Leveraging COBIT 2019 Framework to Implement IT Governance in Business Process Outsourcing Company
The company specializes in delivering information and technology services to businesses operating in the same industry. Recognizing the pivotal role of information technology in achieving its vision, mission, and goals, the company emphasizes the proper implementation of IT governance to drive overall company success. To evaluate the management of IT resources, the study employs the COBIT-2019 framework for measurement. The data collection approach encompasses interviews, questionnaires, observation, and document analysis. The findings indicate that most IT governance processes currently operate at level 2 capability. However, the company aspires to reach level 3 for these processes. Consequently, recommendations are proposed to enhance these processes based on the best practices outlined in COBIT-2019. Key suggestions include implementing performance measurements and facilitating access to knowledge repositories to foster skill and competency development.
D. Sanjaya and M. I. Fianty, “Measurement of Capability Level Using COBIT 5 Framework (Case Study: PT Andalan Bunda Bijak),” Ultima Infosys: Jurnal Ilmu Sistem Informasi, vol. 13, no. 2, 2022.
M. indah Fianty, A. Angelina, G. Claudia, and D. Sertivia, “Analysis of Factors Affecting Information System Security Behaviour in Employees at IT Company,” Ultima Infosys: Jurnal Ilmu Sistem Informasi, vol. 13, no. 1, 2022.
F. Salehi, B. Abdollahbeigi, and S. Sajjady, “Impact of Effective IT Governance on Organizational Performance and Economic Growth in Canada,” vol. 3, pp. 14–19, Feb. 2021.
I. Scalabrin Bianchi, R. Sousa, and R. Pereira, “Information Technology Governance for Higher Education Institutions: A Multi-Country Study,” Informatics, vol. 8, p. 26, Apr. 2021, doi: 10.3390/informatics8020026.
R. Frogeri, D. Pardini, A. Cardoso, L. Prado, F. Pelloso Piurcosky, and P. Portugal Júnior, “IT Governance in SMEs: The State of Art,” International Journal of IT/Business Alignment and Governance, vol. 10, pp. 55–73, Jan. 2019, doi: 10.4018/IJITBAG.2019010104.
A. Amorim, M. Mira da Silva, R. Pereira, and M. Gonçalves, “Using agile methodologies for adopting COBIT,” Inf Syst, vol. 101, p. 101496, Feb. 2020, doi: 10.1016/j.is.2020.101496.
S. Haes, W. Grembergen, A. Joshi, and T. Huygh, “Enterprise Governance of IT, Alignment, and Value,” 2020, pp. 1–13. doi: 10.1007/978-3-030-25918-1_1.
D. Smits and J. Hillegersberg, “The continuing mismatch between IT governance maturity theory and practice: a new approach,” Procedia Comput Sci, vol. 138, pp. 549–560, Jan. 2018, doi: 10.1016/j.procs.2018.10.075.
L. Jaime and J. Barata, “How can FLOSS Support COBIT 2019? Coverage Analysis and a Conceptual Framework,” Procedia Comput Sci, vol. 219, pp. 680–687, 2023, doi: 10.1016/j.procs.2023.01.339.
Information Systems Audit and Control Association, COBIT® 2019 Framework: introduction and methodology.
T. Papadopoulos, K. N. Baltas, and M. E. Balta, “The use of digital technologies by small and medium enterprises during COVID-19: Implications for theory and practice,” Int J Inf Manage, vol. 55, p. 102192, 2020, doi: https://doi.org/10.1016/j.ijinfomgt.2020.102192.
A. A. Louis and M. I. Fianty, “Evaluation Human Resources Information System Using COBIT 5 Framework in Technology Insurance Company,” G-Tech: Jurnal Teknologi Terapan, vol. 7, no. 2, pp. 674–682, Mar. 2023, doi: 10.33379/gtech.v7i2.2393.
A. Asmah and M. Kyobe, Towards an Integrative Theoretical Model For Examining IT Governance Audits. 2018. doi: 10.1145/3209415.3209423.
L. Englbrecht, S. Meier, and G. Pernul, “Towards a capability maturity model for digital forensic readiness,” Wireless Networks, vol. 26, pp. 4895–4907, Oct. 2020, doi: 10.1007/s11276-018-01920-5.
Information Systems Audit and Control Association., COBIT 2019 Design guide designing an information and technology governance solution.
A. Levstek, T. Hovelja, and A. Pucihar, “IT Governance Mechanisms and Contingency Factors: Towards an Adaptive IT Governance Model,” Organizacija, vol. 51, pp. 286–310, Dec. 2018, doi: 10.2478/orga-2018-0024.
Download PDF: 59 times
Copyright (c) 2023 Journal of Information Systems and Informatics
This work is licensed under a Creative Commons Attribution 4.0 International License.
- I certify that I have read, understand and agreed to the Journal of Information Systems and Informatics (Journal-ISI) submission guidelines, policies and submission declaration. Submission already using the provided template.
- I certify that all authors have approved the publication of this and there is no conflict of interest.
- I confirm that the manuscript is the authors' original work and the manuscript has not received prior publication and is not under consideration for publication elsewhere and has not been previously published.
- I confirm that all authors listed on the title page have contributed significantly to the work, have read the manuscript, attest to the validity and legitimacy of the data and its interpretation, and agree to its submission.
- I confirm that the paper now submitted is not copied or plagiarized version of some other published work.
- I declare that I shall not submit the paper for publication in any other Journal or Magazine till the decision is made by journal editors.
- If the paper is finally accepted by the journal for publication, I confirm that I will either publish the paper immediately or withdraw it according to withdrawal policies
- I Agree that the paper published by this journal, I transfer copyright or assign exclusive rights to the publisher (including commercial rights)