Information Technology Governance Between Iso 38500, Risk It and Val It in Private University

https://doi.org/10.61487/jiste.v2i3.82

Authors

  • Afrizal Zein Universitas Pamulang
  • Salman Farizy Universitas Pamulang
  • Eko Suharyanto Universitas Pamulang
  • Chrisantus Tristianto Universitas Pamulang
  • Fingki Marwati Universitas Pamulang

Keywords:

iso 38500, risk it, val it, maturity level, cheese governance model

Abstract

This study explores the application of the ISO 38500, Risk IT, and Val IT frameworks in improving IT governance at the university. ISO 38500 provides general guidance for IT management by boards of directors, while Risk IT focuses on IT risk management and Val IT focuses on managing the value of IT investments. Qualitative research methods were used, including interviews with key stakeholders at Pamulang University. The research results show that the integration of the ISO 38500, Risk IT, and Val IT frameworks has helped universities optimize strategic decision-making regarding IT. Implementation of this framework increases transparency, accountability and holistic IT risk management across the university. However, challenges faced include a lack of deep understanding of the framework and the need to ensure consistency in implementation. Recommendations for the university include more intensive training for staff, strengthening communication between different units, and developing performance metrics that align with the university's strategic goals. This research makes an important contribution to the practical understanding of implementing effective IT governance in higher education environments, by highlighting the benefits and challenges of integrating the ISO 38500, Risk IT, and Val IT frameworks.

References

Aasi, P. (n.d.). Organizational Culture and Structure Influence on Information Technology Governance.

Ayu, A. L., et al. (2024). Assessment of IT Risk Management at the Faculty of Industrial Engineering, Telkom University, Utilizing the COBIT 2019 Framework’s APO12 Domain with LAM INFOKOM Standards Mapping. Electronic Integrated Computer Algorithm Journal, 1(2), 50–56. https://doi.org/10.62123/enigma.v1i2.21

Gómez Suárez, B. (n.d.). Doctoral Thesis 2022 IT Governance Implementation for Higher Education Institutions in Developing Countries.

Ilmudeen, A. (2021). A Review of IT Governance and IT Management in the Context of Business Value of IT. In Journal of Information Systems & Information Technology (JISIT), 6(1).

Melaku, H. M. (2023). A Dynamic and Adaptive Cybersecurity Governance Framework. Journal of Cybersecurity and Privacy, 3(3), 327–350. https://doi.org/10.3390/jcp3030017

Metin, B., Duran, S., Telli, E., Mutlutürk, M., & Wynn, M. (2024). IT Risk Management: Towards a System for Enhancing Objectivity in Asset Valuation That Engenders a Security Culture. Information (Switzerland), 15(1). https://doi.org/10.3390/info15010055

Nachrowi, E., Nurhadryani, Y., & Sukoco, H. (2020). (ARJUNA) Managed by Ministry of Research, Technology, and Higher Education. Accredited by National Journal Accreditation, 4(2), 764–774. http://jurnal.iaii.or.id

Obaid, L. (2020). Business-It Alignment in U.S.-Based Global Organizations: A Qualitative Exploratory Case Study.

Porath, U. (2023). Advancing Managerial Evolution and Resource Management in Contemporary Business Landscapes. Modern Economy, 14(10), 1404–1420. https://doi.org/10.4236/me.2023.1410072

Toifur, T., Kusrini, K., & Budi, A. (2022). Evaluation of Information Technology Governance Using COBIT 5 and ISO/IEC 38500. Jurnal Online Informatika, 7(1), 17. https://doi.org/10.15575/join.v7i1.814

Zabolotniaia, M., Cheng, Z., Dorozhkin, E. M., & Lyzhin, A. I. (2020). Use of the LMS Moodle for an effective implementation of an innovative policy in higher educational institutions. International Journal of Emerging Technologies in Learning, 15(13), 172–189. https://doi.org/10.3991/ijet.v15i13.14945

Published

2024-09-20

How to Cite

Zein, A., Farizy, S., Suharyanto, E., Tristianto, C., & Marwati, F. (2024). Information Technology Governance Between Iso 38500, Risk It and Val It in Private University . Journal of Information System, Technology and Engineering, 2(3), 280–286. https://doi.org/10.61487/jiste.v2i3.82

Issue

Section

Articles