Cited by 10Information Technology Governance and StrategyE-Government and Public ServicesInformation and Cyber Security

The DOI matches its Crossref record; 23 of the 23 references it cites were found in a registry or an index; none of the 5 sources its claims cite is checked for support yet.

Enhancing Public Sector IT Governance through COBIT 2019: A Case Study on Service Continuity and Data Management in the Central Lombok

Open access
Bagja, Amir, Amri, Zaenul, Imtihan, Khairul, Rodi, Muhamad, Rusniatun, Siska Yuni·2024·Journal of Information Systems and Informatics

Abstract

This study evaluates the IT governance maturity of the Central Lombok Civil Service Police Unit (Satpol PP) using the COBIT 2019 framework, focusing on improving service continuity and data security in a resource-constrained public sector context. The assessment, conducted across key domains such as service delivery, data security, and compliance, revealed that Satpol PP operates at Level 3 (Defined) maturity. While processes are documented and standardized, significant gaps remain in automation, proactive risk management, and real-time monitoring. These limitations hinder the organization's ability to optimize service continuity and safeguard sensitive data effectively. The study emphasizes the innovative application of COBIT 2019 in a resource-limited environment, demonstrating how the framework can be adapted to prioritize immediate needs while progressively advancing IT governance maturity. Key recommendations include automating monitoring systems, enhancing data security protocols, and implementing proactive risk management strategies. These findings contribute valuable insights into the challenges and solutions for IT governance in public institutions, providing a replicable model for similar organizations. Future research should explore the long-term impacts of these recommendations on IT governance maturity and service efficiency in other public sector contexts.

Overview

AI snapshot

Written from the paper’s full text.

TL;DR

This case study applies the COBIT framework to assess IT governance maturity at the Central Lombok Civil Service Police Unit (Satpol PP), finding an overall Level 3 (Defined) maturity with weaker service delivery and data security. It recommends automated monitoring, stronger data security protocols, and proactive risk management as a phased roadmap for resource-constrained public institutions.

Key findings

  • Satpol PP's overall IT governance maturity is Level 3 (Defined): processes are documented and standardized but lack advanced evaluation, automation, and optimization mechanisms.
  • Domain-level results (Table 3): Service Delivery Level 3 (well-documented but not adaptable to demand fluctuations), Data Security Level 2 (basic protocols, no real-time encryption or automated threat detection), Compliance Level 3 (practices followed but audit mechanisms need enhancement).
  • A separate assessment table (Table 2) reports Business Goals, IT Goals, and IT Processes at Level 3, with Service Delivery and Data Security at Level 2, and overall maturity at Level 3.
  • Three challenges are identified for advancing maturity: resource limitations (funding for tools and training), lack of automated tools (no real-time monitoring or analytics), and training gaps among IT staff.

Methods

  • Case study of the Central Lombok Civil Service Police Unit (Satpol PP), using the COBIT framework to assess IT governance maturity across domains including service delivery, data security, and compliance.
  • Data collection combined primary sources (structured observation focused on discrepancies between documented policies and actual practice, and semi-structured interviews with IT managers, administrators, and business strategists) with secondary sources (literature review and internal documents such as IT governance policies, operational manuals, and performance reports).
  • Analysis proceeded stepwise: mapping business goals to IT goals, identifying key IT processes, domain-specific analysis, and maturity-level assessment via structured questionnaires scored against the framework's maturity levels (Level 1 Initial to Level 5 Optimized), followed by tailored recommendations.

Limitations

  • The paper states that Satpol PP operates under resource constraints (limited funding, technical expertise, and organizational readiness) that restrict adoption of advanced IT governance practices; these are framed as contextual constraints rather than study limitations.
  • The paper does not state explicit methodological limitations such as sample size, single-case generalizability, or interview counts.
  • Evident in the text: the paper is internally inconsistent about which framework was used — the title, abstract, and conclusion say COBIT 2019, while the Methods and Results sections repeatedly describe applying COBIT 4.1 (including "COBIT 4.1 maturity model" and "COBIT 4.1 Framework" in Figure 1), and the secondary literature review is described as focused on COBIT 4.1. Table numbering is also duplicated (two "Table 3" entries), and no quantitative questionnaire scores or participant counts are reported.

Model-written summary. Check it against the paper before relying on it.

Integrity signals

Registry

Crossref · 10.51519/journalisi.v6i4.924

Cites

23 of 23 references verified0 citation errors · 0 not checkable

Statistics

Nothing to recompute.

