COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 ISSN: 1978-1520 Aligning IT Governance with Business Goals Using the COBIT 2019 Framework: A Case Study of an Innovation Consultancy Firm Wilsen Grivin Mokodaser1. Joe Juan Mambu*2. Hartiny Pop Koapaha3. Erienika Lompoliu4 1, 2, Fakultas Ilmu Komputer. Universitas Klabat. Airmadidi Fakultas Ekonomi dan Bisnis. Universitas Klabat. Airmadidi e-mail: 1wilsenm@unklab. id, *2joeyuan. mambu@unklab. hartinikoapaha@unklab. id, 4erienika. lompoliu@unklab. Abstract Technological advancements have ushered the world into a new era, particularly in the realm of information. In this context, information technology is considered a crucial tool to support and enhance corporate management, enabling companies to compete in the market. One common approach to managing information technology is by using IT governance frameworks such as COBIT (Control Objectives for Information and Related Technolog. To date, there has been no research or evaluation conducted on the IT performance of Meet Ventures. Pte. Ltd. leaving the maturity level of information technology implementation in the company unclear. This project aims to explore the use of information systems and information technology at Meet Ventures. Pte. Ltd. in managing their operations and data. The project's approach involves a literature study on COBIT 2019 design factors. Based on the application of COBIT 2019, the prioritized objectives identified are BAI03 Ae Manage Solutions Identification and Build. BAI06 Ae Manage IT Changes, and MEA01 Ae Monitor. Evaluate. Assess Performance and Conformance. The assessment of various design factors in COBIT 2019 indicates that Meet Ventures. Pte. Ltd. has a strong focus on innovation, differentiation, and customer service. They also demonstrate a commitment to legal compliance and external regulations, a customer service culture, and effective risk management. KeywordsAi COBIT. IT Governance. Design Factor INTRODUCTION Amidst technological development, advancements in information technology have become crucial for companies aiming to improve performance and productivity in this evolving . The progress in technology has enabled businesses to access vast amounts of data that can be transformed into valuable insights. By effectively adopting and utilizing information technology, organizations can enhance operational efficiency, innovate in their offerings, and maintain competitiveness in dynamic markets. However, the rapid increase in data availability also poses challenges, making it harder to locate specific, relevant information. To overcome these obstacles, implementing robust information governance is essential. Information technology management comprises a series of coordinated actions involving leadership, organization, and structured processes to align IT usage with corporate objectives. These structured frameworks and policies are designed to maximize value while balancing the associated risks and rewards of technology. As such. IT governance starts at the planning stage and extends through continuous monitoring to ensure IT's effectiveness in supporting corporate . This governance framework acts as a decision-making guide, enabling businesses to 549 ISSN: 1978-1520 improve performance, boost competitiveness, and ensure sustainability over time. When designing and assessing IT governance, companies can adopt frameworks such as COBIT. As a comprehensive IT governance tool. COBIT focuses on managing and delivering IT services while safeguarding the integrity and security of data and information. Issued by the IT Governance Institute under ISACA. COBIT provides best practices and clear guidelines for IT management, helping senior leaders identify and mitigate IT-related risks effectively . Meet Ventures. Pte. Ltd. is an innovation consulting and early-stage startup investor operating in 10 countries across Asia, with its headquarters in Singapore. The company has two main divisions: consulting and investment. Their consulting division serves a wide range of clients, including multinational companies, publicly listed corporations, government institutions, and leading universities. They offer various services such as business matchmaking, investor introductions, startup scouting, training, and mentoring, organizing pitching competitions, open innovation programs, and managing accelerator programs. Meanwhile, their investment division focuses on pre-seed and seed-stage investments in startups across Asia. They are interested in startups with proven and scalable business models, as well as founders with deep industry understanding and outstanding track records. Overall. Meet Ventures aims to support innovation and the growth of the startup ecosystem in Asia by providing comprehensive consulting services to their clients and investing capital in promising startups. This research analyzes the maturity level of IT governance at Meet Ventures. Pte. Ltd. Because we will provide recommendations for improvements that can be implemented. In the process of designing a governance system, 10 Design Factors (DF) are