KUMPULAN TUGAS-TUGAS: COBIT ITSM

Control Objective for

Information and related Technology

COBIT yaitu Control Objectives for Information and Related Technology yangmerupakan audit sistem informasi dandasar pengendalian yang dibuat olehInformation Systems Audit and ControlAssociation (ISACA), dan InformationTechnology Governance Institute (ITGI) pada tahun 1992, untuk memberikan informasiyang diperlukan perusahaan dalam mencapaitujuannya, maka prinsip dasar COBIT menjelaskan (Simonsson & Johnson, 2006):

1. Business information requirements, terdiri dari: Effectiveness, Efficiency, Integrity, Availability, and Reliability ofinformation.

2. High-Level IT Processes, terdiri dari: IT Domains (Planning and Organisation, Acquisition & Implementation, Delivery & Support, Monitoring and Evaluation); IT Process (IT strategy,Computer operations, Incident handling,

Acceptance testing, Change management, Contingency planning,Problem management); Activities(Record new problem, Analyse, Proposesolution, Monitor solution, Record known problem.)

3. Information Technology Resource: Expert staff, Applications, Technology, Facilities, DatabaseManagement System, Hardware,Software, Multimedia.

COBIT memiliki cakupan yang sangatluas dan belum tentu semua organisasi memiliki atau mencakup keseluruhan proses-proses tersebut. (Kania, 2011) menjelaskansetiap perusahaan memiliki ragam danjangkauan pemanfaatan terhadap teknologiinformasi dan tidak semua langkah dalamCOBIT dapat diterapkan, hanya pada bagian tertentu yang dengan sesuai kebutuhanPerusahaan. Selaras dengan apa yang telahdijelaskan (ITGI, 2007) Standar ini tidakmenuntut penerapan pada setiap komponen tapi dapat memilih pada bagian-bagian yangterkait saja.

Perbandingan model COBIT denganModel lain seperti ditunjukan padatabel

2.1 dibawah ini (Mapping, 2011).

Tabel 2.1 Tabel cakupan COBIT 4.1 dalam domain PO danME disbanding model lain

Tabel 2.2 Tabel cakupan DomainCOBIT 4.1dibandingkan dengan Luftman

Framework(sumber: Luftman,2004 &Simonsson, 2008)

*Domain*	*COBIT 4.1*	*LUFTMAN*
PO1	Define a strategic ITplan.	LG1. Business strategic planning
PO2	Define the information architecture.	LSA1. Traditional, Enabler/Driver, External LSA2. Standards ArticulationLSA3. Architectural Integration: Functional   Organization, Enterprise, nter-enterprise
PO3	Determine technological direction.	LSA2. Standards Articulation LSA5. Agility, Flexibility LC6.Liaison(s)
PO4	Define the ITprocesses, organisation and relationships.	LS2. Cultural locus of Power LS3. Management Style LS4. Change Readiness LP4. IT Program Management LG6. Steering Committee(s) LC5. Knowledge Sharing
PO5	Manage theITinvestment.	LP1. Business Perception of IT Value LG6. Steering Committee(s) LG5. IT Investment Management
PO6	Communicatemanagement aims and direction.	LC1. Understanding of Business by IT LC2. Understanding of IT byBusiness LC3. Inter/Intra- organizational   Learning/Education LC4. Protocol Rigidity LC5. KnowledgeSharing
PO7	Manage IThuman resources.	LS2. Cultural locus of Power LS4. Change Readiness LS6. Education, Cross-Training
PO8	Managequality.	LM7. Continuous Improvement
PO9	Assess andmanage ITrisks.	LG5. IT Investment Management LP3. Shared Goals, Risk,

		Rewards/Penalties LP4. IT Program Management
PO10	Manageprojects.	LS7. Social, Political, Trusting Interpersonal Environment LP3. Shared Goals, Risk, Rewards/Penalties LG7. Prioritization Process
ME1	Monitor andevaluate IT performance	LS7. Social, Political, Trusting Interpersonal Environment LP3. Shared Goals, Risk, Rewards/Penalties LG7. Prioritization Process
ME2	Monitor andevaluateinternal control	LM7. Continuous Improvement LP1. Business Perception of IT Value
ME3	Ensurecompliancewith external requirements	LM3. Service Level LG3. Reporting/Organization   Structure
ME4	Provide ITgovernance	LC1. Understanding ofBusiness by IT LC2. Understanding ofIT by Business

Tabel 2.3 Tabel cakupan Domain COBIT4.1dibandingkan dengan pwC Framework

(sumber:PricewaterhouseCoopers, 2003)

*Domain*	*Descripts (Planand Organise)*	*pwC Focused*
PO1	Define a strategicIT plan.	pwC1. Definestakeholder expectations pwC2. Articulatethe Mission pwC3. Develop a Formal Strategic plan
PO2	Define the information architecture.	pwC1. Definestakeholder expectations
PO3	Determine technological direction.	pwC1. Definestakeholder expectations
PO4	Define the ITprocesses,organisation and relationships.	pwC1. Definestakeholder expectations
PO5	Manage the ITinvestment.	pwC5. Establish current and multi

		year Budgets
PO6	Communicatemanagement aims and direction.	pwC2. Articulate theMission
PO7	Manage IThuman resources.	pwC7. AssessNeeded Skill Sets
PO8	Managequality.	pwC8. Develop or acquire enabling infrastructure, methodologyand technology
PO9	Assess andmanage ITrisks.	pwC4. Assess Riskand Develop the audit plan
PO10	Manageprojects.	pwC1. Definestakeholder expectations
*Domain*	*Descripts (Monitor andEvaluate)*
ME1	Monitor andevaluate ITperformance	pwC8. Develop or acquire enabling infrastructure, methodologyand technology
ME2	Monitor andevaluateinternal control	pwC8. Develop or acquire enabling infrastructure, methodologyand technology
ME3	Ensurecompliancewith external requirements	pwC8. Develop or acquire enabling infrastructure, methodologyand technology
ME4	Provide ITgovernance	pwC3. Develop a Formal Strategic plan

Selain itu menurut (Ridley et al.2006) COBIT adalah kerangka kontrol yang paling tepat untuk membantu organisasimemastikan keselarasan antarapenggunaan Teknologi Informasi dan tujuan bisnis.

Dapat di simpulkan bahwa darikeseluruah teknologi informasi Frameworkyang paling sering digunakan danmencakup keseluruhan tata kelola teknologi informasi adalah COBIT karena COBITFramework bergerak sebagai integrator dari

praktik IT governance dan juga yangdipertimbangkan kepada petinggi manajemenatau manager; manajemen teknologiinformasi dan bisnis; para ahli governance,asuransi dan keamanan; dan juga para ahliauditor teknologi informasi dan kontrol. COBIT Framework dibentuk agar dapatberjalan berdampingan dengan standar danbest practices yang lainnya (Setiawan, 2010)

Fokus Proses COBIT digambarkan oleh model proses yang membagi teknologi informasi menjadi empat domain dan 34 proses sesuai dengan bidang yang bertanggung jawab terhadap perencanaan, membangun, menjalankan dan memonitor implementasi teknologi informasi, dan jugamemberikan pandangan end-to-end teknologiinformasi. Gambar dibawah ini menunjukan proses dari COBIT: