Cobit

Information Technology (IT) Governance and IT Service and Processes Management (ITSM) are one of the priorities in organizations. Although many organizations are aware of the importance of using well-defined quality IT processes, they face the problem of how to use and improve them in practice. One of the final objectives of any ITSM policy must be to guarantee an adequate IT quality. In this sense, the use of action frameworks as Information Technology Infrastructure Library (ITIL) is essential. However, several quality models and maturity models have been developed, but they are not focused on how to measure the IT quality. As they do not include the appropriate mechanisms, it is necessary to complement them with other quality frameworks, e.g. European Foundation for Quality Management (EFQM). This paper proposes a maturity model for IT quality improvement based mainly on ITIL and EFQM.

Some companies have achieved better performance as a result of their IT investments, while others have not, as organizations are interested in calculating the value added by their IT. There is a wide range of literature that agrees that the best practices used by organizations promote continuous improvement in service delivery. Nevertheless, overuse of these practices can have undesirable effects and unquantified investments. This paper proposed a practical tool formally developed according to the DSR design science approach, it addresses a domain relevant to both practitioners and academics by providing IT service governance (ITSG) domain model ontology, concerned with maximizing the clarity and veracity of the concepts within it. The results revealed that the proposed ontology resolved key barriers to ITSG process adoption in organizations, and that combining COBIT and ITIL practices would help organizations better manage their IT services and achieve better business-IT alignment.

The application of information systems has become an important element because of the effectiveness and efficiency that can accelerate performance so as to encourage excellence both financially and networked. This result in the importance of a framework for ensuring that information technology enables maximizing business profits, the risk of information technology being managed appropriately, and that information technology resources are used responsibly, to achieve these objectives careful planning, implementation, support, supervision and evaluation are needed and optimal. Competition in Tight business, now making people do specific strategies to increase profits and still maintain its existence. Many frameworks are used to measure the maturity level of Information technology strategy alignment with an organization's business strategy, one of framework is COBIT (Control Objective for Information and Related Technology). COBIT 5 frameworks provide a solution in implementing IT governance models. This research focuses on the APO02 (manage strategy) and MEA (Monitor, Evaluate and Assess Performance) process MEA01 (Monitor, Evaluate and Assess Performance and Performance) process. The stages of analysis in this study are initiation, Planning the Assessment, Briefing, Data Collection, Data Validation, Process Attribute Level and Reporting the Result as contained in COBIT 5 Assessment Process Activities. This audit uses the Guttman scale to determine the results and Capability Levels of APO02 and MEA01. After the capability level value is obtained, recommendations are prepared as input for managing the information system for receiving life insurance letters using application.

Saat ini penggunaan dan fungsi teknologi informasi sudah menjadi bagian penting dan diperlukan dihampir semua sektor bisnis. Hal ini berlaku juga untuk institusi perguruan tinggi. Untuk menjaga agar teknologi informasi menjadi penambah nilai dalam sebuah perguruan tinggi, maka perlu adanya tata kelola teknologi informasi agar semua faktor dan dimensi yang berhubungan dengan penggunaan teknologi informasi menjadi bersinergi dan bisa memberikan nilai tambah serta pengembalian investasi yang diharapkan bagi perguruan tinggi. Kenyamanan dan peningkatan pelayanan bagi para stakeholder di lingkungan perguruan tinggi dapat terus ditingkatkan dengan penerapan teknologi informasi yang tepat sasaran.
Sekarang ini hampir semua perguruan tinggi menerapkan penggunaan teknologi informasi sebagai pendukung kegiatan operasional pengajaran serta administrasi pelaksanaan unit terkait dengan kegiatan usaha institusi. Tata kelola teknologi informasi yang dibutuhkan untuk institusi pendidikan tinggi yaitu agar tercipta proses penyebaran ilmu dalam kegiatan pembelajaran yang lebih interaktif dan dinamis, transparasi tata kelola operasional kegiatan institusi, serta peningkatan kinerja berbasis evaluasi dengan penilaian yang transparan, serta keamanan data serta informasi yang berhubungan dengan hak intelektual seseorang. Tata kelola teknologi informasi nantinya akan menjadi jawaban agar apa yang sudah di-investasi-kan untuk teknologi informasi agar dapat memberikan hasil yang maksimal dan berguna bagi institusi.
Berkenaan hal di atas, maka  tugas ini adalah gambaran implementasi tata kelola teknologi informasi (IT Governance) dengan kerangka kerja COBIT 5 pada Laboratorium Komputer di STMIK LIKMI Bandung, terutama pada ruang lingkup area Tata Kelola (Governance) di domain Evaluate, Direct, and Monitoring (EDM), khususnya pada proses nomor 4 (EDM 4).

