases to information security threats, resulting in higher audit risks. As such, this study seeks to demonstrate how information technology governance structures may aid in protecting information in the context of electronic accounting information systems. Second, the study investigates the impact of improving information technology governance in Iraqi private banks in decreasing audit risks using the COBIT framework for internal control. The results indicate that implementing IT governance mechanisms in Iraqi private banks can reduce audit risks identified by external auditors. This framework increases the reliability of accounting information systems and enhances information security in the context of electronic accounting information systems. In addition, the field findings indicated a positive and statistically significant relationship between audit risk reduction and the dimensions of information technology governance (mechanisms and automation, policies, plans, and procedures, responsibility and accountability, skills and experience, knowledge and communication, and goal setting and measurement). Finally, the study proposes that Iraqi private banks implement the COBIT framework for internal control to govern information technology and risk management in electronic accounting information systems

A Conceptual Framework for IT Governance Mechanisms in Uganda's Higher Institutions of Learning

Poor implementation of Information Technology Governance (ITG) leads to several IT systems performing poorly. Resulting to discontinuity of services, user frustration, loss of IT investment, increased redundancy, duplication of efforts, poor decision-making, and reputation loss. In Uganda, implementation of ITG is low as many public sector organizations are yet to streamline. Yet, for Higher Institutions of Learning (HILs), the implementation of ITG is unexplored. Therefore, this study sought to determine the required mechanisms to design an ITG framework for HILs in Uganda (IGHU). A descriptive field study was conducted and the data were analyzed using SmartPLS 2.3.9 software. The causal relationships and validity of the constructs of IGHU were tested using partial least square path modeling. The coefficient of determination was 0.35; the path coefficient indicated both positive and negative relationships of independent to dependent constructs, and hypotheses such as accountability of IT projects and awareness campaigns were statistically significant.

Identifying the Enablers and Inhibitors of Organizational Learning in the Context of IT Governance: An Exploratory Delphi Study

ABSTRACT Despite significant investments in training, many organizations fail to implement IT Governance. This problem is known as theory-practice gap. Organizational Learning has been suggested as an approach to overcome this problem but there is still lack of understanding about how Organizational Learning applies to the context of IT Governance. Therefore, this exploratory study presents insights from a Delphi study that was conducted to identify and rank enablers and inhibitors of Organizational Learning in this context.

Trust of Information Technology Governance in High School Institution (HSI): A Conceptual Framework

This study aims to build a conceptual framework for previous research. This research is related to High School Institutions (HSI) readiness and usability that provides Information Technology Governance Trust (ITGT). The findings based on the literature review provide the initial construction and subsequently become a model conceptual framework. The comparison results with previous research indicate an influence between readiness and usability to user trust when implementing Information Technology Governance (ITG.) in an institution. The impact was identified through past literature, namely assessing the relationship between the Readiness Domain and the Usability Domain towards ITG. By testing high school institutional users (HSI), a trust will be through testing to develop a framework model research.

Information technology governance practices and stakeholder management: A multinational organisational perspective

The purpose of this article is to explore the relationship of information technology (IT) governance practices and stakeholder management within global IT projects. Having IT governance in place is one thing, but practicability in the project is another challenge for project managers. While the practice of governance is still a challenge to implement, stakeholder management within the context of IT governance adds complexity to managing local and foreign stakeholders that span country borders. This article provides an understanding of how IT governance and stakeholder management are inseparable when implementing global IT projects. Interviews were used to determine the industry best practices for multinational organisations and project practitioners’ experience in the implementation of global IT projects. The results highlight the link between stakeholder management and specific IT governance practices for proactively implementing global IT projects. A relationship management approach for project managers and other key project players to link both IT governance and stakeholder engagement is required. From a practical standpoint, the study explored the practitioners’ experience and practices of IT governance implementation in line with stakeholder management in various global IT projects.

