Penerapan COBIT 2019 Dalam Peningkatan Tata Kelola Pengembangan Dan Keamanan Aplikasi Web (Studi Kasus: UPA TIK Institut Teknologi Kalimantan)

Kusuma, Zulfa Hafizh (2026) Penerapan COBIT 2019 Dalam Peningkatan Tata Kelola Pengembangan Dan Keamanan Aplikasi Web (Studi Kasus: UPA TIK Institut Teknologi Kalimantan). Other thesis, Institut Teknologi Sepuluh Nopember.

Text 5027221038-Undergraduate_Thesis.pdf - Accepted Version Restricted to Repository staff only Download (7MB) | Request a copy

Abstract

Penelitian ini bertujuan merancang sistem tata kelola pengembangan dan keamanan aplikasi web pada Unit Penunjang Akademik Teknologi Informasi dan Komunikasi (UPA TIK) Institut Teknologi Kalimantan (ITK) menggunakan kerangka kerja COBIT 2019. Permasalahan yang dihadapi meliputi belum adanya standar operasional prosedur (SOP) pengembangan yang formal, praktik Agile yang belum didukung tata kelola terstruktur, belum terdokumentasinya kebijakan keamanan informasi, serta keterbatasan dan ketergantungan sumber daya manusia. Penelitian menggunakan pendekatan Governance System Design COBIT 2019, diawali analisis konteks organisasi dan design factors untuk menentukan objektif yang relevan, yaitu APO07, APO13, BAI03, BAI11, dan DSS05. Tingkat kapabilitas dinilai melalui studi dokumen, wawancara, dan kuesioner berbasis skala Guttman, kemudian dianalisis menggunakan gap analysis dan root cause analysis dengan pendekatan 5 Whys. Hasil penilaian menunjukkan seluruh objektif berada pada Level 1 (Performed Process), dengan kondisi ideal yang disepakati pada Level 3 (Established). Berdasarkan kesenjangan tersebut, dirancang sistem tata kelola yang terdiri atas lima komponen, yaitu tujuan tata kelola, prinsip pengelolaan, struktur peran dan tanggung jawab, mekanisme utama pengelolaan dan mekanisme pemantauan dan evaluasi, serta layanan, infrastruktur, dan aplikasi yang diturunkan menjadi rekomendasi perbaikan terklasifikasi. Luaran utama penelitian berupa roadmap implementasi bertahap dalam tiga tahap (jangka pendek, jangka menengah, dan jangka panjang) yang disusun berdasarkan analisis dependensi antar-rekomendasi dan dirancang agar dapat dijalankan tanpa penambahan personel formal. Roadmap telah diverifikasi melalui penelaahan dokumen oleh Kepala UPA TIK ITK, sehingga dapat menjadi pedoman strategis untuk meningkatkan keselarasan TI dengan tujuan organisasi serta memperkuat pengendalian risiko keamanan aplikasi web secara bertahap menuju level 3.
=================================================================================================================================
This research aims to design an IT governance system for web application development and security at the Academic Support Unit for Information and Communication Technology (UPA TIK), Institut Teknologi Kalimantan (ITK), using the COBIT 2019 framework. The identified problems include the absence of formal Standard Operating Procedures (SOP) for development, Agile practices unsupported by structured governance, undocumented information security policies, and limited and over-concentrated human resources. The study applies the COBIT 2019 Governance System Design approach, beginning with an analysis of the organizational context and design factors to determine the relevant objectives, namely APO07, APO13, BAI03, BAI11, and DSS05. Capability levels were assessed through document review, interviews, and Guttman-scale questionnaires, then analyzed using gap analysis and root cause analysis with the 5 Whys approach. The assessment found that all objectives were at Level 1 (Performed Process), while the agreed target condition was Level 3 (Established). Based on these gaps, a governance system was designed comprising five components, governance objectives, management principles, roles and responsibilities structure, key management mechanisms and monitoring and evaluation, as well as services, infrastructure, and applications which were translated into classified improvement recommendations. The main output is a phased implementation roadmap structured into three stages (short, medium, and long term) developed based on inter-recommendation dependency analysis and designed to be executable without adding formal personnel. The roadmap was verified through document review by the Head of UPA TIK ITK, and can therefore serve as a strategic guideline for improving IT alignment with organizational objectives and strengthening web application security risk control progressively toward Level 3.

Item Type:	Thesis (Other)
Uncontrolled Keywords:	COBIT 2019, Governance System Design, Pengembangan dan Keamanan Aplikasi Web, Roadmap, Tata Kelola TI. COBIT 2019, Governance System Design, IT Governance, Roadmap, Web Application Development and Security.
Subjects:	T Technology > T Technology (General) > T174.5 Technology--Risk assessment. T Technology > T Technology (General) > T58.5 Information technology. IT--Auditing T Technology > T Technology (General) > T58.6 Management information systems T Technology > T Technology (General) > T58.62 Decision support systems T Technology > T Technology (General) > T58.64 Information resources management
Divisions:	Faculty of Intelligent Electrical and Informatics Technology (ELECTICS) > Information Technology > 59201-(S1) Undergraduate Thesis
Depositing User:	Zulfa Hafizh Kusuma
Date Deposited:	29 Jul 2026 08:37
Last Modified:	29 Jul 2026 08:37
URI:	http://repository.its.ac.id/id/eprint/138900

Actions (login required)

View Item