Tatakelola TIK berdasarkan COBIT Assurance and Advisory Business Services December 6, 2017 Tatakelola TIK berdasarkan COBIT December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Agenda Apakah tatakelola TIK? CobiT Essentials CobiT Framework December 6, 2017

Assurance and Advisory Business Services December 6, 2017 What is CobiT? CobiT (Control Objectives for Information and Related Technology) is globally accepted as being the most comprehensive work for IT governance, organization, as well as IT process and risk management CobiT menyediakan praktek-praktek yang baik untuk manajemen proses IT in a manageable and logical structure, meeting the multiple needs of enterprise management by bridging the gaps between business risks, technical issues, control needs and performance measurement requirements. The CobiT mission is to research, develop, publicize and promote an authoritative, up-to-date, international set of generally accepted information technology control objectives for day-to-day use by business managers and auditors. December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Apakah tatakelola TIK IT governance is the responsibility of executives and the board of directors, and consists of the leadership, organisational structures and Processes that ensure that the enterprise’s IT sustains and extends the organisation’s strategies and objectives.(cobit 4.0 executive summary) IT governance adalah tanggung jawab eksekutif dan dewan direksi, dan terdiri dari kepemimpinan, struktur organisasi dan Proses yang memastikan bahwa IT perusahaan mendukung dan memperluas strategi dan tujuan organisasi. December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Apakah COBIT? Control Objective for information and related technologies Standar tatakelola teknologi informasi yang dikeluarkan oleh ISACA www.isaca.org December 6, 2017

Assurance and Advisory Business Services December 6, 2017 December 6, 2017

Assurance and Advisory Business Services Komponen CobiT Assurance and Advisory Business Services December 6, 2017 Executive Summary Menjelaskan konsep kunci dan prinsip prinsip utama . Management Guidelines Untuk memastikan perusahana berhasil mencapai tujuan maka perusahaan perlu mengelola secara efektif keterkaitan antara proses bisnis dan sistem informasi. Bagian ini tersusun atas model kematangan, CSF, KGI dan KPI Framework Frame work menjelaskan 34 tujuan pengendalian tingkat tinggi yang tersusun atas 4 domain. Setiap framework juga mengidentifikasikan 7 kriteria informasi dan sumberdaya TIK yang memiliki dampak terhadap pengendalian tingkat tinggi December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Komponen CobiT Control Objectives Bagian ini menyediakan berbagai aspek yang perlu digambarkan untuk menyusun kebijakan dan prkatek yang baik bagi pengendalian TIK. Audit Guidelines Merupakan panduan cara penerapan audit Implementation Toolset Alat yang disediakan untuk melakukan beberapa benchmarking dari COBIT December 6, 2017

Assurance and Advisory Business Services December 6, 2017 CobiT Components Executive Summary There is a method… Framework The method is… Control Objectives Minimum controls are… Audit Guidelines Here is how you audit… Implementation Toolset Here is how you implement… Management Guidelines Here is how you measure… December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Tujuan Pokok COBIT December 6, 2017

Assurance and Advisory Business Services December 6, 2017 CobiT Framework December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Kriteria informasi EFFECTIVENESS AVAILABILITY Informasi relevan dengan proses bisnis meliputi tepat waktu, benar, bermanfaat Informasi tersedia ketika dibutuhkan EFFICIENCY COMPLIANCE Terkait dengan pemanfaatan sumberdaya secara optimal Berkaitan dengan ketetapan hukum, dan persetujuan kontrak . CONFIDENTIALITY RELIABILITY OF INFORMATION kerahasiaan Relates to the provision of appropriate information for the workforce of the organization Berkaitan dengan keakuratan dan kelengkapan informasi INTEGRITY December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Sumberdaya Organizations - People : keterampilan staff, awareness and produktivitas untuk merencanakan, mengorganisasikan, mencari, menyediakan, mendukung and me-monitor sistem informasi dan layanannya. Sistem Aplikasi : pemahaman terhadap sitem informasi manual dan yang otomatis(berbasis komputer). teknologi : meliputi perangkat keras, sistem operasi, sistem manajemen basis data,jaringan, multimedia dll. Fasilitas: Sumberdaya untuk melindungi fasilitas dan teknologi yang tersedia(ruangan dll). Data : obyek data, berisfat teks, suara, gambar dll. December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Domain COBIT Planning and Organization Domain ini meliputi taktik dan strategi dan memfokuskan pada cara TI dapat memberikan kontribusi yang optimal bagi tujuan bisnis Acquisition and Implementation Untuk merealisasikan strategi TIK, solusi TI harus diidentifikasi, dikembangkan diterapkan dan diintergrasikan terhadap proses bisnis December 6, 2017