The process of designing information technology strategy plan (ITSP) in this research is using the research methodology Mixed Methods Approaches by the scope of the research framework on the COBIT framework V.4.1 in Domain Plan and Organize, with the approach in the IT Process PO1-Define a Strategic IT Plan with coverage Detailed Control Objectives, on the activity PO1.1 IT Value Management, PO1.2 Business - IT Alignment, PO1.3 Assessment of Current Capability and Performance, and PO1.4IT Strategic Plan. As a major research framework, COBIT V.4.1 able to limit the scope of the problems in this research, and can perform transcription analysis on the various theories and frameworks that relate to the design of IT organizations. Research produces 4 outputs consisting of; identification between sustainability goals with the objectives of the IT institutions, identify the value of IT management, to get an assessment of current capability and performance, and the IT strategy plan.

The design is divided into seven discussions, namely the following; institutes goals in the context of IT in the ITB, IT leads to ITB, information architecture, application architecture, infrastructure architecture, organizational architecture, and IT Roadmap development. Classification of services in the main IT ITSP consists of Teaching and Learning Services, Academic Administration Services, Research and Expertise Service, Human Resource Development Service, Organizations Management Service, Service and Support. Discussion of the organization strategies focus on the IT Management Unit in the ITB. IT Architecture in the ITSP is divided into 4 main categories, namely information, applications, organizational, and infrastructure. The others discussion is about IT planning related with institutes business goals context, on investment and related development of IT Roadmap achievement in ITB.

Keyword: CIO, COBIT V.4.1, CSF, ITSP, McFarlan, Webometric, WCU

A Governança Corporativa das Tecnologias de Informação é uma temática primordial reconhecida pela comunidade académica e profissional. A necessidade de obter valor, seja financeiro ou estratégico para a organização, resultante dos investimentos realizados em TI implica uma Gestão do Valor das TI adequada. As dificuldades ou o pouco know-how das empresas na implementação de práticas propostas por Frameworks elaborados pela comunidade profissional, como o Val IT 2.0 ou o COBIT, 5 levam as organizações a optar pelo desenvolvimento de modelos próprios. Este artigo identifica um conjunto de práticas e recursos de Gestão do Valor das TI, resultantes da integração do VAL IT 2.0 no COBIT 5, usando uma metodologia de investigação baseada numa revisão da literatura, que suportará o desenho de um modelo conceptual para identificação de um conjunto de habilitadores de Gestão do Valor das TI presentes no COBIT 5.

NOTE: Book is published by The Open Group Press, freely available on line at http://pubs.opengroup.org/opengrouppress/managing-digital/. PDF can be downloaded from https://publications.opengroup.org/g183. The book is also the basis for a forthcoming (Q4 2019) standard, The Digital Practitioner Body of Knowledge (DPBoK). These publications are developed using a collaborative, git-based approach. An open source governance process is under development with the sponsorship of The Open Group. Contact the author.

===============

The first general survey of IT management written from an Agile and Lean IT perspective. Suitable for an MIS or IT introductory course. Covers Cloud-native and DevOps practices and their implications for higher-order IT management concerns (operations, portfolio, process management, governance, architecture, etc). Based on a unique "emergence model," a thought experiment taking the student through individual human/computer interaction, to small team, to "team of teams," to enterprise.

Abstrak. Teknologi Informasi yang sejak lama dianggap sebagai pendorong dan pendukung strategi instansi saat ini dianggap sebagai bagian terintegrasi dari strategi bisnis. Penelitian ini membahas mengenai Evaluasi Layanan E-Learning Menggunakan Framework COBIT 4.1 di Universitas Pembangunan Nasional “Veteran” Jawa Timur yang bertujuan untuk mengetahui sejauh mana tingkat kematangan layanan E-Learning. Proses pengumpulan data dilakukan dengan cara Wawancara dan Kuisioner. Penelitian ini fokus pada domain PO2 dan DS11. Setelah dilakukan penelitian pada domain PO2 dan DS11 maka didapatkan nilai 2 dari rentang nilai 0 sampai 5. Berarti pihak UPT Telematika UPN “Veteran” Jawa Timur masih kurang baik dalam mengelola informasi pada layanan E-Learning.