considered. The COBIT 2019 framework outlines key design factors critical for IT governance. Enterprise Strategy (DF. involves principles such as Growth. Innovation. Cost Leadership, and Client Service, which enhance healthcare services. IT management efficiency, and organizational stability. Enterprise Goals (DF. encompass 13 objectives, including product competitiveness, risk management, regulatory compliance, quality information, customer service, business continuity, process optimization, cost efficiency, staff productivity, and digital . The IT Risk Profile (DF. evaluates 19 criteria, such as IT investments, project management, cost monitoring, compliance, and data management. Lastly. IT-related issues (DF. are identified and categorized (No Issue. Issue. Serious Issu. to address current challenges and mitigate future risks effectively within the framework. The design factors influencing IT governance include several critical considerations: the threat landscape (DF. , categorized as normal or high based on threat levels. requirements (DF. , with low, normal, or high demands. and the role of IT(DF. , which can serve as Support. Factory. Turnaround, or Strategic. Additionally, the IT sourcing model (DF. involves approaches like outsourcing, cloud services, or insourcing, while implementation methods (DF. range from Agile and DevOps to Traditional and Hybrid. Lastly, a company's technology adoption strategy (DF. varies from being a First Mover, adopting new technology quickly, to a Follower or Slow Adopter, waiting for others or delaying adoption. In analyzing the Design Factors in the COBIT 2019 framework, the first step is to thoroughly understand the organization's context. This includes identifying the mission, vision, strategy, business objectives, and analyzing the internal and external environments, such as industry challenges, regulations, and competitive landscapes. Afterward, the organization needs to identify and prioritize the relevant Design Factors among the eleven key factors provided by COBIT 2019. The first factor. Enterprise Strategy, requires an analysis of the organization's strategy, such as whether the focus is on growth, efficiency, or innovation, so that IT governance processes can be aligned accordingly. Next. Enterprise Goals can be mapped using the Goals Cascade to ensure IT governance objectives align with the organization's goals. Other factors, such as the Risk Profile and Threat Landscape, require identifying the main types of risks the organization faces, the level of risk tolerance, and relevant threats, such as cyberattacks or natural disasters. For Compliance Requirements, organizations need to ensure that IT governance supports compliance with specific regulations and standards. Additionally, the COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 ISSN: 1978-1520 analysis of the Role of IT helps determine IT's role within the organization, whether as a supporter, business enabler, or innovator, so the governance design can be adjusted to match that Another factor to analyze is the Sourcing Model, where the organization needs to understand its use of internal resources, external resources, or a combination of both. Through this approach, each factor can be analyzed in depth to create an IT governance design that aligns with the organization's specific needs, supports the achievement of business objectives, and effectively manages risks. COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 Although many organizations have adopted COBIT 2019, there is still a lack of evaluation regarding its implementation effectiveness. Further research is needed to identify the factors influencing the success or failure of COBIT 2019 implementation, as well as effective methods to measure its impact on organizational performance. The results of this study, derived from each design factor, will be meticulously analyzed to provide valuable insights that are vital for enhancing the governance system of Meet Ventures. Pte. Ltd. RESEARCH METHODS The research method used in designing the IT governance system follows a series of stages adapted as a governance design workflow based on COBIT 2019, as shown in the diagram below: Figure 1. System Governance Design Workflow in COBIT 2019. Figure 1 explains the research steps that will be taken to achieve the results. Four stages will be carried out to support this research. We used the research approach at Meet Ventures. Pte. Ltd. and came up with the following four steps based on the four research steps mentioned above. Understand the enterprise context and strategy. This involves conducting interviews with stakeholders whose responsibilities typically included overseeing IT operations and contributing to strategic decision-making and observations at Meet Ventures. Pte. Ltd. to understand the initial steps in designing IT It includes identifying the strategies owned by Meet Ventures. Pte. Ltd. , which are then used as a foundation to understand the company's strategies, goals, risk profile, and information and technology-related issues. Determine the initial scope of the