TATA KELOLA TEKNOLOGI INFORMASI DOMAIN APO12 MENGGUNAKAN FRAMEWORK COBIT 5

Sari

PT GBE has a unit engaged in information technology, namely the technician section or BAS (building automatic system). The well-developed technology at PT GBE has made almost all business processes computerized and standardized, but in practice there are still some obstacles in infrastructure management, risk prevention and control. One of these things can be overcome by applying IT governance standards. The method used to assess the governance of the COBIT 5 IT framework in the subdomain domain, namely the APO12 (Manage Risk) subdomain, was carried out through three types of data collection, namely, questionnaires, interviews and observations. The results obtained are that the APO12 domain capability level at PT GBE is currently at level 1 (Performed), while the APO12 domain capability target is level 2 (Managed). The recommendations for the company are related to the documents of each process that must be improved, conducting further analysis to find out the possibilities that occur in the future, forming a special team for risk and security management, segregation of duties and responsibilities, to determining methods for each control each process.

Keywords : Risk Management, APO12, COBIT 5.