Publication Search

This study analyzes the governance performance of information systems at the Career Center of Universitas Muhammadiyah Jambi using the COBIT 2019 framework. The primary objective is to evaluate the maturity level of IT governance and provide recommendations to enhance the efficiency and effectiveness of information systems in supporting the institution’s strategic objectives. Data were collected through interviews, observations, and questionnaires involving system users and decision-makers within the Career Center. The findings indicate that several areas require greater attention, particularly Managed IT Changes, Managed Risk, and Managed Operations. These domains are considered critical in improving the management and reliability of the existing information systems. The study also identifies several challenges affecting system performance, including limited system integration, insufficient human resources, and the use of outdated technology. Based on these findings, the research recommends strengthening the organizational structure, improving the competence of human resources, and optimizing IT processes in accordance with COBIT 2019 standards. Implementing these improvements is expected to increase IT governance maturity, enhance service quality for students and alumni, and better support the university’s strategic development goals.

Information technology (IT) infrastructure planning plays a strategic role in supporting organizational performance and achieving business objectives. However, many organizations experience misalignment between IT infrastructure planning and organizational needs, leading to inefficiencies, limited system integration, and suboptimal utilization of IT investments (Maulana, 2024; Njanka et al., 2025). This study aims to analyze the suitability of IT infrastructure planning with organizational needs using a quantitative approach. The research framework integrates the Strategic Alignment Model (SAM), Strategic Alignment Maturity Model (SAMM), and COBIT 2019 governance principles. Data were collected through a structured questionnaire distributed to IT managers and system users. A total of 85 valid responses were analyzed using descriptive statistics and gap analysis. The results indicate that IT infrastructure planning is moderately aligned with organizational needs, particularly in supporting operational activities. Nevertheless, significant gaps were identified in system integration, scalability, and long-term infrastructure planning. These findings highlight the importance of continuous evaluation and governance-based IT planning to enhance alignment and ensure sustainable organizational performance.

Penelitian ini bertujuan untuk mengevaluasi Sistem Surat Keterangan Pendamping Ijazah (SKPI) di Universitas Semarang melalui audit dengan menggunakan kerangka kerja COBIT 2019, dengan fokus pada domain Deliver, Service and Support (DSS) dan Monitor, Evaluate and Assess (MEA). SKPI berfungsi sebagai dokumen resmi yang memberikan informasi tambahan mengenai kompetensi lulusan di luar nilai akademik (ijazah), sehingga penting untuk memastikan kualitas dan relevansinya dengan kebutuhan industri. Metodologi yang digunakan dalam penelitian ini meliputi pengumpulan data primer melalui observasi, wawancara, dan kuesioner, serta data sekunder dari literatur terkait. Hasil penelitian menunjukkan bahwa tingkat kapabilitas pada sub-domain DSS dan MEA berada pada level 4 yang dilabeli sebagai terkelola, dengan nilai rata-rata masing-masing 3,73 untuk DSS dan 3,85 untuk MEA. Meskipun demikian, terdapat sejumlah rekomendasi untuk meningkatkan nilai Maturity Level sistem, dengan GAP masing-masing sebesar 1,07 untuk DSS dan 1,04 untuk MEA. Rekomendasi yang disampaikan meliputi peningkatan kompetensi petugas teknis, pengembangan aplikasi mobile, dan sosialisasi prosedur penyajian SKPI secara digital. Dengan adanya rekomendasi tersebut, diharapkan dapat memberikan masukan positif dalam pengelolaan SKPI di Universitas Semarang dan meningkatkan daya saing lulusan di pasar kerja.Kata Kunci: Audit Sistem, Maturity Level, Rekomendasi, Deliver, Service and Support (DSS), Monitor, Evaluate and Assess (MEA)