governance system The second stage involves stakeholder interviews to define the initial scope of the governance system, taking into account aspects of Design Factors 1 through 4. Refine the scope of the governance system. This stage involves identifying improvements to the initial scope of the governance system by considering aspects of Design Factors 5 through 11 based on COBIT 2019 design Stakeholder interviews are conducted to gather the necessary information. Conclude the governance system design. The final stage consolidates all inputs from the previous stages to produce a conclusion for the governance system design. The output includes a summary of scores for each process on a scale of -100 to 100. Processes scoring 50 or higher are considered critical for Meet Ventures. Pte. Ltd. and will require a capability level of 4. Processes scoring below 50 will require lower capability levels . , 2, or . ISSN: 1978-1520 By following these steps. Meet Ventures. Pte. Ltd. aims to establish an IT governance system tailored to the companyAos needs. COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 RESULT AND DISCUSSION The interview process was conducted in two sessions. The interviewees were senior associates in the IT department of their company, whose responsibilities typically included overseeing IT operations and contributing to strategic decision-making within the IT division and other company-wide strategies, given its IT-based business model. The interviewers were the researchers. 1 Design Factor 1 - Enterprise Strategy From the interviews conducted during the assessment of Design Factor 1, the results are presented in Table 1. Table 1 Design Factor 1 Value Growth/Acquisition Innovation/Differentiation Cost Leadership Client Service/Stability Importance . Baseline The assessment results indicate that Meet Ventures. Pte. Ltd. has a strong focus on innovation, differentiation, and customer service, with high scores given for Innovation/Differentiation and Client Service/Stability. They also show some attention to growth and acquisition, although not as strongly as in the areas of innovation and customer service. Design Factor 2 - Enterprise Goals From the interviews we conducted during the assessment of Design Factor 2, the results shown in Table 2 were obtained. Table 2 Design Factor 2 Value EG01AiPortfolio of competitive products and services EG02AiManaged business risk EG03AiCompliance with external laws and regulations EG04AiQuality of financial information EG05AiCustomer-oriented service culture EG06AiBusiness-service continuity and availability EG07AiQuality of management information EG08AiOptimization of internal business process functionality EG09AiOptimization of business process costs EG10AiStaff skills, motivation and productivity EG11AiCompliance with internal policies EG12AiManaged digital transformation programs EG13AiProduct and business innovation Importance . Baseline 552 ISSN: 1978-1520 The results for Meet Ventures. Pte. Ltd. highlight key elements in designing an effective IT governance system aligned with the company's business objectives. By placing significant emphasis on critical aspects such as compliance with external laws and regulations (EG. , the company underscores its responsibility to operate within the applicable legal framework, indirectly ensuring operational sustainability and maintaining a strong reputation. Additionally, the focus on a customer-oriented service culture (EG. reflects Meet Ventures' commitment to prioritizing customer satisfaction as a foundation for long-term growth. Well-managed business risk management (EG. demonstrates a deep understanding of the importance of identifying, evaluating, and addressing risks that may arise in daily operations, contributing to the company's sustainability and growth. Employee skills, motivation, and productivity (EG. are also a key focus, indicating that Meet Ventures values its employees as a critical asset for achieving business success. Furthermore, adherence to internal policies (EG. signifies the company's commitment to consistency and compliance in its internal processes and practices. Through effective management of digital transformation programs (EG. , the company shows its readiness to adapt to rapid technological changes and ensure that its IT infrastructure supports its business goals. Finally, the emphasis on product and business innovation (EG. demonstrates Meet Ventures' proactive approach to market changes and its efforts to remain relevant and competitive amid dynamic industry shifts. While certain areas may require improvement, the overall high ratings affirm Meet Ventures. Pte. Ltd. 