Pemanfaatan COBIT 2019 Information Security Dalam Merancang Manajemen Keamanan Informasi Pada Transformasi BankCo

Abstract

Consumer behavior changes, the rapid digital innovation pace among competitors, and regulatory directives have compelled incumbent companies to accelerate digital transformation (DT) efforts. Previous research has successfully identified the influence of information technology governance (ITG) on organizational performance (OP), fully mediated by DT. However, a deeper understanding of the design of information security management mechanisms to guide the DT journey is still necessary. This study employs the Design Science Research (DSR) approach, based on the latest ISACA framework, COBIT 2019 Information Security Focus Area. A case study is conducted at BankCo, with data collection through interviews and document triangulation. Solution design and implementation roadmaps are based on gaps identified from the assessment of the three BankCo priorities: DSS05 Managed Security Services, APO13 Managed Security, and BAI06 Managed IT Changes. This research contributes to the knowledge base of information security management in DT and is particularly practical for guiding BankCo's DT journey, as well as benefiting the broader industry.