Leveraging COBIT 2019 Framework to Implement IT Governance in Business Process Outsourcing Company
DOI:
https://doi.org/10.51519/journalisi.v5i2.492Keywords:
Capability Level, COBIT-19, Gap Analysis, IT GovernanceAbstract
The company specializes in delivering information and technology services to businesses operating in the same industry. Recognizing the pivotal role of information technology in achieving its vision, mission, and goals, the company emphasizes the proper implementation of IT governance to drive overall company success. To evaluate the management of IT resources, the study employs the COBIT-2019 framework for measurement. The data collection approach encompasses interviews, questionnaires, observation, and document analysis. The findings indicate that most IT governance processes currently operate at level 2 capability. However, the company aspires to reach level 3 for these processes. Consequently, recommendations are proposed to enhance these processes based on the best practices outlined in COBIT-2019. Key suggestions include implementing performance measurements and facilitating access to knowledge repositories to foster skill and competency development.
Downloads
References
D. Sanjaya and M. I. Fianty, “Measurement of Capability Level Using COBIT 5 Framework (Case Study: PT Andalan Bunda Bijak),” Ultima Infosys: Jurnal Ilmu Sistem Informasi, vol. 13, no. 2, 2022.
M. indah Fianty, A. Angelina, G. Claudia, and D. Sertivia, “Analysis of Factors Affecting Information System Security Behaviour in Employees at IT Company,” Ultima Infosys: Jurnal Ilmu Sistem Informasi, vol. 13, no. 1, 2022.
F. Salehi, B. Abdollahbeigi, and S. Sajjady, “Impact of Effective IT Governance on Organizational Performance and Economic Growth in Canada,” vol. 3, pp. 14–19, Feb. 2021.
I. Scalabrin Bianchi, R. Sousa, and R. Pereira, “Information Technology Governance for Higher Education Institutions: A Multi-Country Study,” Informatics, vol. 8, p. 26, Apr. 2021, doi: 10.3390/informatics8020026.
R. Frogeri, D. Pardini, A. Cardoso, L. Prado, F. Pelloso Piurcosky, and P. Portugal Júnior, “IT Governance in SMEs: The State of Art,” International Journal of IT/Business Alignment and Governance, vol. 10, pp. 55–73, Jan. 2019, doi: 10.4018/IJITBAG.2019010104.
A. Amorim, M. Mira da Silva, R. Pereira, and M. Gonçalves, “Using agile methodologies for adopting COBIT,” Inf Syst, vol. 101, p. 101496, Feb. 2020, doi: 10.1016/j.is.2020.101496.
S. Haes, W. Grembergen, A. Joshi, and T. Huygh, “Enterprise Governance of IT, Alignment, and Value,” 2020, pp. 1–13. doi: 10.1007/978-3-030-25918-1_1.
D. Smits and J. Hillegersberg, “The continuing mismatch between IT governance maturity theory and practice: a new approach,” Procedia Comput Sci, vol. 138, pp. 549–560, Jan. 2018, doi: 10.1016/j.procs.2018.10.075.
L. Jaime and J. Barata, “How can FLOSS Support COBIT 2019? Coverage Analysis and a Conceptual Framework,” Procedia Comput Sci, vol. 219, pp. 680–687, 2023, doi: 10.1016/j.procs.2023.01.339.
Information Systems Audit and Control Association, COBIT® 2019 Framework: introduction and methodology.
T. Papadopoulos, K. N. Baltas, and M. E. Balta, “The use of digital technologies by small and medium enterprises during COVID-19: Implications for theory and practice,” Int J Inf Manage, vol. 55, p. 102192, 2020, doi: https://doi.org/10.1016/j.ijinfomgt.2020.102192.
A. A. Louis and M. I. Fianty, “Evaluation Human Resources Information System Using COBIT 5 Framework in Technology Insurance Company,” G-Tech: Jurnal Teknologi Terapan, vol. 7, no. 2, pp. 674–682, Mar. 2023, doi: 10.33379/gtech.v7i2.2393.
A. Asmah and M. Kyobe, Towards an Integrative Theoretical Model For Examining IT Governance Audits. 2018. doi: 10.1145/3209415.3209423.
L. Englbrecht, S. Meier, and G. Pernul, “Towards a capability maturity model for digital forensic readiness,” Wireless Networks, vol. 26, pp. 4895–4907, Oct. 2020, doi: 10.1007/s11276-018-01920-5.
Information Systems Audit and Control Association., COBIT 2019 Design guide designing an information and technology governance solution.
A. Levstek, T. Hovelja, and A. Pucihar, “IT Governance Mechanisms and Contingency Factors: Towards an Adaptive IT Governance Model,” Organizacija, vol. 51, pp. 286–310, Dec. 2018, doi: 10.2478/orga-2018-0024.
Downloads
Published
Issue
Section
License
Authors Declaration
- The Authors certify that they have read, understood, and agreed to the Journal of Information Systems and Informatics (JournalISI) submission guidelines, policies, and submission declaration. The submission has been prepared using the provided template.
- The Authors certify that all authors have approved the publication of this manuscript and that there is no conflict of interest.
- The Authors confirm that the manuscript is their original work, has not received prior publication, is not under consideration for publication elsewhere, and has not been previously published.
- The Authors confirm that all authors listed on the title page have contributed significantly to the work, have read the manuscript, attest to the validity and legitimacy of the data and its interpretation, and agree to its submission.
- The Authors confirm that the manuscript is not copied from or plagiarized from any other published work.
- The Authors declare that the manuscript will not be submitted for publication in any other journal or magazine until a decision is made by the journal editors.
- If the manuscript is finally accepted for publication, the Authors confirm that they will either proceed with publication immediately or withdraw the manuscript in accordance with the journal’s withdrawal policies.
- The Authors agree that, upon publication of the manuscript in this journal, they transfer copyright or assign exclusive rights to the publisher, including commercial rights