's strong commitment to operational success and long-term COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 Design Factor 3 Ae IT Risk Profile From the interviews we conducted during the assessment with senior associates in the IT department the result of Design Factor 3 shown in Table 3 was obtained. Table 3. Design Factor 3 Risk Scenario Category IT investment decision-making, portfolio definition & Program & project life cycle management IT cost & oversight IT expertise, skills & behavior Enterprise/IT architecture IT operational infrastructure incidents Unauthorized actions Software adoption/usage problems Hardware incidents Software failures Logical attacks . acking, malware, etc. Third-party/supplier incidents Noncompliance Geopolitical Issues Industrial action Acts of nature Technology-based innovation Environmental Data & information management Impact Likelihood . Risk Rating Baseline COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 ISSN: 1978-1520 Based on the interview results, risks associated with IT investment decision-making, portfolio definition, and maintenance are assessed as having a significant impact due to the difficulty of altering systems. This means that failed large-scale investments could have substantial consequences. Consequently, adjustments or changes after the initial investment can pose substantial challenges for the company. Risks related to programs and projects are also rated as having a significant impact due to the potential for human errors, such as corruption, despite thorough planning. Cost oversight and IT expertise are considered high-impact risks since the company operates as a non-profit organization managing public funds. Ineffective management in these areas could seriously affect the organization's sustainability and public trust. Risks related to IT architecture, operational IT infrastructure incidents, unauthorized actions, software usage, and hardware incidents are rated as high-impact because they could significantly disrupt operations and incur substantial costs for repairs and recovery. Although risks such as software failures, logical attacks, non-compliance, and geopolitical issues are deemed to have high probability, their impact is assessed as less severe because the company has prepared mitigation measures and solutions in advance. Nonetheless, these risks still require ongoing monitoring and management to ensure appropriate mitigation is applied when necessary. Risks related to natural disasters, technology-driven innovation, environmental factors, and data management are considered to have potentially significant impacts due to physical damage to facilities, loss of critical data, or significant operational failures. Therefore, it is crucial to focus on mitigating risks with both high impact and high probability to ensure operational continuity and the company's long-term success. Design Factor 4 Ae IT-Related Issue From the interviews we conducted during the assessment of Design Factor 4, the results shown in Table 4 were obtained. The "importance" column indicates the severity of the issue: a value of 1 represents no issue, 2 indicates a moderate issue, and 3 signifies a major issue. The interview data reveals that the organization faces a broad spectrum of issues, including internal and external challenges that can impact its performance and operational success. A prominent issue is the disagreement and frustration between various IT entities across the organization, as well as between business departments and the IT department. A low perception of IT's contribution to business value can lead to detrimental internal friction, hinder collaboration, and disrupt overall organizational effectiveness. On the other hand, critical IT-related incidents, such as data loss and security breaches, highlight the organization's vulnerability to serious security In an era where data is a highly valuable asset, protecting confidential and sensitive information is essential for maintaining reputation and customer trust. Additionally, issues such as service delivery problems from IT contractors, failure to meet regulatory requirements, and uncontrolled IT budget and expenditure management are challenges that can result in operational disruptions and financial losses. By understanding and effectively addressing these issues, the organization can enhance its performance, minimize risks, and better achieve its business objectives. Therefore, well-thought-out strategies and appropriate solutions are necessary to tackle these complex challenges and ensure IT functions as an effective tool in supporting the companyAos vision and mission. Design Factor 5 - Threat Landscape From the interviews we conducted during the assessment of Design Factor 5, the results shown in Table 5 were obtained. Table 4. Design factor 5 Value High Normal Importance . %) Baseline COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 ISSN: 1978-1520 The results from the Design Factor 5 interviews in COBIT 2019 highlight the importance of understanding and managing risks in IT governance. The matrix reveals that high risks (Hig. are highly significant . %) despite comprising only 33% of the current baseline, while normal risks (Norma. are less critical . %) but account for 67% of the baseline. This conclusion indicates that the organization must focus more on managing high risks due to their significant impact, even though they are fewer in number. The implication is that the organization should allocate more resources to mitigate high risks, design