Use Of COBIT Research Articles

Risk Management Analysis On The School Activity Plan And Budget Application Information System (ARKAS) Using Cobit 2019

In the era of globalization and the advancement of information technology, the application of information technology is an important need for educational institutions, including schools. This research focuses on the implementation of the School Activity Plan and Budget Application Information System (ARKAS) at the Palu Safety Center Christian Vocational School to increase efficiency and effectiveness in planning and managing school activities and budgets. However, the implementation of ARKAS is inseparable from various risks that can affect the effectiveness and success of the system. Therefore, risk management analysis is essential to ensure that all potential risks can be identified, analyzed, and minimized. This study uses the COBIT 2019 framework to manage risks in the application of information technology in schools. The study identifies challenges such as resistance to change, resource limitations, and information security risks. This study aims to explore how the implementation of ARKAS in the Palu Safety Army Christian Vocational School can be optimized through risk management analysis using the COBIT 2019 framework. The results of the study show that the use of COBIT 2019 can help in identifying and managing risks effectively, so that the implementation of ARKAS can run more efficiently and transparently. The resulting recommendations are expected to improve the quality of school budget management and become a reference for other schools that face similar challenges in the application of information technology.

Evaluation of Information Technology Governance Using COBIT 5 and ISO/IEC 38500

Infrastructure Section, Information and Communication Technology Development Division, South Tangerang City Communication and Information Office, one of the main tasks and functions is to provide services and management of internet network infrastructure for all Regional Apparatus Organizations (OPD) in South Tangerang City. The implementation of the Infrastructure Section is constrained by the problem of employee competence that has not reached the standard in internet network management and service, from these problems the researcher intends to evaluate governance using the COBIT 5 framework and ISO/IEC 38500 with recommendations for improvement in the Infrastructure Section. This study uses PAM (Process Assessment Model) with the Guttman scale to determine the results and level of capability. The use of COBIT 5 in this research will focus on the domain of EDM (Evaluate Direct Monitor) point 04, Ensure Resource Management and MEA (Monitor, Evaluate and Assessment) point 01, Performance and Conformance. The results and the level of capability obtained during the research were level 2 Managed Process with a value of 2.46 with a gap of 0.54. The level expected by the Infrastructure Section is at level 3 Established Process with a value of 3.00. Recommendations for achieving Level 3 are used ISO/IEC 38500.

Identifikasi Level Pengelolaan Tata Kelola SIPERUMKIM Kota Salatiga berdasarkan COBIT 2019

SIPERUMKIM is the digitization process of public service licensing recommendations for housing implementation. The utilization of information technology governance is used to facilitate monitoring and evaluating the performance of SIPERUMKIM information technology which has been implemented in Housing and Settlement Area in Salatiga city. Information technology governance is a process that can manage investment decisions related to information technology within the company to achieve goals and meet company needs. The use of COBIT 2019 analysis in information technology governance aims to help organizations achieve risk optimization, governance, and information technology management. The results of this study are in the design form of corporate information technology governance and knowing the important process recommendations for the Department of Housing and Settlement of the City of Salatiga. These three important process recommendations are APO12, DSS02, and DSS03.

The Use of ISO and COBIT for IT Governance Audit

along with the growing number of practices in the use of technology for business processes, there is a need for IT governance for the private and government sectors. Company leaders implement IT governance in order to ensure that the investment spent by the organization for IT can provide benefits or optimal value for the organization and reduce the lowest risk possible. In practice IT governance requires standards. There are several standards that are often used the most popular are COBIT and ISO, both of which are known as IT governance best practices, but can any company apply the two standards? In this paper we will discuss the use of COBIT and ISO in corporate governance, the strengths and weaknesses of each standard and the merging of the two standards for more comprehensive governance practices.