ANALYSIS OF IMMIGRATION MANAGEMENT INFORMATION SYSTEM (SIMKIM) VERSION 2.0 FOR THE ISSUANCE OF A RESIDENCE PERMIT WITH THE COBIT 5 METHOD AT THE CLASS I IMMIGRATION OFFICE TPI MAKASSAR

Along with the advancement of information technology, the Directorate General of Immigration has integrated all immigration functions through SIMKIM since 2007. Immigration Management Information ‘System (SIMKIM) is a system used to collect, process and convey information to support operations, management, and policy making. Simkim implementation in the Immigration Technical Implementation Unit is one of them by ope rating the system in the process of issuing residence permits to Foreigners. The arrival of Foreigners through immigration checkpoints by remembering selective policy strategies, only foreigners who can benefit and do not interfere with the security or order of the public can enter and live in the Territory of Indonesia. The purpose of this study is to analyze the implementation of simkim version 2.0 use at TPI Makassar Class I Immigration Office. This research uses qualitative descriptive methods with the COBIT 5 (Control Objective for Information and Related Technology) model, while the data source is used namely primary and secondary data obtained by interview, document study and observation. The theoretical
 foundations used are information technology theory, management information systems, public service and information technology governance. Based on the analysis of data conducted, it was concluded that in terms of the process of issuing residence permits using SIMKIM Version 2.0 there are still various obstacles both from the system and in terms of facilities and implementation of information technology governance by measuring maturity level maturity level.

Evaluation of IT Governance at Office X using the COBIT 5 Framework

The IT governance audit aims to determine the level of importance (maturity level) of a company or government agency. IT governance audit is essential because if governance is not implemented correctly, the harmony between IT is beneficial to support business processes, and standard procedures will not be achieved. One of the agencies that require the implementation of good IT governance is Office X in Badung Regency. Office X in Badung Regency has a function in developing ICT infrastructure through application development, public service content, and ICT networks to improve public services. Conditions that occur in the field are frequent errors caused by internal and external parties that negatively impact the data management of Office X. The audit process begins with observations in the agency environment related to activity data and implementation, then mapping with business goals according to COBIT 5, followed by mapping business goals with IT Goals to obtain IT processes. The obtained IT processes are then selected to obtain critical IT processes according to the Executive Office. The audit results show that four IT processes need to be given recommendations for improvement, namely MEA 01, EDM 01, APO 07, DSS02.

Evaluasi Tata Kelola Guna Meningkatkan Kinerja Manajemen Teknologi Informasi Menggunakan Framework COBIT 5

The Salatiga Class I District Court is a government agency that has implemented Information Technology (IT) governance which has problems in IT management, so the purpose of this study is to evaluate information technology governance using the COBIT 5 framework by determining the level of capability and gaps. The results of the recapitulation of the questionnaire with the Likert scale model obtained the average value of the selected domain getting a value of 3.28, which means that the current level of capability (as is) is at level 3 (established process), while the numbers from the range of 0 to 5 levels are expected or target (to be) namely 5 (optimization process). So that a gap or gap is obtained, namely the value of 1.27 which results in a reduction between to be and as is. The selected process domain is in the highest position, namely DSS01 with a value of 3.80 or level 4 (predictable process) while the lowest position is APO12 with a value of 2.82 or level 3 (established process). To achieve the expected conditions, the IT subdivision can improve in dealing with IT risks and IT problems that occur in the Salatiga District Court Class I B. In addition to evaluating IT governance, testing system functionality is also carried out by using the Blackbox Testing method with the Boundary Value Analysis technique. The object is used for testing the system, namely­ e-Court tested on the registration page and login page. From the results of system testing­ e-Court On the registration page, there is a discrepancy in the expected name field and on the login page that the test results ­field - field as expected.
 Keywords — Information Technology Governance; COBIT 5; e – Court; Blackbox Testing; Boundary Value Analysis.

