Evaluation of Information System Governance Using COBIT 4.1 and Index KAMI to Measure Maturity and Security Levels in Bank Maju

Elianna Katherine Untoro; Afifah Trista  Ayunda

doi:10.51903/rtwth195

Authors

Elianna Katherine Untoro Universitas Pradita, Tangerang, Banten, Indonesia
Afifah Trista Ayunda Universitas Pradita, Tangerang, Banten, Indonesia https://orcid.org/0009-0003-6069-4147

DOI:

https://doi.org/10.51903/rtwth195

Keywords:

COBIT 4.1, IT Governance, KAMI Index 5.0, Information Security, Maturity Level

Abstract

The development of information technology requires the banking sector to implement measurable IT governance and information security to ensure operational reliability and customer data protection. However, many financial institutions, including Bank Maju, do not yet have a comprehensive picture of the maturity of IT governance and information security in an integrated manner. This study aims to evaluate the maturity of information technology governance using the COBIT 4.1 framework and to assess information security readiness using the KAMI Index version 5.0. This study uses a case study method with a descriptive qualitative approach through document analysis, observation, and assessment of IT processes in four COBIT 4.1 domains: Plan and Organize, Acquire and Implement, Deliver and Support, and Monitor and Evaluate, and five main areas of the KAMI Index. The evaluation results show that Bank Maju’s IT governance maturity level is 3.58, or Level 3 (Defined Process), indicating that the process has been documented but not consistently and measurably implemented. The KAMI Index assessment shows information security readiness is in the Sufficient/Moderate category, with major weaknesses in risk management, asset management, and personal data protection. These findings indicate that weaknesses in IT governance directly impact the low effectiveness of risk management and information security. This research contributes to this by providing an integrated evaluation approach that links IT governance and information security readiness as a basis for formulating improvement recommendations in the banking sector.

References

[1] H. C. R. Singgih, “Pengelolaan Tata Kelola Perusahaan dan Kaitan dengan Keberlangsungan Usaha: Sebuah Review Literatur,” TRANSAKSI, vol. 14, no. 2, pp. 16–25, 2022. [Online]. Available: https://ejournal.atmajaya.ac.id/index.php/transaksi/article/view/3976

[2] M. Saleh, I. Yusuf, and H. Sujaini, “Penerapan Framework COBIT 2019 pada Audit Teknologi Informasi di Politeknik Sambas,” JEPIN (Jurnal Edukasi dan Penelit. Inform., vol. 7, no. 2, pp. 204–209, 2021, doi: 10.26418/jp.v7i2.48228.

[3] H. Hambali, “Penerapan Domain Monitor and Evaluate Framework Cobit 4.1 dalam Pelaksanaan Audit Sistem Informasi,” J. Sci. Soc. Res., vol. 4, no. 2, pp. 205–211, 2021, [Online]. Available: https://www.jurnal.goretanpena.com/index.php/JSSR/article/view/608

[4] B. Raharjo, R. Rudjiono, and Y. Fitrianto, "Prediction and Detection of Scam Threats on Digital Platforms for Indonesian Users Using Machine Learning Models," Journal of Technology Informatics and Engineering, vol. 3, no. 3, pp. 350–369, Dec. 2024, doi: 10.51903/jtie.v3i3.208.

[5] H. A. Pratiwi and L. Wulandari, “Evaluasi Tingkat Kesiapan Keamanan Informasi Menggunakan Indeks Keamanan Informasi (Indeks KAMI) Versi 4.0 pada Dinas Komunikasi dan Informatika Kota Bogor,” J. Ind. Eng. Manag. Res., vol. 2, no. 5, pp. 146–163, 2021, doi: 10.7777/jiemar.v2i5.196.

[6] Digitama, “Manfaat Assessment Indeks KAMI,” Digitama. [Online]. Available: https://digitama.consulting/manfaat-asessmen-indeks-kami/

[7] B. Saad, “Analisis Implementasi Cobit 4.1 pada STIE Indonesia Banking School serta Dampaknya terhadap Focus It Governance,” J. Keuang. dan Perbank., vol. 12, no. 1, pp. 72–87, 2015, doi: 10.35384/jkp.v12i1.14.

[8] K. Naseer and H. N. Ahmed, "Effectiveness and Reliability of Artificial Intelligence in Fraud Detection: A Mixed-Method Study on Financial Audit," Journal of Management and Informatics, vol. 4, no. 1, Apr. 2025, doi: 10.51903/jmi.v4i1.168.

[9] M. Lestari, M. E. Puspita, and A. F. Wijaya, “Model Tata Kelola TI Terintegrasi untuk Keamanan Informasi di Sektor Fintech,” J. Teknol. dan Manaj. Ind. Terap., vol. 4, no. 3, pp. 766–776, 2025, doi: 10.55826/jtmit.v4i3.943.

[10] E. R. P. Harlin and E. Haryani, “Penerapan Framework cobit pada perbankan di Indonesia: sebuah tinjauan literatur sistematis,” JIPI (Jurnal Ilmiah Penelitian dan Pembelajaran Informatika), vol. 10, no. 3, pp. 2426–2434, 2025. doi: 10.29100/jipi.v10i3.6487.