The use of Information Systems and Information Technology (IS/IT) is a crucial factor in improving the efficiency and accuracy of retail sector operations. PT XYZ, a retail-level staple goods provider, has implemented IS/IT to support sales recording, inventory management, security, and operational reporting. This study aims to assess the effectiveness, efficiency, security, and compliance of the information system used. The audit was conducted through observation, interviews, document review, and system testing, referring to the COBIT framework and the ISO/IEC 27001 standard. The audit results indicated that the system supported core operational functions, but weaknesses remained, including insufficient system documentation, limited access controls, and suboptimal data security and backup mechanisms. Furthermore, reliance on manual procedures has the potential to lead to errors and slow down service delivery. Therefore, system improvements, strengthening security controls, developing standard operating procedures, and enhancing the competency of human resources and IT infrastructure are needed. This audit is expected to support improved service quality and secure, effective, and sustainable IT governance at PT XYZ.

This study investigates the role of Information Technology (IT) governance in enhancing risk management performance and ensuring regulatory compliance within multinational digital enterprises. As digital transformation continues to reshape the global business landscape, organizations face increasing challenges in managing technological risks and complying with complex regulatory requirements across various jurisdictions. The study adopts a quantitative approach, using a survey methodology to collect data from senior IT and compliance managers in multinational digital enterprises. The survey focuses on how IT governance frameworks, such as COBIT 2019 and ISO 27000, are utilized to align IT strategies with business objectives, mitigate risks, and maintain regulatory compliance. The findings indicate that organizations with well-established IT governance structures are better positioned to proactively identify and mitigate risks, ensuring greater consistency in meeting regulatory requirements. These organizations demonstrate improved risk management effectiveness, especially concerning cybersecurity, data privacy, and compliance with global regulations like GDPR. In contrast, organizations with ad hoc or decentralized governance structures struggle with fragmented risk management and compliance efforts. The study further highlights the importance of integrating IT governance frameworks with internal audit functions, specifically the Chief Audit Executive (CAE), to enhance cybersecurity resilience and ensure compliance with global standards. This research contributes to the literature by providing empirical evidence on the integration of IT governance, risk management, and regulatory compliance in multinational enterprises. It also highlights the need for a structured and systematic approach to IT governance to improve organizational performance in managing risks and ensuring consistent regulatory adherence. The study offers practical insights for organizations looking to optimize their IT governance structures in the face of rapid digital transformation.

Digital transformation initiatives have become essential for organizations seeking to remain competitive in today’s rapidly evolving technological landscape. However, many organizations face challenges due to ineffective Information Systems (IS) governance, which hampers strategic decision-making and the successful execution of these initiatives. This study aims to develop an IS governance framework that enhances decision-making quality by aligning IT decisions with organizational goals during digital transformation efforts. The proposed framework addresses existing gaps in current IS governance models, offering a solution to common challenges such as inadequate governance structures, resource constraints, and misalignment between IT and business strategies. The framework was developed through a mixed-method approach, including conceptual framework development, expert consensus via the Delphi method, and organizational validation studies. Key findings reveal that the framework improves transparency in decision-making, enhances accountability for IT decisions, and ensures better alignment between IT strategies and organizational objectives. By embedding agile leadership and data-driven decision-making principles, the framework enables organizations to respond effectively to the fast-changing dynamics of digital transformation. This study also compares the proposed framework to existing models such as COBIT and ITIL, highlighting its unique features, including its adaptability to the fluid nature of digital transformation. The framework's strengths include its comprehensiveness and flexibility, though its application may face challenges in organizations with limited digital maturity or rigid governance structures. Future research directions include exploring the integration of emerging technologies into the framework and its applicability across different organizational contexts.