A Methodology for IT Governance by Viable System Modeling (VSM): an Action Research in Designing a Data Center

This paper attempts to introduce a methodology as a tool for designing and diagnosing IT governance by the VSM approach. The viable IT governance can guarantee a dynamic alignment of the business strategy with IT business value in today’s complex situations. Organizations are becoming more and more dependent on IT and capital investment in IT has been increased in recent years. To create business value from IT, business and IT should be aligned. On the other hand, because of the complexity of the business environment, organizations should be adaptable to this uncertainty to guarantee their viability. Dynamic business and IT alignment can be achieved by viable IT governance in the ever-changing environment by the VSM approach. A methodology as a tool for the design and diagnosis (IT projects and IT operations) of viable IT governance has been proposed and action research in the real environment did in this study. Systematic action research did in the private sector in Iran which is responsible for designing and implementing data centers. A methodology for designing and diagnosing the viable IT governance is proposed based on VIPLAN method that was customized for IT governance. A methodology for designing and implementing IT governance by VSM is proposed. Dynamic alignment of business and IT is achieved by this approach. Action research did for designing and implementing the data center project by VSM. In a complex and dynamic environment, organizations should be adaptable and flexible in business strategies and operational structures. VSM is a cybernetics approach that can be used for organizational systems to overcome these complexities. At the same time, VSM can be used for IT governance and management to create a dynamic alignment of business and IT. Dynamic alignment can guarantee to achieve business value from IT.

IDENTIFICATION OF THE DOMAIN PROCESS INTERSECTIONS BETWEEN COBIT 4.1 AND COBIT 5 IN THE DETERMINATION OF IT GOVERNANCE ASSESSMENT

The implementation of information technology has an essential role in organizational development to support a business process. Currently, information technology is widely adopted by the organization. It is believed to help improve the efficiency of the ongoing business process so that IT management is needed in a more structured. Thus, need a guideline that can guide IT governance so it can be measured and utilized. COBIT is one of the frameworks that can utilize in providing IT governance guidelines for organizations, and it is the main reference used in implementing IT governance in organizations. Still, the assessment process takes a long time because many processes are assessed. So conducted this research to determine the similar activities between COBIT 4.1 and COBIT 5 as the basis for determining the development of an organizational assessment process that the organization will carry out to see the efficiency of the assessed process domain. This research is focused on several organizations that have carried out IT governance assessments with COBIT 4.1 and will then implement the assessment process using COBIT 5. Still, it will usually take more time and effort if done separately to streamline the assessment process and identify domain intersects. The process from COBIT 4.1 and COBIT 5 so that the effort to carry out the assessment can be more streamlined. Thus, this research will produce a study result related to which activities intersect with each other to determine the IT governance assessment in an organization.

Analysing Tourism Application Using Information Technology Governance Trust Model in COVID-19 Pandemic Situation

At the beginning of 2020, Indonesia was shocked by the COVID-19 pandemic. One of the areas affected by the COVID-19 outbreak is tourism. In the tourism sector, the Indonesian government is closing tourism activities to minimize the transmission of the COVID-19 virus. The tourism sector has been a mainstay of income for tourism village communities and supports its foreign exchange earnings. This study analyzes local government tourism applications using IT governance trust (ITGT)in the COVID-19 pandemic situation. The method used is by distributing questionnaires to application makers and government employees who use tourist applications. Data were analyzed inferentially using quantitative Smart-PLS analysis. The application of multiple regression techniques to analyze questionnaire data on mobile tourism applications’ reliability and validity during the COVID-19 epidemic. This article used descriptive research to respond to the implementation of IT governance (ITG). The statistical results obtained indicate that the quality of information, system quality, and service quality of the tourism mobile application significantly affect user confidence in using tourism applications. Thus, this study contributes to recommendations for using the ITGT model to determine the extent to which tourism applications can prepare themselves to improve their tourism applications during the COVID-19 pandemic. This study provides direct information to practitioners about what to consider in enhancing tourist application features, especially in the COVID-19 pandemic situation, so there is a need for ITG in planning reliable tourism applications during the COVID-19 pandemic.

