220 likes | 285 Views
Pertemuan - 6. Tata Kelola Teknologi Informasi.
E N D
Pertemuan - 6 Tata Kelola Teknologi Informasi
Tata Kelola IT diartikan sebagai bagian terintegrasi dari pengelolaan perusahaan yang mencakup kepemimpinan, serta proses yang mengarahkan dan mengatur organisasi dalam rangka mencapai tujuannya dengan memberikan nilai tambah dari pemanfaatan teknologi informasi sambil menyeimbangkan resiko dibandingkan dengan hasil yang diberikan oleh teknologi informasi dan prosesnya.
IT governance merupakan satu kesatuan dengan sukses dari enterprise governance melalui peningkatan dalam efektivitas dan efisiensi dalam proses perusahaan yang berhubungan. IT governance menyediakan struktur yang menghubungkan proses TI, sumber daya TI dan informasi bagi strategi dan tujuan perusahaan.
IT governance menggabungkan good (best) practice dari perencanaan dan pengorganisasian TI, pembangunan dan pengimplemantasian, delivery dan support, serta memonitor kinerja TI untuk memastikan kalau informasi perusahaan dan teknologi yang berhubungan mendukung tujuan bisnis perusahaan.
IT governance memungkinkan perusahaan untuk memperoleh keuntungan penuh dari informasinya, dengan memaksimalkan keuntungan dari peluang dan keuntungan kompetitif yang dimiliki.
Apa Pengaruh TI terhadap Audit ? Changes in Evidence Collection Changes in Evidence Evaluation Auditing Changes in Auditors ?
Why and how is COBIT used? COBIT as a response to the needs • Incorporates major international standards • Has become the de facto standard for overall control over IT • Starts from business requirements • Is process-oriented COBIT CobiT CobiT COBIT best practices best practices repository for repository for IT Processes IT Processes IT Processes IT Processes IT Management Processes IT Management Processes IT Management Processes IT Management Processes IT Governance Processes IT Governance Processes IT Governance Processes IT Governance Processes
Criteria • Effectiveness • Efficiency • Confidenciality • Integrity • Availability • Compliance • Reliability IT RESOURCES • Data • Application systems • Technology • Facilities • People PLAN AND ORGANISE ACQUIRE AND IMPLEMENT DELIVER AND SUPPORT Business Objectives COBIT Framework • PO1 Define a strategic IT plan • PO2 Define the information architecture • PO3 Determine the technological direction • PO4 Define the IT organisation and relationships • PO5 Manage the IT investment • PO6 Communicate management aims and direction • PO7 Manage human resources • PO8 Ensure compliance with external requirements • PO9 Assess risks • PO10 Manage projects • PO11 Manage quality • M1 Monitor the process • M2 Assess internal control adequacy • M3 Obtain independent assurance • M4 Provide for independent audit MONITOR AND EVALUATE • DS1 Define service levels • DS2 Manage third-party services • DS3 Manage peformance and capacity • DS4 Ensure continuous service • DS5 Ensure systems security • DS6 Identify and attribute costs • DS7 Educate and train users • DS8 Assist and advise IT customers • DS9 Manage the configuration • DS10 Manage problems and incidents • DS11 Manage data • DS12 Manage facilities • DS13 Manage operations • AI1 Identify automated solutions • AI2 Acquire and mantain application software • AI3 Acquire and maintain technology infrastructure • AI4 Develop and maintain IT procedures • AI5 Install and accredit systems • AI6 Manage changes
How Does COBIT Link to IT Governance? Direction Requirements (IT Strategy and Policy) Control Goals Responsibilities Objectives Business IT Business IT Governance Information (IT Information the Control, Risk and Business Needs to Assurance) Achieve Its Objectives IT Governance
Introduction & objective COBIT is a framework for Governance, Control and Audit for Information and Related Technology developed byISACA (Information Systems Audit and Control Association) ITIL is a comprehensive description of the processes involved in management IT infrastructures (e.g. Helpdesk, ChangeManagement…) based on best practices Both are IT Governance mechanismsThe question is not :“What is the best for my IT context ?”BUT“How is possible to obtain the best complementarities ?”
Disiplin Ilmu pembentuk IT Auditing Konsep ttg control Information system management Pembangunan sistem Traditional auditing Information System Auditing System efficiency Computer science People problems Behavioural science Source: Information System Control and Audit, Ron Weber (1999)
COBIT ver 4.1 Control Objectives for Information and related Technology (COBIT, saat ini edisi ke-4.1) adalah sekumpulan dokumentasi best practices untuk IT governance yang dapat membantu auditor, manajemen and pengguna ( user ) untuk menjembatani gap antara risiko bisnis, kebutuhan kontrol dan permasalahan-permasalahan teknis.