Computational Analysis of IT Governance Audit Using COBIT 4.1 Framework: A Customer Perspective
Abstract
A company’s performance can be measured by the number and satisfaction of customers, which helps in maintaining customer relationships. Indicators such as customer satisfaction, perception of service, and loyalty can be derived from the Customer Perspective of the Balance Scorecard (BSC). Conducting an IT governance audit is essential to understand how customers perceive a service. The use of the COBIT 4.1 Framework for IT governance audits is recognized for its detailed process, both for business and governance purposes, to avoid vulnerabilities and threats, thereby increasing customer satisfaction. Effective IT governance plays a crucial role in enhancing customer satisfaction and achieving organizational success. This research aims to analyze IT governance audits from a customer perspective using the COBIT 4.1 framework, with a focus on aligning IT strategy with business goals to meet customer expectations. The research method involves key processes in PO8 (Manage Quality) and PO10 (Manage Project) to determine quality standards and influential budgets. Integration with computational techniques for data analysis and IT audit algorithms is carried out to build strong IT governance practices. The computational audit results show maturity levels of 2.59 for PO8 and 3.02 for PO10, indicating areas needing improvement in product quality management and project execution to better meet customer needs. These findings underscore the importance of integrating computational insights to optimize IT governance frameworks and improve organizational performance, especially in customer retention through enhanced project quality management.
Downloads
References
S. Ramlaoui, A. Semma, and W. Dachry, “Achieving A Balance Between IT Governance And Agility,” Int. J. Comput. Sci. Issues, vol. 12, no. 1, p. 89, 2015.
M. M. Jha, R. M. F. Vilardell, and J. Narayan, “Scaling Agile Scrum Software Development: Providing Agility And Quality To Platform Development By Reducing Time To Market,” in 2016 IEEE 11th international conference on global software engineering (ICGSE), 2016, pp. 84–88.
D. Gibbs, “Sustainability Entrepreneurs, Ecopreneurs And The Development Of A Sustainable Economy.,” Greener Manag. Int., no. 55, 2009.
J. C. Bertot, P. T. Jaeger, S. Munson, and T. Glaisyer, “Social Media Technology And Government Transparency,” Computer (Long. Beach. Calif)., no. 11, pp. 53–59, 2010.
R. S. Kaplan, “Conceptual Foundations Of The Balanced Scorecard,” Handbooks Manag. Account. Res., vol. 3, pp. 1253–1269, 2009.
H. Dincer, S. Yüksel, and L. Martinez, “Balanced Scorecard-Based Analysis About European Energy Investment Policies: A Hybrid Hesitant Fuzzy Decision-Making Approach With Quality Function Deployment,” Expert Syst. Appl., vol. 115, pp. 152–171, 2019.
P. R. Niven, Balanced scorecard: Step-By-Step For Government And Nonprofit Agencies. John Wiley & Sons, 2011.
H.-Y. Wu, Y.-K. Lin, and C.-H. Chang, “Performance Evaluation Of Extension Education Centers In Universities Based On The Balanced Scorecard,” Eval. Program Plann., vol. 34, no. 1, pp. 37–50, 2011.
H.-Y. Wu, Y.-K. Lin, and C.-H. Chang, “Performance Evaluation Of Extension Education Centers In Universities Based On The Balanced Scorecard,” Eval. Program Plann., vol. 34, no. 1, pp. 37–50, Feb. 2011.
S.-M. Tseng, “Knowledge Management Capability, Customer Relationship Management, And Service Quality,” J. Enterp. Inf. Manag., vol. 29, no. 2, pp. 202–221, Mar. 2016.
R. Bhagwat and M. K. Sharma, “Performance Measurement Of Supply Chain Management: A Balanced Scorecard Approach,” Comput. Ind. Eng., vol. 53, no. 1, pp. 43–62, 2007.
W. Ulaga, “Capturing value creation in business relationships: A customer perspective,” Ind. Mark. Manag., vol. 32, no. 8, pp. 677–693, 2003.
N. Hill and J. Alexander, The Handbook Of Customer Satisfaction And Loyalty Measurement. Routledge, 2017.
A. Graf and P. Maas, “Customer value from a customer perspective: a comprehensive review,” J. für Betriebswirtschaft, vol. 58, no. 1, pp. 1–20, 2008.
H. Oh, “Service quality, customer satisfaction, and customer value: A holistic perspective,” Int. J. Hosp. Manag., vol. 18, no. 1, pp. 67–82, 1999.
P. Binsar Kristian, “Analysis of Customer Loyalty through Total Quality Service, Customer Relationship Management and Customer Satisfaction.,” Int. J. Eval. Res. Educ., vol. 3, no. 3, pp. 142–151, 2014.
Y. Ramadonna, N. Nasf, and Z. Aziz, “The Effect Of Customer Relationship Management And Customer Value On Customer Satisfaction Of Services And Its Impact On Customer Loyaltyin Pt. BPR Rangkiang AUR,” MENARA Ekon., vol. 5, no. 1, 2019.
N. Simbolon and D. Y. Hardiyanti, “Security Audit on Loan Debit Network Corporation System Using Cobit 5 and ISO 27001: 2013,” in Journal of Physics: Conference Series, 2019, vol. 1196, no. 1, p. 12033.
J. F. Andry and A. K. Setiawan, “IT Governance Evaluation Using Cobit 5 Framework On The National Library,” J. Sist. Inf., vol. 15, no. 1, pp. 10–17, 2019.