Figures

Figure 2 . Figure 2. Relationship Between Business Goals and IT Goals Based on COBIT 4.1 Framework
Figure 2 . Figure 2. Relationship Between Business Goals and IT Goals Based on COBIT 4.1 FrameworkCC-BY · From the PDF

Verification

Claims the paper makes

5 Sources not found · 4 Own result · 2 Own interpretation · 1 Own method · 1 No basis given

Show all 7 claims

  • It may state two separate claims as one. 6
  • Probably not a substantial claim. 2
6 of 6
  • The paper relies on this without support.

    Satpol PP operates within a resource-constrained environment that limits its capacity to adopt advanced IT governance practices.

    “Despite these demands, Satpol PP operates within a resource-constrained environment, which limits its capacity to adopt advanced IT governance practices.”
  • The paper relies on this without support.

    Public institutions tend to take reactive rather than proactive approaches to IT governance, addressing issues only after they have impacted services or security.

    “Additionally, there is a tendency in such organizatiot reactive rather than proactive approaches to IT governance, meaning that issues are often addressed only after they have impacted services or security.”
2 of 2

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

Each contradiction between two passages listed here was confirmed by an independent check.

5 of 5

Citations

Cites

Show all 8 references

Research works printed but not linked: 4

  1. M. Yasin, A. A. Arman, I. J. M. Edward, and W. Shalannanda, "Designing information security governance recommendations and roadmap using p-ISSN: 2656-5935 http://journal-isi.org/index.php/isi e-ISSN: 2656-4882 2774 | Enhancing Public Sector IT Governance through COBIT 2019: A Case Study ..... COBIT 2019 Framework and ISO 27001: 2013 (Case Study Ditreskrimsus Polda XYZ)," in 2020 14th International Conference on Telecommunication Systems, Services, and Applications (TSSA, IEEE, 2020, pp. 1-5.
  2. T. H. Thabit, "The Impact of Implementing COBIT 2019 Framework on Reducing the Risks of e-Audit," Journal of Prospective Researches, no. 49, 2021.
  3. E. Nachrowi, Y. Nurhadryani, and H. Sukoco, "Evaluation of Governance and Management of Information Technology Services Using Cobit 2019 and ITIL 4," Accredited by National Journal Accreditation, vol. 4, no. 2, pp. 764- 774, 2020.
  4. K. Leonardo and R. Latuperissa, "Information Technology Governance Design in Trading Companies Using the COBIT 2019 Framework," Journal of Information Systems and Informatics, vol. 6, no. 3, pp. 1466-1483, 2024.

Cited by

Sorted by citations

See all 10

Metadata

Authors
Bagja, A., Amri, Z., Imtihan, K., Rodi, M., & Rusniatun, S. Y.
Affiliations
  • Universitas Hamzanwadi (ID)
  • STMIK Lombok (ID)
Venue
Journal of Information Systems and Informatics
Published
2024-12-31
Volume
6
Issue
4
Pages
2761-2776
ISSN
  • 2656-4882 (ISSN-L)
  • 2656-5935
OpenAlex
W4408209840
Cited by
10
References
8
Citations by year
2026: 6 · 2025: 4
FWCI
2.86
Type
journal article
Language
en
Open access
Locations
  • Journal of Information Systems and Informatics (publishedVersion, cc-by)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Topics
  • Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
  • Social Sciences › Political Science and International Relations › E-Government and Public Services
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
Keywords
IT governance, COBIT 2019, public sector IT, service continuity, data security, IT governance maturity, civil service police, Satpol PP, Central Lombok, resource-constrained organizations, risk management, process automation, real-time monitoring, compliance

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

A language model drew the claims from the paper on 2026-11-07, under version 3 of the claim definition (model deepseek-v4.1-flash, prompt extract-v3).

A second model labelled each claim on 2026-11-07 (model jev-1.13-20260917, definition revision gold-guideline-v0.2).

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

How to cite

Cite CoChat for the checks on this page, and the paper for its own findings.

This page
CoChat. (2026). Citation check: Enhancing Public Sector IT Governance through COBIT 2019: A Case Study on Service Continuity and Data Management in the Central Lombok. https://app.cochat.ai/papers/10.51519/journalisi.v6i4.924
The paper
Bagja, A., Amri, Z., Imtihan, K., Rodi, M., & Rusniatun, S. Y. (2024). Enhancing Public Sector IT Governance through COBIT 2019: A Case Study on Service Continuity and Data Management in the Central Lombok. Journal of Information Systems and Informatics. https://doi.org/10.51519/journalisi.v6i4.924