[11] B. Rahardian and Raden Venantius Hari Ginardi, “Evaluation of IT Risk Management in the Banking Industry using the COBIT 2019 Framework,” J. Ekon. Manaj. Sist. Inf., vol. 7, no. 1, pp. 427–432, 2025, doi: 10.38035/jemsi.v7i1.6117.

[12] A. Natasya, R. Agusiady, and H. Dongoran, “Analysis of Innovation Technology Implementation and Risk-Based Internal Audits on Company Performance Optimization (Case Study of a Listed State-BUMN Bank),” J. Dialekt. J. Ilmu Sos., vol. 23, no. 3, pp. 28–45, 2025, doi: 10.63309/dialektika.v23i3.733.

[13] A. N. Hamdiyani and I. Anis, “The Impact of IT Governance Practices on Profitability: Mediating Role of Financial Technology Adoption,” J. Akunt. Trisakti, vol. 11, no. 1, pp. 111–128, 2024, doi: 10.25105/jat.v11i1.19418.

[14] F. Wahyudi and M. Jibril, “Information System Audit on IT Governance Using COBIT Reference Model Approach,” Teknofile: Jurnal Sistem Informasi, vol. 3, no. 9, pp. 693–701, 2025. [Online]. Available: https://jurnal.nawansa.com/index.php/teknofile/article/view/553

[15] D. D. Diandri, Y. Yusran, and E. Y. Susanti, "Design of a Web-Based Tuition Payment Information System at SMKN 7 Tebo," Jurnal Ilmiah Sistem Informasi, vol. 4, no. 2, pp. 200–210, Sep. 2025, doi: 10.51903/4nq0d708.

[16] P. Novantara and D. Nugraha, “The Study on Planning and Evaluation for IT Governance Domain PO and ME Quality Control Using the Cobit Framework 4.1,” Sci. Explor. J. Indones. Acad. Res., vol. 1, no. 1, pp. 29–37, 2023, doi: 10.25134/jiar.v1i1.6.

[17] B. Belelang and S. Nurlela, “Penggunaan Cobit 4.1 untuk Audit Sistem Informasi Kepegawaian pada PT. Mustika Agung Sentosa,” INSANtek, vol. 3, no. 2, pp. 67–72, 2022, doi: 10.31294/instk.v3i2.1570.

[18] N. Normah, B. Rifai, and A. Afitta, “Audit Tata Kelola Teknologi Informasi Menggunakan Cobit 4.1 PT. Daya Cipta Kemasindo Tangerang,” Indones. J. Softw. Eng., vol. 8, no. 2, pp. 163–172, 2022, [Online]. Available: https://elibrary.ru/item.asp?id=79113461

[19] M. Ringga, “Analysis of Information Technology Governance at the Office of Communication and Information (Diskominfo) Using the COBIT 4.1 Method,” Journal of Computer Scine and Information Technology, vol. 8, no. 4, pp. 111–118, 2022, doi: 10.35134/jcsitech.v8i4.48.

[20] N. Nurbojatmiko, M. S. K. Karimiyah, N. M. Asnadi, and R. Anisyah, “ISO 27001 as Information Security Solution in Society 5.0 Era: Systematic Literature Review,” Sink. J. dan Penelit. Tek. Inform., vol. 9, no. 1, pp. 484–492, 2025, doi: 10.33395/sinkron.v9i1.14448.

[21] I. N. A. A. Wibawa, A. A. N. H. Susila, and M. A. Pasirulloh, “Information Security Evaluation at Hospital using Index KAMI 5.0 and Recommendations Based on ISO/IEC 27001: 2022,” J. Inf. Syst. Informatics, vol. 6, no. 4, pp. 3070–3086, 2024, doi: 10.51519/journalisi.v6i4.949.

[22] L. D. A. Jelita, M. N. Al Azam, and A. Nugroho, “Evaluasi Keamanan Teknologi Informasi Menggunakan Indeks Keamanan Informasi 5.0 dan ISO/EIC 27001: 2022,” J. Saintekom Sains, Teknol. Komput. dan Manaj., vol. 14, no. 1, pp. 84–94, 2024, doi: 10.33020/saintekom.v14i1.623.

[23] A. H. Nadanta, H. Farisi, and D. W. Brata, “Analisis Evaluasi Indeks KAMI (Keamanan Informasi) 5.0 dalam Pengelolaan Keamanan Informasi di SMK Telkom Purwokerto,” J. Pengemb. Teknol. Inf. dan Ilmu Komput., vol. 9, no. 8, pp. 1–9, 2025, [Online]. Available: https://j-ptiik.ub.ac.id/index.php/j-ptiik/article/view/15233

[24] H. Hanif and B. Sugiantoro, “Evaluasi Tingkat Sistem Keamanan Teknologi Informasi Menggunakan Indeks Kami dan Cobit 5 (Studi Kasus : Ponpes Demak),” J. Media Inform., vol. 6, no. 4, pp. 2401–2406, Aug. 2025, doi: 10.55338/jumin.v6i4.6492.

[25] Bank Maju, “Bank Terpercaya Melayani dengan Hati,” bankmaju.com, n.d. [Online]. Available: https://bankmaju.com