Exploring COBIT Processes for ITG in Saudi Organizations An empirical Study

Abstract

Abstract. Control Objectives for Information and Related Technology (COBIT) has become one of the most important guidelines for information technology governance (ITG), which provides organizations with a useful tool to start evaluating their own ITG systems. COBIT introduces an ITG framework and supporting toolset that allows IT managers to bridge the gap between control requirements, technical issues and business risks. The objective of this study is to investigate the formality, auditing, responsibility and accountability of implementing COBIT processes for ITG in Saudi organizations. An empirical survey, using a self-administered questionnaire, was conducted to achieve these objectives. Five hundred questionnaires were distributed to a sample of Saudi organizations in a selected number of Saudi cities. One hundred and twenty seven valid questionnaires -representing a 25.4 percent response rate -were collected and analyzed using the Statistical Package for Social Sciences (SPSS) version 16. While the results of the study reveal that the majority of respondents reported that implementing ITG COBIT processes and domains is the responsibility of IT departments in Saudi organizations, most of the respondents reported that the COBIT processes and domains are neither audited nor formally conducted in their organizations. From a practical standpoint, managers and practitioners alike stand to gain from the findings of this study. The study provides useful information for senior management, IT managers, accountants, auditors, and academics to understand the implementation phase and the impact of COBIT on ITG in Saudi organizations.

Developing Conceptual Governance Model for Collaborative Knowledge Management System in Public Sector Organisations

“…Best practices in IT governance frameworks such as the Control Objectives for Information and Related Technology (COBIT) and IT Infrastructure Library (ITIL) are often adopted and implemented according to the needs of the organisation. COBIT, for example, consists of 34 objectives and it is categorised into four domains: (a) planning and organisation; (b) acquisition and implementation; (c) delivery and support, and (d) monitoring and evaluation (Abu-Musa, 2009). ITIL is comprised of several areas of service management: service strategy, service design, service transition, service operation and continual service improvement (Winniford et al, 2009).…”

Evaluasi Sistem Informasi Kendaraan (GF Service) di Binus University Berdasarkan Kerangka Cobit pada Domain Delivery and Support

“…Menurut Abu-Musa (2009) Berdasarkan paparan tentang best practise didapatkan Jenis layanan yang diberikan oleh GF Services adalah Informasi pemakaian kendaraan; permohonan peminjaman kendaraan penumopang, box maupun bis; permohonan peminjaman kendaraan taxi; dan permohonan pengiriman dokumen. Setiap individu telah memiliki tugas dan wewenangnya masing masing yangperformanya diukur melalui Key Performance indicator (KPI).…”

“…Sedangkan Gambar 5 menggambarkan posisi pengelolaan unit teknologi informasi yang ada pada GF Services (Abu-Musa, 2009 Setelah penetapan target, terlihat adanya selisih posisi yang harus dicapai sebesar 1.049. Untuk menyelesaikan selisih ini, upaya-upaya perbaikan dilakukan pada aktivitas atau proses-proses yang berada pada tahapan-tahpan DS (Deliver & Suport) yang memiliki nilai kecil atau di bawah standar dan melakukan peningkatan terhadap aktivitas-aktivitas yang lainnya seperti upaya perbaikan, mempertahankan, dan peningkatan aktivitas.…”

Enablers and Inhibitors of SISP: A Case Study of a Korean Large Corporation

“…A number of IT governance frameworks have been developed, such as the Control Objectives for Information and related Technology (COBIT), IT Infrastructure Library (ITIL) and Capability Maturity Model Integration (CMMI). However, arguably the best known and most frequently used framework is COBIT (Abu-Musa, 2009). As a comprehensive framework, COBIT provides important guidelines for IT governance, providing corporations with a useful tool to start evaluating their IT governance systems, and a toolset that allows IT managers to bridge the gap between control requirements, technical issues and business risks.…”