effective IT governance policies, and develop strong risk management capabilities. These efforts are essential to ensuring readiness and resilience against potential threats, protecting assets, and maintaining operational Design Factor 6 - Compliance Requirements From the interviews we conducted during the assessment of Design Factor 6, the results shown in Table 7 were obtained. Table 5. Design Factor 6 Value High Normal Low Importance . %) Baseline In this design factor, the interviewees were asked questions about how compliant the company is with local government regulations. Questions in Design Factor 6 help assess how well the company adheres to government regulations. The results, based on interviews and the researcherAos analysis, indicate that the company is not always required to follow government regulations, as the local environment is already well-regulated and stable. Design Factor 7 - Role of IT From the interviews we conducted during the assessment of Design Factor 7, the results shown in Table 7 were obtained. Table 6. Design Factor 7 Value Support Factory Turnaround Strategic Importance . Baseline Based on the interview with the head of the IT department, the company utilizes IT at a Strategic level in its operational processes, with a value of 5. It is not merely a support function but is critical for both the continuity and innovation of the organizationAos business processes and Although the Support role received a score of 4, indicating ITAos importance in maintaining the basic operations of the business, it is clear that the company views IT as far more than a foundational element. By positioning IT as a Strategic factor, the organization ensures it plays a central role in driving and innovating projects aimed at effectively serving the public. Design Factor 8 Ae Sourcing Mode of IT From the interviews we conducted during the assessment of Design Factor 8, the results shown in Table 8 were obtained. COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 ISSN: 1978-1520 Table 7. Design Factor 8 Value Outsourcing Cloud Insourced Importance . %) Baseline Based on the interview with the respondent, it was found that the sourcing model at Meet Ventures. Pte. Ltd. is 50% at the Outsourcing level. This is because the company primarily develops applications using outsourcing. Next, 40% is at the Cloud level, as the company uses internet-based vendors. The insourced model accounts for 10%, as it is only used for oversight Design Factor 9 - Implementation Methods From the interviews we conducted during the assessment of Design Factor 9, the results shown in Table 9 were obtained. Table 8. Design Factor 9 Value Agile DevOps Traditional Importance . %) Baseline Based on the interview with the respondent, it was found that the company uses the DevOps method with a 0% rate, the Agile method with a 100% rate, and the Traditional method with a 0% rate. This is because the company develops software relatively quickly and does not use other methods. Design Factor 10 - Technology Adoption Strategy From the interviews we conducted during the assessment of Design Factor 10, the results shown in Table 11 were obtained. Table 9. Design Factor 10 Value First mover Follower Slow adopter Importance . %) Baseline Based on the interview results with the senior associates in the IT department, it was found that, according to the percentage results of the technology adoption strategy in the company, 30% are first movers, 70% are followers, and 0% are slow adopters. This is because there are some technologies that the company adopted first, such as AI, while for other technologies, like blockchain, the company is still a follower. As for slow adopters, the company is not slow in adopting new technologies. COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 ISSN: 1978-1520 Governance and Management Objectives Importance (All Design Factor. EDM01 EDM02 EDM03 EDM04 EDM05 APO01 APO02 APO03 APO04 APO05 APO06 APO07 APO08 APO09 APO10 APO11 APO12 APO13 APO14 BIA01 BAI02 BAI03 BAI04 BAI05 BAI06 BAI07 BAI08 BAI09 BAI10 BAI11 -40 DSS01 DSS02 DSS03 DSS04 DSS05 DSS06 MEA01 MEA02 MEA03 MEA04 Figure 2. Priority Objectives Determination of Priority Objectives IT Governance Design Result: After analyzing the objectives using Design Factor (DF1DF. , the process objectives to be further evaluated are concluded, as shown in the following The results of filling out the 10 design factors show 3 priority objectives with scores of 80 or more, based on and adjusted to the company's conditions. The three priority objectives are BAI03 Ae Managed Solution Identification and Build. BAI06 Ae Managed IT Changes, and MEA01 Ae Managed Performance. Based on these results, the process will proceed to the next stage. ISSN: 1978-1520 Explanation of Priority Objectives The company can set priorities on the objectives BAI03. BAI06, and MEA01 within the COBIT 2019 framework because these three objectives focus on critical aspects of management and improving the effectiveness and efficiency of IT, which aligns with the assessment results and the company's strategy. Here is an explanation