N. Legowo and A. Firmansyah, “Maturity Level Evaluation of Information Technology Governance in Payment Gateway Service Company Using COBIT,” in Asian Conference on Intelligent Information and Database Systems, 2019, pp. 49–61.
B. Von Solms, “Information Security Governance: COBIT or ISO 17799 or both?,” Comput. Secur., vol. 24, no. 2, pp. 99–104, 2005.
K. W. Hawkins, S. Alhajjaj, and S. S. Kelley, “Using Cobit To Secure Information Assets,” J. Gov. Financ. Manag., vol. 52, no. 2, p. 22, 2003.
S. Mukaromah and A. B. Putra, “Maturity Level at University Academic Information System Linking it Goals and Business Goal Based on Cobit 4.1,” in MATEC Web of Conferences, 2016, vol. 58, p. 3009.
E. W. N. Bernroider and M. Ivanov, “IT Project Management Control And The Control Objectives For IT And Related Technology (Cobit) Framework,” Int. J. Proj. Manag., vol. 29, no. 3, pp. 325–336, 2011.
K. Brand and H. Boonen, IT governance based on CobiT® 4.1-A Management Guide. Van Haren, 2007.
I. T. ITGI, “Governance Institute,” About IT Gov. Framew. Inf. Syst. Audit Control Found. 4o Ed. Roll. Meadows ISACA, 2007.
I. G. I. ITGI, “COBIT 4.1,” Framew. Control Object. Manag. Guidel. Matur. Model, 2007.
H. F. Tipton and M. K. Nozaki, Information Security Management Handbook. CRC press, 2007.
M. Simonsson, P. Johnson, and H. Wijkström, “Model-Based IT Governance Maturity Assessments with COBIT,” in ECIS, 2007, pp. 1276–1287.
M. Grundstein, “Assessing Enterprise’s Knowledge Management Maturity Level,” in World Summit on Knowledge Society, 2008, pp. 380–387.
M. A. M. Stambul and R. Razali, “An Assessment Model Of Information Security Implementation Levels,” in Proceedings of the 2011 International Conference on Electrical Engineering and Informatics, 2011, pp. 1–6.
P. Hendry and A. J. Fernandes, “IT Governance at Financial Technology Company using COBIT 4.1 Framework And Balanced Scorecard Perspective,” Int. J. Open Inf. Technol., vol. 7, no. 6, 2019.
N. Ozkan, A. Tarhan, and C. Kucuk, “Scrum at Scale in a COBIT Compliant Environment: The Case of Turkiye Finans IT,” Ozkhan, Tarhane Kucuk, 2017.
W. Sunthonwutinun and V. Chooprayoon, “A Proposed Model for Studying Information Technology Governance, Management, and Services of an Enterprise: An Integrated Framework of COBIT 5, ITIL® V3, and BSC,” Int. J. Comput. Theory Eng., vol. 8, no. 2, p. 140, 2016.
N. Y. Wijayanti, W. Setiawan, and R. A. Sukamto, “Performance Assessment of IT Governance with Balanced Score Card and COBIT 4.1 of Universitas Pendidikan Indonesia,” in Journal of Physics: Conference Series, 2017, vol. 812, no. 1, p. 12072.
C. Montenegro, N. Nuñez, and A. Larco, “IT Outsourcing Improvement: Contractual Model of Governance and Management from Customer Perspective,” in World Conference on Information Systems and Technologies, 2017, pp. 616–627.
C. Jaca and E. Psomas, “Total Quality Management Practices And Performance Outcomes In Spanish Service Companies,” Total Qual. Manag. Bus. Excell., vol. 26, no. 9–10, pp. 958–970, Oct. 2015.
G. Tapandjieva and A. Wegmann, “A Return on Our Experience of Using Services as a Unifying Concept for Business and IT Alignment in a University,” 2019.
B. Succar, “Building Information Modelling Maturity Matrix,” in Handbook Of Research On Building Information Modeling And Construction Informatics: Concepts And Technologies, IGI Global, 2010, pp. 65–103.
J. Mayer and L. L. Fagundes, “A Model To Assess The Maturity Level Of The Risk Management Process In Information Security,” in 2009 IFIP/IEEE International Symposium on Integrated Network Management-Workshops, 2009, pp. 61–70.
A. Amid and S. Moradi, “A Hybrid Evaluation Framework of CMM and COBIT for Improving the Software Development Quality,” J. Softw. Eng. Appl., vol. 6, no. 05, p. 280, 2013.
M. C. Paulk, B. Curtis, M. B. Chrissis, and C. V Weber, “Capability Maturity Model, Version 1.1,” IEEE Softw., vol. 10, no. 4, pp. 18–27, 1993.
J. Herbsleb, D. Zubrow, D. Goldenson, W. Hayes, and M. Paulk, “Software Quality And The Capability Maturity Model,” Commun. ACM, vol. 40, no. 6, pp. 30–40, 1997.
S. Akhlaghpour and L. Lapointe, “From Placebo to Panacea: Studying the Diffusion of IT Management Techniques with Ambiguous Efficiencies: The Case of Capability Maturity Model,” J. Assoc. Inf. Syst., vol. 19, no. 6, p. 4, 2018.
A. Navigation, “File Analysis and Your Information Governance Maturity,” no. Cmm, 2015.
R. R. Gilchrist, Managing for profit: the added value concept. Routledge, 2018.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License (Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) ) that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).