This study compares two service management models to evaluate the governance of the Wi-Fi network in Dusun Gita Nagari Baru. The main objective is to measure user satisfaction and service quality following the implementation of the COBIT 2019 framework, particularly the DSS02 domain (Manage Service Requests and Incidents). The research employed a mixed methods approach, using historical-comparative document analysis and Likert scale questionnaires distributed to 21 active users. The data were analysed through gap analysis, capability level mapping, and descriptive statistical analysis to identify performance differences between two periods. The results indicate that most indicators in the COBIT 2019 capability model are at Level 4 (Predictable), one indicator reaches Level 5 (Optimising), and another indicator is at Level 3. Indicators directly related to the DSS02 domain, such as ease of reporting, response speed, schedule accuracy, and repair time, demonstrate the most significant improvements. These findings support the hypothesis that implementing COBIT 2019-based governance for DSS02 can enhance user satisfaction and the quality of Wi-Fi network services in rural areas. This study also provides practical recommendations for the sustainable management of digital infrastructure in areas with limited access.

The UNAMA Library employs information systems to enhance its academic services. Nevertheless, its administrative framework continues to encounter obstacles, such as inadequate service system support for users, constrained resources allocated for the management and upkeep of the system, an absence of standardized protocols for addressing technical challenges, and insufficient assessment system efficacy. If these issues remain unaddressed, the operational effectiveness of the library information system will be compromised, thereby thwarting the objective of delivering dependable information services. This investigation seeks to illuminate the maturity level of information system governance as delineated by COBIT 2019 within the Decision Support Systems (DSS) domain, specifically focusing on the DSS01 (Manage Operations) and DSS02 (Manage Service Requests and Incidents) processes. The findings suggest that the degree of information system governance capability the UNAMA Library is situated at the Established Process level (level 3), signifying that the process has undergone implementation; however, it has yet to be comprehensively documented and consistently evaluated. Moreover, a disparity persists between the existing state and the anticipated capability level of the organization, particularly concerning IT operations management, the standardization incident handling, and the documentation of operational procedures. An elucidation of the expected level is articulated, especially in terms of operational standards, incident documentation, and IT infrastructure oversight. Recommendations encompass the formulation of standard operating procedures (SOPs), the enhancement of documentation practices, and periodic assessments grounded in COBIT 2019. These findings are anticipated to assist libraries in augmenting the efficacy of information systems governance and the quality of IT services.

Information technology (IT) governance plays a strategic role in supporting the achievement of organizational goals, especially in higher education institutions. Adiwangsa University Jambi, as a private university, is required to manage IT effectively, efficiently, and in line with the institution's vision. This study aims to analyze the level of IT governance capabilities at Adiwangsa Jambi University using the COBIT 2019 framework with a focus on the EDM (Evaluate, Direct, Monitor) domain. The research method used is a descriptive quantitative method through data collection using questionnaires, interviews, and documentation studies. The results show that the level of IT governance capability in the EDM domain is at level 2 (Managed Process), indicating that the IT governance process is running but still needs improvement in several aspects, especially in monitoring and controlling IT performance. This study is expected to provide recommendations for Adiwangsa University Jambi in improving IT governance in a sustainable manner.

SMP Negeri 5 Merlung is a public junior high school in Merlung Subdistrict that has utilized the DAPODIK system for online data processing management, enabling efficient sending and receiving of information to the government. This research analyzes IT governance on the DAPODIK system using the COBIT 5 framework, specifically the MEA01 domain (Monitor, Evaluate and Assess Performance and Conformance), which focuses on monitoring and evaluating performance and conformance. The research background is based on the need to maximize the utilization of the system at the school level. The main objectives are to determine the current and expected capability levels, as well as to provide improvement recommendations to achieve higher process maturity. The research method applies Assessment Process Activities, covering observation, interviews, identification of findings, gap analysis, and recommendations. The results show that the current capability level is at level 3 (established process), while the expected capability level is directed toward level 4 (predictable process). The implications of these findings provide practical recommendations such as routine monitoring enhancements, staff training, and integration of automation tools to bridge the capability gap, thereby improving the effectiveness of IT governance at SMP Negeri 5 Merlung sustainably.

