10-Tutorial-Maturity

.pdf

School

University of Melbourne *

*We aren’t endorsed by this school

Course

90081

Subject

Information Systems

Date

Oct 30, 2023

Type

pdf

Pages

Uploaded by MagistrateNeutron24875

ISYS90038 IS Strategy & Governance Tutorial 10 © Sean Maynard, University of Melbourne 2023 1 Analysing IT Governance Maturity Level using COBIT 2019 Framework: A Case Study of Small Size Higher Education Institute (XYZ-edu) Source : https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9274599 This study is conducted in a small higher educational institution called XYZ-edu that was established in the 1960s. XYZ-edu focuses on preparing IT graduates, mastering practical skills and having a good character. To achieve its goal, XYZ-edu has two subunits, namely the Integrated College of Technology XYZ-edu (XYZ College) which is responsible for the education process and the Information Systems Technology Agency (XYZ Agency) which is responsible for managing IT resources throughout the XYZ-edu. Despite having a subunit that focusing on managing IT, based on author observations and interview with the Chair of XYZ Agency, XYZ-edu still has many IT related problems. One problem that often occurs is the unstandardized stage of software development that is not in accordance with best practice, causing many problems in the future. With the existence of this research, XYZ-edu guides to make digital transformations that are currently urgently needed during the pandemic era period in distance learning activities. In this study, the framework used to measure the IT governance maturity level is COBIT 2019. COBIT 2019 has chosen because of its flexibility and openness, which is suitable for small size organizations that lack the resources sufficient to implement good IT governance. And COBIT is a framework that can help the implementation of IT Governance by considering all aspects both in terms of people, skills, competencies, services, infrastructure, and application. This study uses 6 domains to see the maturity level of IT governance at XYZ-edu, namely stakeholders’ involvement, management support, financial support, organizational effect internally, the strategic alignment between IT and business, IT staffing management, and IT structure. The six domains were chosen because they are critical factors that influence the success of IT Governance in an organization A. Data Collection For researchers, Data Collection was a challenge in the middle of the pandemic era. The researchers managed to get data from multiple sources. B. Analysis Methods First, the authors conducted a preliminary interview and perform goal cascading to identify existing problems in xyz- edu. Then, they identify the process from COBIT 2019 that is related to the identified problems. Next, they evaluate the IT governance maturity level and determine the target of maturity level by using questionnaires and interviews. The questionnaires are adopted from COBIT 2019 guidelines that are related with xyz-edu existing problems. Then they conducted gap analysis between the current maturity level and the target. Lastly, they constructed a set of recommendations to help xyz-edu to achieve their target of IT governance maturity level. C. Measuring IT Governance Maturity Level After determining the COBIT 2019 processes that are prioritized in the improvement process, an assessment of the capability of the process is carried out. The capability level is calculated based on the average output (outcome) attributes of each selected process. Then, the value is converted into achievement categories based on ranking compiled according to guidelines from COBIT 2019. If the assessment at one level meets the categories of achieved (L) or fully achieved (F), then that level has been successfully achieved and can be assessed to the next level. The measurement scale uses the rating level at COBIT 2019 is consisted of 4 categories. First, 0-15% achievement is considered as not achieved. Meanwhile, >15-50% and >50-85% are considered as partially and largely achieved, respectively. Lastly, indicators that have >85-100% achievement is considered as fully achieved. All of the indicators will be calculated to determine the level of maturity for each process. Table III shows the criteria of six maturity level on COBIT 2019. D. Prioritization of COBIT Process Sourced from interviews that have been conducted, there are a number of issues raised by the head of XYZ Agency related to IT Governance at XYZ College. These problems are related to IT management, human resources (HR), and the form of commitment from stakeholders including communication problems. This problem was mapped into the COBIT 2019 process. Based on the mapping, nine selected processes were obtained namely EDM01 Ensured Governance Framework Setting and Maintenance, EDM02 Ensured Benefits Delivery, EDM04 Ensured Resource Optimization, APO01 Managed I&T Management Framework, APO02 Managed Strategy, APO04 Managed

ISYS90038 IS Strategy & Governance Tutorial 10 © Sean Maynard, University of Melbourne 2023 2 Innovation, APO07 Managed Human Resources, BAI01 Managed Availability and Capacity, and BAI02 Managed Operations (Table V). E. Capability Level of IT Governance Process at XYZ-edu After obtaining the 2019 COBIT processes that were prioritized in the process of improvement, then an assessment of the capability level for each process is based on the standards of COBIT 2019. For each process, the percentage fulfillment level is determined. Table VI is an example of evaluating XYZ-edu capabilities in the EDM01 process. Because the fulfillment value at Level 1 only reaches 29%, it can be concluded that the EDM01 process has not yet reached Level 1. That is, the EDM01 process is still at Level 0. The overall results of the evaluation process can be seen in Table VII. From this table, it can be seen that the capability level of the 2019 COBIT process which is a priority is very low. Most of the capability achieved by the process is level 0 (incomplete). There is only one process that has capability level 1 (performed), namely EDM04.

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version