Kata Kunci: Teknologi Informasi, COBIT 4.1, Detailed Control Objectives, E-Learning

Information Technology Management is a process of planning to use information technology in managing and controlling an organization. In order to manage a structure to link the resources to the information technology, it requires a framework that responds to the needs of the facility and IT infrastructure. For higher education, I nformation technology i s important i n all areas, such as teaching, research and administration. Thus, i nformation technology i s an effective strategic tool for Higher Education. The effective information technology management is able to help the higher education gain good followings; (1) Information Technology Targeting (2) Effective use of information technology resources and (3) IT Risk Management. The COBIT framework i s able to manage the policy to control the information technology and the best practice. COBIT is able to improve the standard and any recommendations continuously.

1. Pengertian COBIT COBIT (Control Objectives for Information and related Technology) adalah suatu panduan standar praktek manajemen teknologi informasi dan sekumpulan dokumentasi best practices untuk tata kelola TI yang dapat membantu auditor, manajemen, dan pengguna untuk menjembatani pemisah (gap) antara risiko bisnis, kebutuhan pengendalian, dan permasalahan-permasalahan teknis. COBIT 2019 adalah kerangka kerja yang menyediakan prinsip, praktik, alat, dan model yang diterima secara global untuk meningkatkan kepercayaan dan nilai dari IT perusahaan. Pada COBIT 2019, ada 7 komponen tata kelola yang perlu diperhatikan agar dapat mencapai objektif tata kelola yaitu penciptaan nilai (value creation), yaitu: a. Proses b. Struktur Organisasi c. Prinsip-prinsip, kebijakan dan kerangka kerja d. Informasi e. Kultur, etik, dan kebiasaan f. SDM, keterampilan dan kompetensi g. Layanan, infrastruktur dan aplikasi. Sistem klasifikasi pada COBIT 2019 terbagi 2 : 1. Sistem Tata Kelola (Governance System) a. Memenuhi kebutuhan para pemangku kepentingan (stakeholder). b. Mencakup organisasi secara menyeluruh (end-to-end). c. Menerapkan satu framework tunggal yang terpadu. d. Memungkinkan pendekatan yang holistik. e. Memisahkan tata kelola dengan manajemen. f. Penerapan sistem tata kelola yang dinamis. g. Dapat disesuaikan dengan kebutuhan organisasi. 2. Kerangka Kerja Tata Kelola (Governance Framework) a. Berbasis model konseptual. b. Bersifat terbuka dan fleksibel. c. Selaras dengan standard-standard besar lainnya.

– This paper discusses how various frameworks or guidelines can be used to improve the current situation in managing IT departments in the banks in Tanzania, by also initially identifying the current challenges faced by the banks. IT management involves managing all the resources that utilize information technology in an organization or firm that have to be managed according to priority. A good management of these resources brings about benefits in staffing and budgeting, organization and control as well as usage of technology. In today's world, many new firms are coming up which highly rely on information technology, making it complex at times in terms of managing IT infrastructure. Hence, the organizations have to make use of certain guidelines that can help them to manage their IT infrastructures in the desired way, and to bring about profitable benefits.

NIM : 55518110008 DOSEN PENGAMPU: Prof. Dr. Ir. Hapzi Ali, MM, CMA PROGRAM MEGISTER AKUNTANSI UNIVERSITAS MERCUBUANA JAKARTA 2018 COBIT (Control Objectives for Information and Related Technology) adalah sekumpulan dokumentasi dan panduan yang mengarahkan kepada tata kelola IT yang dapat membantu auditor, manajemen, dan pengguna (user) untuk menjembatani antara resiko bisnis, kebutuhan kontrol, dan permasalahan-permasalahan teknis. COBIT dikembangkan oleh IT governance Institute (ITGI) yang merupakan bagian dari Information Systems Audit and Control Association (ISACA) (Irwan, 2011).