Website Pelayanan Terpadu Satu Pintu (PTSP) merupakan wujud digitalisasi layanan publik yang membutuhkan tata kelola Teknologi Informasi (TI) yang efektif. Penelitian ini bertujuan untuk mengevaluasi tingkat kematangan tata kelola TI menggunakan framework COBIT 5 serta menilai keamanan dan performa sistem. Metode yang digunakan adalah deskriptif kuantitatif dengan audit pada 13 proses dari lima domain COBIT 5. Pengujian keamanan dilakukan menggunakan Nessus Scanner, sedangkan Apache JMeter digunakan untuk mengukur performa sistem. Hasil evaluasi menunjukkan rata-rata tingkat kematangan sebesar 3,6 dengan selisih (gap) 1,4 dari target level 5 (Optimized). Domain MEA02 memiliki gap tertinggi sebesar 2,1, menunjukkan kurangnya pengawasan internal. Pemindaian keamanan tidak menemukan celah dengan risiko tinggi, namun semua temuan berada pada kategori Informational. Dari sisi performa, halaman Home memiliki waktu respons tertinggi sebesar 22.683 ms dan throughput hanya 2,1 permintaan/detik, jauh di bawah standar pembanding. Hasil ini menunjukkan bahwa meskipun sistem telah berjalan cukup baik, masih diperlukan perbaikan dalam aspek pengawasan, keamanan, dan performa agar layanan PTSP dapat berjalan lebih optimal dan stabil.

The Electronic Traffic Law Enforcement (E-Tilang) system has been implemented in Jakarta as an innovative solution to address the increasingly complex problems of traffic law enforcement. This research aims to evaluate the effectiveness of the E-Tilang system's implementation by analyzing public compliance levels and measuring the system's maturity using the COBIT 2019 framework. The research method uses a quantitative approach with a survey of 113 Jakarta residents who have experience with the E-Tilang system. Data was collected through a structured questionnaire mapped to the five COBIT 2019 domains: Evaluate, , Plan and Organize (APO); Build, Acquire and Implement (BAI); Deliver, Service and Support (DSS); and Monitor, Evaluate and Assess (MEA)

PT. XYZ  applies Information Technology in business processes to achieve company goals. achieve company goals. However the use of Technology brings risks that can reduce business effectiveness and efficiency of the business. PT. XYZ faced several problems in its IT department, including network connectivity issues, human error, hardware failure, ERP system integration failure, data security, and human error, hardware failure, ERP system integration failure, data security, data backup failures, system downtime, and power outages. This research applies data collection methods through interviews and risk analysis, evaluating the steps taken by the company in managing IT risks systematically. Research results show that the application of the COBIT 5 Framework is effective in identifying, assessing, and managing IT risks, thus helping the company to minimize losses and ensure smooth operations. This research provides recommendations for improved risk management that is more structured and data-driven risk management, as well as the importance of training for IT staff to improve risk management capabilities in the company. improve risk management capabilities in the company.

Penelitian ini membahas implementasi kerangka kerja COBIT 5 dalam manajemen risiko teknologi informasi pada UMKM XYZ, dengan fokus pada evaluasi domain APO12 (Manage Risk) dan EDM03 (Ensure Risk Optimisation) untuk mengukur kapabilitas tata kelola TI. Hasil evaluasi menunjukkan bahwa UMKM XYZ berada pada Level 4 (Performed Process), yang menunjukkan bahwa manajemen risiko telah berjalan secara konsisten, meskipun masih perlu penyempurnaan, seperti rencana penanganan risiko yang terdokumentasi dan prosedur komunikasi serta eskalasi yang jelas. Analisis risiko mengidentifikasi 8 faktor risiko dengan 21 risiko, terdiri dari 3 risiko tinggi dan 18 risiko sedang. Rekomendasi yang diajukan untuk meningkatkan kapabilitas manajemen risiko antara lain menyusun rencana penanganan risiko yang terdokumentasi, memperbaiki prosedur komunikasi dan eskalasi, serta menyusun kebijakan manajemen risiko yang komprehensif. Langkah mitigasi yang disarankan meliputi penyusunan disaster recovery plan, pemeliharaan rutin sistem, backup data berkala, solusi jaringan alternatif, dan monitoring laporan keuangan serta kondisi perangkat keras. Dengan implementasi rekomendasi ini, UMKM XYZ diharapkan dapat meningkatkan kapabilitas tata kelola risiko TI dan menghadapi tantangan teknologi secara lebih efektif dan berkelanjutan.