Assurance and Advisory Business Services December 6, 2017 The Four CobiT Domains Delivery and Support Domain ini fokus pada penyediaan layanan yang dibutuhkan yang meliputi level operasional, keamanan serta aspek pelatihan Monitoring Semua proses TIK perlu diakses setiap waktu untuk dimonitor kualitasnya. December 6, 2017

Assurance and Advisory Business Services CobiT IT Processes December 6, 2017 Planning and Organization PO1 - Define a strategic IT plan PO2 - Define the information architecture PO3 - Determine the technological direction PO4 - Define the IT organization and relationships PO5 - Manage the investment PO6 - Communicate management aims and directions PO7 - Manage human resources PO8 - Ensure compliance with external requirements PO9 - Assess risks PO10 - Manage project PO11 - Manage quality Acquisition and Implementation AI1 - Identify solutions AI2 - Acquire and maintain application software AI3 - Acquire and maintain technology architecture AI4 - Develop and maintain IT procedures AI5 - Install and accredit systems AI6 - Manage changes December 6, 2017

Assurance and Advisory Business Services CobiT IT Processes December 6, 2017 Delivery and Support DS1 - Define Service Levels DS2 - Manage third-party services DS3 - Manage performance and capacity DS4 - Ensure continuous service DS5 - Ensure system security DS6 - Identify and attribute costs DS7 - Educate and train users DS8 - Assist and advise IT customers DS9 - Manage the configuration DS10 - Manage problems and incidents DS11 - Manage data DS12 - Manage facilities DS13 - Manage operations Monitoring M1 - Monitor the processes M2 - Assess the internal control adequacy M3 - Obtain independent assurance M4 - Provide for independent audit December 6, 2017

Assurance and Advisory Business Services December 6, 2017 KPI Key Performance Indicators (KPI) KPI’s are a measure of “how well” the process is performing. KPI adalah ukuran sejauhmana proses berjalan KPI dapat digunakan untuk memprediksi keberhasilan atau kegagalan Fokus pada proses dan dimensi pembelajaran pada balance scorecard Diwujudkan dalam terminologi yang terukur Dapat digunakan untuk membantu memperbaiki proses TI December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Key Performance Indicators dalam proses TIK yang umum System downtime Throughput and response times Amount of errors and rework Number of staff trained in new technology and customer service skills Benchmark comparisons Number of non-compliance reportings Reduction in development and processing time December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Financial # of IT customers Cost per IT customer Cost-efficiency of IT processes up Delivery of IT value per employee Contoh ukuran kinerja (BSC) Customer Process Level of service delivery up Satisfaction of existing customers # of new customers reached # of new service delivery channels Availability of systems & services Developments on schedule & budget Throughput & response times Amount of errors and rework Information Learning Staff productivity & morale # of staff trained in new techno/services Value delivery per employee up Increased availability knowledge systems December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Deskripsi proses KGI’s KPI’s Kriteria Informasi Sumberdaya 0 - Management processes are not applied at all 1 - Processes are ad hoc and disorganised 2 - Processes follow a regular pattern 3 - Processes are documented and communicated 4 - Processes are monitored and measured 5 - Best practices are followed and automated Maturity Model effectiveness efficiency confidentiality integrity availability compliance reliability S P people applications technology facilities data  Critical Success Factors December 6, 2017

Assurance and Advisory Business Services December 6, 2017 CSF Merupakan hal paling penting yang perlu dilakukan untuk mencapai tujuan Dapat dicari-dapat diukur- merupakan karakteristik dari organsiasi dan proses bisnis Dapat bersifat strategis, teknologis, organisasional atau bersifat prosedural Fokus pada pencarian, pemeliharaan dan perluasan kemampuan, keterampilan dan perilaku Dinyatakan dalam terminologi proses. December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Critical Success Factors dalam proses TIK yang umum Kinerja TIK diukur dalam terminologi keuangan, sebagai kepuasan konsumen, efektiftas dan kapasitas masadepan; Reward berdasarkan pada ukuran kinerja ini. Proses selaras dengan strategi TIK dan dengan tujuan bisnis. December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Process Description Critical Success Factors CSF KGI’s KPI’s Information Criteria Resources 0 - Management processes are not applied at all 1 - Processes are ad hoc and disorganised 2 - Processes follow a regular pattern 3 - Processes are documented and communicated 4 - Processes are monitored and measured 5 - Best practices are followed and automated Maturity Model effectiveness efficiency confidentiality integrity availability compliance reliability S P people applications technology facilities data  Maturity Model December 6, 2017

Assurance and Advisory Business Services December 6, 2017 Kesimpulan Anda telah belajar tentang tatakelola TIK berdasarkan framework COBIT December 6, 2017