GOBERNANZA DE LAS TECNOLOGÍAS DE LA INFORMACIÓN EN CUBA: UN ANÁLISIS PRELIMINAR EN PEQUEÑAS Y MEDIANAS EMPRESAS

The objective of this research is to explore the current performance of information technology (IT) governance in Cuban medium and small sized firms, and how organizational culture influences the governance. A targeted survey was carried out to achieve this purpose, as well as interviews of relevant stakeholders in these organizations to better understand their decision process in this domain. The survey had 21 participants, mainly computer information officers, from 21 firms. The results of the study reveal that the majority of respondents reported the importance of IT adoption and governance as a critical success factor for the organization. But also, most of them have the perception that Cuban companies should achieve better adoption and governance of IT in order to ensure that the organization’s IT strategy is aligned with and supports the overall organization’s strategy for the success of their businesses. It is also appreciated from interviews that firms do not use any framework to implement IT governance. Some improving actions are proposed to firm executives and software providers.

Audit Infrastruktur IT Dalam Memenuhi Kebutuhan Bisnis (Studi Kasus : Perusahaan Yang Begerak Pada Bidang Jasa)

The audit of the Information Technology infrastructure in this journal uses the ISO 27001 standard which is carried out at a company engaged in the service sector in West Sumatra Province. As a company that is quite developed and already has an adequate IT infrastructure in running its business, it is felt necessary to carry out an IT audit to ensure whether the IT devices they have already have adequate internal controls and at the same time as preventive measures for business risks such as: operational, reputation , legal, compliance and strategic. Given that IT is an important asset in operations that can increase the added value and competitiveness of a company while its implementation contains various risks, companies need to implement IT Governance.

Governing IT in HEIs: Systematic Mapping Review

Abstract Background Higher Education Institutions (HEIs) are aware of the immense importance of achieving their strategic objectives to increase their impact on the society and to be competitive. As a board responsibility, information technology governance (ITG) plays an important role in the overall HEIs performance. Numerous HEIs are making great efforts to properly govern information technology (IT) by using ITG frameworks. Objectives This study investigates the overall adoption of ITG frameworks in different HEIs through a systematic mapping review. Method We analyzed forty relevant papers, filtered from 6 selected online libraries, and answered six research questions on ITG implementations at universities worldwide. Results The results show an increasing number of publications on ITG usage in HEIs in the last decade. The largest number of applications is described in Asian countries, while the most popular used frameworks are COBIT, ISO versions, and in-house developed frameworks. Finally, we describe the top challenges and benefits of ITG implementation mentioned in research papers. Conclusion This paper provides a deep insight into the level of integration of ITG in universities worldwide. The results will be presented to the involved stakeholders at our university to increase the awareness of ITG in HEIs and help its implementation process.

Key Factors in Improving the Maturity of Information Technology Governance: A Case Study of State-owned Enterprise in Indonesia

The assessment of IT governance maturity is part of the assurance function. The assessment is carried out to ensure technology support in achieving business goals. In this context, companies should comply with regulations, as well as the need to continue to improve the quality of implementation of IT governance. The average value of PT X's IT governance maturity in Year 2 has increased from 3.21 to 3.26. There is an increase in the average score of 0.05 over one year. Success factors in implementing IT governance must be maintained and encouraged to continue the grow. This research was conducted to identify what organizational initiatives to increase the maturity and what the key factors are. Factors identification is done using evidence analysis method based on CSF references and attributes criteria. The results of the analysis obtained key factors that strengthen the maturity. The main factors are CSF2 providing IT infrastructure that supports the development and exchange of IT applications and services (21.72%), and CSF4 staff development to meet professional IT HR qualifications (17.39%). On the other hand, maturity attribute which gave the biggest contribution was ATR1 related to policies and procedures (34.6%), and ATR3 related to defining goals and actions (30.77%).