Digital transformation in Information Technology (IT) governance has become a crucial aspect in improving the efficiency of public services, particularly within the Department of Community and Village Empowerment, Population, and Civil Registration of North Sumatra Province. This study aims to analyze the implementation of digital transformation in IT governance using the COBIT 2019 framework. The research method includes the analysis of regulations, the role of IT, procurement models, implementation methods, and technology adoption strategies applied by the department. The findings show that IT implementation is predominantly strategic in nature, supporting the digitization of population services and enhancing data transparency. The IT procurement model comprises a combination of outsourcing (30%), cloud computing (30%), and insourcing (40%) to balance efficiency and system control. Agile methodology is the most dominant implementation method (50%), followed by DevOps (35%) for maintenance and traditional approaches (15%) for more structured projects. The department primarily adopts a "follower" technology adoption strategy (75%), reflecting a selective approach to digital innovation. Based on COBIT 2019 evaluation, the BAI (Build, Acquire, and Implement) domain is the main focus, with high scores in solution identification and improvement management (90) and change management (100), indicating the department’s readiness to adopt digital systems. However, challenges remain in information security, inter-agency data integration, and human resource readiness. The digital transformation of IT governance at the department has been systematically implemented, supporting the improvement of population service efficiency. Enhancements in security, infrastructure, and the strengthening of IT governance policies are necessary to optimize and sustain digital transformation implementation.

ABSTRACT The implementation of Information Technology at XYZ Hospital serves as a key driver in enhancing the efficiency of healthcare services, but it also raises the organization’s vulnerability to significant operational risks. The primary risks identified involve inaccurate data resulting from human mistakes, breakdowns in system interoperability, and the deterioration of hardware infrastructure that may interfere with patient care. This research seeks to assess the governance of IT risk management and determine the organization’s capability level using the COBIT 5.0 framework, focusing on the APO12 (Manage Risk) domain. The study employs qualitative methods, gathering information through interviews and direct observations, and then conducts a gap analysis to compare the current state (As-Is) with the desired future state (To-Be). Findings show that the organization’s capability is currently at Level 2 (Managed Process) with a score of 1.87, which is still below the intended maturity level of 3 (Established Process) at 2.94. These results indicate that risk management activities are still largely reactive and rely on intuition, with no standardized procedures embedded within the institution. Ultimately, the study suggests formalizing a Risk Register, standardizing mitigation procedures through established SOPs, and developing a Disaster Recovery Plan to strengthen risk governance into a more systematic, preventive, and resilient framework.

Pusat data menjadi tempat sekaligus aset penting organisasi. Demikian pula rencana pengelolaan keberlanjutan (kontinuitas) sangat penting untuk menjaga organisasi tetap dapat menjalankan proses bisnisnya ketika terjadi bencana pada pusat data atau infrastruktur teknologinya. Evaluasi tata kelola menjadi suatu hal yang penting dan harus dilakukan untuk mengetahui sejauh mana pengelolaan pusat data dan kesiapan rencana pengelolaan keberlanjutan (kontinuitas) suatu organisasi. Metode penelitian yang digunakan meliputi menentukan area fokus evaluasi, menyusun instrumen evaluasi (interview, kuesioner dan test sistem), pelaksanaan evaluasi, pengolahan hasil evaluasi, analisa gap dan penyusunan strategi perbaikan. Tingkat kematangan saat ini berada pada level 3. Tingkat kematangan yang diharapkan berada pada level 5, kecuali untuk komponen informasi dan komponen budaya, etika dan perilaku berada pada level 4. Strategi perbaikan dirumuskan bertahap untuk strategi perbaikan dari level 3 ke level 4 dan strategi perbaikan dari level 4 ke level 5. Perumusan strategi perbaikan disusun berdasarkan tujuh komponen sistem tata kelola dengan urutan prioritas berdasarkan hasil analisa gap.