Pendefinisian aktivitas utama pada Rumah Sakit Muhammadiyah Lamongan dilakukan dengan menggunakan analisis rantai nilai (value chain). Dari hasil analisis value chain, diperoleh aktivitas utama yang dijalankan oleh Rumah Sakit. Muhammadiyah Lamongan meliputi : Seleksi Karyawan (Inbound Logistics), Peningkatan Kemampuan dan Keterampilan Karyawan, dan Penilaian Kinerja (Operations), Peningkatan Kualitas SDI (Outbound Logistics), Perekrutan Karyawan (Marketing & Sales) dan Coaching and Conseling. (Services). Uurtan pelaksanaan migrasi diatas berdasarkan pertimbangan biaya dan manfaat aplikasi terhadap dampak aktivitas bisnis kedapannya sehingga selama proses migrasi sistem lama ke sistem baru dapat berjalan dengan baik.

The Sarbanes-Oxley Act makes it possible to guarantee the integrity of the financial information of listed companies, and its main objective is to protect the investor. Currently, in an effort to protect data, companies store and manage their financial information in their own technology infrastructures and IT systems. On the other hand, COBIT 5 is the framework that is implemented to govern Information Technology (IT) and ensure the alignment of IT to the organization's vision. However, COBIT does not have the tools that enable the detailed treatment of financial information; For this reason, it is proposed here to articulate COBIT 5 and the Integrated Framework of Internal Control of the Committee of Sponsoring Organizations of the Treadway Commission (COSO IC-IF), based on the guidelines set forth by the ISO 38500 and ISO 27001 standards, to comply To the Sarbanes-Oxley Act. As a result of this articulation, a guide was obtained for the financial auditor, allowing him to define quality controls based on good practices of IT controls. To achieve this, an alignment of the COBIT processes was performed with the principles of each of the components of COSO IC-IF. Additionally, it was proposed how to evaluate compliance with the requirements of the Law from an IT perspective, applying good practices in the implementation of the control and referencing of COBIT 5 processes.

La Ley Sarbanes-Oxley permite garantizar la integridad de la información financiera de las empresas que cotizan en bolsa, y su principal objetivo es proteger al inversionista. Actualmente y con la intensión de proteger los datos, las empresas almacenan y gestionan su información financiera en infraestructuras tecnológicas y sistemas informáticos propios.

PT. Metal Castindo Industritama adalah perusahaan yang bergerak dibidang investment casting, sand casting dan permanent mould dengan produk cor dari paduan baja, FCD, stainless steel dan alumunium. Sementara itu, PT. Metal Castindo Industritama telah menerapkan suatu sistem informasi guna mengoptimalkan kegiatan operasional kerja perusahaan. Salah satunya dengan adanya alat yang terhubung dengan kompoter yakni mesin fingerprint untuk merekam waktu hadir karyawan. Proses yang diterapkan seharusnya memiliki kemampuan dalam hal mengelola informasi, menyampaikan informasi, menjaga keamanan informasi, dan melindungi informasi dengan baik. Maka dari itu, diperlukan melakukan audit yang bertujuan untuk menilai terkait tata kelola TI yang sedang berjalan. Tujuan dari analisa ini yaitu untuk memperkirakan tingkat kematangan dan memeriksa persoalan yang ada pada cara sistem informasi absensi serta untuk memberikan rekomendasi kepada perusahaan guna mengoptimalkan manajemen TI yang tersedia. Dalam analisa ini memakai model kapabilitas sebagai parameter berhubungan dengan tanggapan narasumber dari daftar pertanyaan yang telah dibuat bersumber pada framework COBIT versi 5 domain MEA (Monitor, Evaluate, and Assess) menjadi rujukan. Total narasumber yang berpartisipasi dalam melengkapi daftar pertanyaan diambil sejumlah 40 narasumber mulai dari level manajer hingga operator PT. Metal Castindo Industritama yang biasanya menjalankan pendayagunaan mesin fingerprint tersebut. Berdasarkan keputusan dari tanggapan responden, maka memperoleh angka  kapabilitas kini sebanyak 3,6 pada rentang 1-4. Demi meraih kesimpulan yang diperlukan, maka direalisasilah sejumlah anjuran bakal mengoptimalkan kemampuan serta rujukan perbaruan kemampuan mesin fingerprint tersebut pada PT. Metal Castindo Industritama dalam masa nanti.