Peranan Implementasi Tata Kelola Teknologi Informasi (IT Governance) sebagai Faktor Penting dalam Meningkatkan Kinerja Perusahaan

The application of information technology governance (IT Governance) plays an important role in utilizing information technology to fit the company's vision, mission and goals. However, there are still many companies that have not implemented IT Governace due to various factors such as: the existence of internal companies that refuse the application of information technology, the limited human resources who master information technology competence, the unavailability of frameworks and policy foundations in the information technology environment, the lack of commitment from top management, the high cost of investment in IT Governance and so on. The greater use of technology has not been accompanied by greater support for the achievement of strategies so that investments made are in vain. research and research results show that the lack of understanding of IT Governance makes unproductive investments made by companies. The method used in this research is descriptive qualitative which presents a systematic review of the problems in the implementation of Information Technology Governance (IT Governance).

Evaluating IT Governance Structure Implementation in the Gulf Cooperation Council Region

IT governance (ITG) implementations in organizations started to gain momentum during the turn of the twenty first century mainly due to (but not limited to) the need for IT business alignment, better return of investment, effective utilization of IT and for a strategic direction of IT. This initially mandates to establish and implement a set of ITG structures in the organization to initiate, adopt, and implement relevant ITG frameworks to set in the motion of successful ITG implementation. While researchers have stated twelve relevant ITG structures that needs to be set in place, two questions remain in terms of the two factors namely ‘ease of implementation/use’ and ‘effectiveness’ of these ITG structures. With scant research in this domain, we explore the relationship of these two factors on the twelve ITG structures through a survey of senior managers involved in ITG domain in the Gulf Cooperation Council (GCC) region. With diverse board and executive level cultures evident in different regions of the world, the adoption of these ITG frameworks and standards depend on the ITG practices being followed in each cultural context. The results thus assist organisations and ITG consultants in the GCC region to know the level of effectiveness of relevant ITG structures as well as the implementation effort required for these.

Exploring security, risk, and compliance driven IT governance model for universities: applied research based on the COBIT framework

Information technology is the backbone of universities' operations which is leveraged to achieve the institutions' strategic visions. Universities are complex organisations and their complexity does not rely solely in their technical infrastructure but also their unique organisational structure and culture which requires a special scheme for governing and managing their IT resources. Designing the best-fit IT governance scheme is considered a very challenging endeavour. Several IT governance frameworks have been introduced to help organisations in understanding, designing and implementing IT governance and management practices. In this study we adopted the COBIT framework to design a security, risk, and compliance driven IT governance model for universities. After the model construction, the main factors that may affect the success of IT governance in universities found in the literature were mapped with COBIT governance and management objectives.

INFORMATION TECHNOLOGY GOVERNANCE PERFORMANCE MEASUREMENT AT NATIONAL LIBRARY USING COBIT FRAMEWORK 5

National Library of Indonesia (Perpusnas) is a public library located in Jakarta. In its operations Perpusnas already implemented Information Technology (IT) to support its activities, in IT implementation good IT Governance is needed to ensure that the IT is working consistently with business and produce the expected output. IT Governance is structure, process and mechanism that also includes objective making of the organization while considering the organization’s capability. With the good IT Governance Perpusnas can allocate its resource more efficiently and measure the running performance. This research will use COBIT 5 as the framework, the reason why COBIT 5 is chosen because COBIT 5 provides comprehensive framework that could help Perpusnas in achieving its IT Governance and IT management objectives. COBIT 5 enables IT to be organized and managed in the whole organization, it also could provide balance between the realization of benefits and risk optimization. Observation and interview is done in order of data collection in this research, the data then is analyzed and measured with the capability level in COBIT 5. Based on the analysis conducted the result obtained is. The average capability level of EDM01 is 1, on EDM02 is 3, on EDM03 is 2, on EDM04 is 3 and on EDM05 is 3. This research also provides recommendations that can be used as reference for Perpusnas to increase the performance of its IT Governance