One of the benefits of the development of information systems is to increase effectiveness, efficiency and convenience in various aspects of technological life, especially in the scope of education, such as at SMK Negeri 1 Banyumas which implements a library visit system. But there are also challenges in its implementation, such as theft of personal data and misuse of data by irresponsible people. By conducting an information system audit, we can better understand the weaknesses of the system, for example, using COBIT 5 to view and evaluate the information system. as in the questionnaire that we distributed shows that there are 79% of students feel safe about the library visit system and 4.8% of students feel that the library visit system is not secure enough for almost the same reasons such as the authentication system that only relies on a username in the form of NIS and no password. From this data we can provide recommendations such as implementing a password system and 2-factor authentication in order to better protect personal data, files, systems, networks, and so on so that the system becomes better and more secure.

PT Jadi Kaya Raya Bersama, founded in 2024 in Banyumas, Indonesia, focuses on providing reliable financial recording solutions for Micro, Small, and Medium Enterprises (MSMEs) through fintech-based applications. The platform is designed to support transaction recording, financial monitoring, and reporting processes to improve MSME financial management. Despite its significant potential, several technical issues have hindered the application’s performance and service quality. Key problems identified include disruptions in the WhatsApp Bot API, user authentication errors, and the lack of integration with banking systems and digital wallet services. These challenges affect transaction recording accuracy, operational efficiency, and the security of user financial data. To identify the root causes of these issues and propose appropriate solutions, a system audit was conducted using the COBIT framework as a governance and management evaluation tool. The audit process involved assessing system performance, control mechanisms, and IT service management practices. The results indicate that API disruptions were primarily caused by network instability and configuration errors, which led to interruptions in automated transaction recording services. Meanwhile, authentication problems were associated with weak login mechanisms and insufficient identity verification processes. In addition, the application’s inability to integrate with banking and e-money services created limitations in transaction synchronization and reduced overall user convenience. Based on these findings, several strategic recommendations are proposed. These include optimizing API performance, strengthening authentication systems through the implementation of Two-Factor Authentication (2FA), and developing integration capabilities with banking institutions and digital wallet platforms. The implementation of these improvements is expected to enhance system efficiency, data security, and service quality. Ultimately, strengthening the fintech application’s performance will support MSMEs financial management and contribute to sustainable digital economic growth in Indonesia.

Lebu Digita (LeDig) is a program to realize a Smart Village or 'Smart Village' which aims to change the use of digital technology both in community services and in village government administration. The implementation of this program has used sufficient resources, both in terms of funds and other resources provided by the Indramayu Regency Government. This program aims to achieve the development strategy that has been planned by the Indramayu Regency Government and surrounding villages with the main goal of providing digital-based services for the Indramayu Regency Community. The use of a digital-based system must also be supported by strengthening user competencies through a digital literacy training program for village communities. This community service program aims to increase public awareness of information security in using digital media in the LeDig Program can increase productivity, expand markets, and create new jobs in Indramayu Regency. This community service activity also resulted in a measurement of the level of public awareness of information security using an instrument developed based on the COBIT 2019 Framework. From the results of this measurement, it can be determined the follow-up to the community service program that will be carried out next for the community using the LeDig program in Indramayu Regency, the implementation of which was carried out by a research team from the Faculty of Computer Science, UPN Veteran Jakarta in collaboration with partners from UNIZA, Malaysia.Lebu, Digital, Indramayu, Security, information.