The aim of this study is to demonstrate the impact of the application of information technology governance (COBIT) on the quality of financial reporting. To achieve the objectives of this study, we used the analytical descriptive approach to study the theoretical and practical studies in the subject with an extrapolation of the main results and presentation of them in order to increase the quality of the financial reports. The study found that there is a correlation between IT governance and the COBIT framework in its four dimensions on the quality of financial reporting. It has been shown that there is a positive relationship between these dimensions and the quality characteristics of financial reporting.

Abstrak-Penelitian ini bertujuan untuk mengevaluasi dan menilai kinerja dari aplikasi Link Aja. Proses audit yang digunakana adalah menggunakan COBIT 5 dan Domain yang digunakan adalah MEA. Domain MEA dipilih karena Link Aja sudah lama dibangun dan sedang berlangsung maka domain tersebut cocok untuk diterapkan. Hasil dari penelitian menunjukan bahwa, Evaluasi terhadap output data pada sistem informasi harus dilakukan secara berkala guna menunjang proses perbaikan yang efisien dan juga Pihak instansi harus memiliki sebuah acuan berdasarkan evaluasi yang dilakukan sebelumnya, yang nantinya akan di terapkan di setiap sistem informasi khususnya sistem tata kelola Link Aja agar saat terjadinya kendala bisa langsung segera di tindak lanjuti dan tidak mengganggu jalannya proses adminitrasi.

Higher  education  institutions  in  South  Africa  have  invested  heavily  in  information  technology  and
information systems, with variable outcomes. Organisations in other sectors, such as engineering,
the  defence  industry,  public  administration  and  business,  have  developed  and  adopted  standards
and guides to good practice for the development and operation of software-based systems.
In the history of standards-making there was an early vision of the need to extend standardisation
beyond  software  engineering  into  the  world  that  acquires  and  uses  systems,  and  yet  the  overall
scope  of  available  standards  is  still  limited.  Seeing  slow  progress  in  the  international  committees
that  develop  nationally-endorsed  standards  (such  as  ISO-IEC/JTC1/SC7)  practitioner  communities
moved  to  develop  good  practice  guides  such  as  COBIT  and  ITIL,  that  have  found  considerable
interest in progressive organisations. Hence a range of potential guidance is available.
In  order  to  assess  the  extent  to  which  standards  and  good  practice  guides  might  assist  higher
education, the four tertiary institutions in the Western Cape were approached and a  representative
range of academic, administrative and managerial individuals agreed to contribute to the study as
respondents.  Interviews  were  organised in two parts: the first  an open  conversation about their
involvement with systems, and the second a structured examinati on of systems-related events that
they considered significant. By inspection of those events,  bipolar scales were developed by which
respondents  were  able  to  characterise  events  (for  example  as  ‘challenging’  or  ‘easy’,  or  as
‘functional’ or ‘dysfunctional’). Respondents rated events on those scales.  Repertory Grid analysis
was applied  so as to investigate which scales correlated with  event  success. 30 scales  (out of 170)
proved  to  be  adequately  correlated  with  success,  and  by  principal  component  analysis  they  were
combined  to  form  nine  ‘success  scale’  groups,  indicating  nine  areas  where  the  deployment  of
standards  or  good  practice  guides  might  be  expected  to  lead  to  more  effective  use  of  improved
information systems.
The study adopted an abductive approach to the work, keeping open the question of what might be
the contribution to knowledge. In the event, a new Reference Model emerged from the data analysis
that contributes to the effective choice and management of standards and good practice guides.
A review of available standards and good practice guides  using the new Reference Model concludes
that the good practice guides are more applicable than the internationally developed standards , and
in  some  areas  management  models  and  frameworks  have  a  contribution  to  make.  The  utility  of
standards,  good  practice  guides  and  management  models  will  depend  on  the  circumstances  and
context  of  use,  which  are  extremely  variable.  A  portfolio  approach  to  the  management  of
information  systems  provides  a  means  to  deal  with  that  variability.  It  is  further  found  that  the
IMBOK* can be used to assess the linkages between information technology, information systems,
business processes, business benefits and business strategy.
The new Reference Model has a role to play in resolving the need for standards in the four junctions
between those five IMBOK domains. Selected standards are assessed in that way, and an illustrative
commentary is provided showing how projects and other systems-related initiatives can be assessed
using the new Reference Model and the IMBOK.

* Information Management Body of Knowledge (UWC, 2003)