Cobit 5-Based Approach for IT Project Portfolio Management: Application to a Moroccan University

Considering the problem of the management of IT project portfolios in universities, University managers face a lot of uncertainties when prioritizing projects that make up their portfolio. The alignment with their strategy becomes a major challenge and constitutes one of the essential elements of a governance approach. To overcome this challenge, the implementation of a project prioritization approach adapted to the university’s strategy, vision and culture is essential. In this context, this paper aims to provide a multi-criteria approach based on a combination of AHP and TOPSIS methodologies for the selection and prioritization of IT projects in universities. The main feature of our approach is the use of COBIT 5, its principles and enablers as prioritization criteria. In order to validate our model, project portfolio managers of a Moroccan public university were involved to evaluate the criteria and to prioritize their projects. This research demonstrates that the combined use of Multi Criteria Decision Making (MCDM) methodologies proves to be suitable for the implementation of COBIT sub-process APO05.03.

Evaluation of Maturity Level of E-Procurement Application Systems

The availability of service levels and informationtechnology governance supports immensely influences theperformance and competitiveness of the companies. The value ofthe maturity level of the information technology governance isgoing to affect the simplicity and the smoothness of punctuallyobtaining relevant and accurate information in the process ofmanagerial decision making. This research aims to cognise thematurity level and provides recommendations of the model ofinformation technology governance, particularly the electronicapplication system of procurement at DS (Deliver and Support)Domain through the use of COBIT 4.1 Framework. The result ofthis research reflects that the lowest value of maturity level goesto DS4 (Ensure Continuous Service) Process, i.e. 1.750. Theinformation technology governance of DS4 possesses theconnection between the control objective inputs comprising PO2,PO9, AI2, AI4, and DS1, and the control objective outputsconsisting of PO9, DS1, DS8, DS9, DS11, and ME1. To be moreeffective in reaching the third maturity level (i.e. defined process)with the rounding index of 2.50, processes linked to DS4 arerequired to build a relationship with the third party as theinformation service provider with a fine quality, to monitor theservice delivery through verification, and to ensure sustainableconformity and compliance.

COBIT 5 and Enterprise Governance of Information Technology: Building Blocks and Research Opportunities

ABSTRACTCOBIT, currently in its fifth edition, is a good-practice framework for the enterprise governance of IT. There is limited academic research that either analyzes COBIT or leverages COBIT as an instrument in executing research programs. Through linking core elements and principles of COBIT to insights from IT-related and general management literature, this paper explores the use of COBIT in future research activities. This paper positions COBIT as a framework for enterprise governance of IT. The major directions and core principles of the framework are described. Connections are made of these directions and principles to the relevant literature. Research questions for future research around enterprise governance of IT and COBIT 5 are proposed and discussed.

APPLICABILITY OF COBIT IN MANAGING OUTSOURCED INFORMATION TECHNOLOGY ACTIVITIES: AN INVESTIGATION BASED ON TWO MULTINATIONAL COMPANIES

When a company decides for IT outsourcing, it needs to deploy efficient control mechanisms, once the third party will be working directly with one of its most important assets, i.e., its information. Among the several sets of practices that intend to help managing IT activities, COBIT stands out for making a wide range of applicable control resources available to deal with outsourcing among other issues. In this context, the goal of this research is to analyze how the COBIT framework can help improving management processes of outsourced activities for both involved companies. Methodologically, this research was conducted through interviews with specialists and a case study, analyzing how the involved organizations can improve their relationship with each other. Data collection involved interviews with managers, document analysis and observation. The authors tried to identify which COBIT dimensions, processes and detailed control objectives are more appropriate for outsourcing situations. Improvement opportunities where identified in the studied processes, as well as actions that promote the use of COBIT. The main results involve the development of a procedure for process selection, which is directly applicable to outsourcing situations, as well as recommendations on necessary improvements in the application of each COBIT process, in order to increase the effectiveness of management of the outsourcing relationship.

Information Security governance: COBIT or ISO 17799 or both?

This paper investigates the co-existence of and complementary use of COBIT and ISO 17799 as reference frameworks for Information Security governance. The investigation is based on a mapping between COBIT and ISO 17799 which became available in 2004, and provides a level of ‘synchronization’ between these two frameworks.