of why these three objectives are prioritized: BAI03 - Manage Solutions Identification and Build a Focus on Innovation and Differentiation: Meet Ventures. Pte. Ltd places high value on innovation and differentiation. BAI03 covers the process of identifying, developing, and implementing new innovative IT solutions. By prioritizing this objective, the company ensures that the solutions identified and developed support its innovation and differentiation strategy. a IT Investment Portfolio Management: The assessment shows that the risks associated with IT investment decision-making have a significant impact. By prioritizing BAI03, the company can manage its IT solution portfolio more effectively, reduce the risk of failed investments, and ensure that the solutions developed are aligned with business BAI06 - Manage Changes a Compliance and Risk Management: The company places a strong emphasis on compliance with external regulations and risk management. BAI06 covers the structured and controlled management of IT changes, which is essential to ensure that each change aligns with applicable policies and regulations, as well as to mitigate risks that may arise from those changes. a Operational Risk Mitigation: Properly managing changes can reduce operational risks resulting from errors or failures in implementing changes. By prioritizing BAI06, the company can ensure that changes are made in a way that minimizes disruptions and risks, supporting operational continuity. MEA01 - Monitor. Evaluate, and Assess Performance and Conformance a Performance and Compliance Evaluation: Meet Ventures. Pte. Ltd prioritizes compliance and risk management aspects, as well as managing IT costs and expertise. MEA01 enables the company to continuously monitor, evaluate, and assess performance and compliance with applicable policies and regulations. This is crucial to ensure that IT systems and processes operate in alignment with the established objectives and standards. a Continuous Improvement: MEA01 supports continuous improvement by providing a framework to identify areas that need enhancement. By prioritizing this objective, the company can more effectively identify and address performance and compliance issues, ensuring that IT continues to optimally support business goals. COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 CONCLUSION The assessment of various design factors in COBIT 2019 indicates that Meet Ventures. Pte. Ltd. has a strong focus on innovation, differentiation, and customer service. They also demonstrate a commitment to legal compliance and external regulations, a customer service culture, and effective risk management. The company prioritizes employee skills and productivity, as well as compliance with internal policies and digital transformation programs. Additionally, risks associated with IT investment decision-making, programs and projects, and managing IT costs and expertise are assessed to have a significant impact. They face a range of internal and external challenges, including interdepartmental disagreements, security incidents, and uncontrolled budget management. In terms of threat profiles, high risks require more attention even though their proportion is smaller. Compliance with local government regulations is considered good and does not require special attention. The role of IT within the company is highly strategic, and the sourcing model primarily relies on outsourcing and cloud solutions. The 558 ISSN: 1978-1520 software development method uses agile, and the technology adoption strategy tends to be a This assessment shows that Meet Ventures. Pte. Ltd. focuses on innovation and customer service as the core of its business strategy, emphasizing the importance of differentiation to compete in the market. Their commitment to legal compliance, risk management, and digital transformation demonstrates their readiness to face operational challenges and comply with The emphasis on employee skills and productivity highlights human resources as the company's key asset. IT investment and project risks require special attention due to their significant impact on operational sustainability. Challenges related to interdepartmental disagreements and security incidents indicate the need for improved communication and data High risks require greater mitigation, despite their smaller proportion. Good compliance with government regulations indicates a stable business environment. The strategic role of IT and the use of outsourcing and cloud models reflect the company's adaptation to the latest technological trends, while the agile approach to software development demonstrates flexibility and speed in responding to market needs. A technology adoption strategy that tends to follow allows the company to implement more mature and proven technologies. Overall, this assessment reaffirms Meet Ventures. Pte. Ltd. 's strong commitment to operational success and long-term growth through effective risk management, compliance, and continuous innovation. COGITO Smart Journal Ae Vol. No. December 2024. P-ISSN: 2541-2221. E-ISSN: 2477-8079 REFERENCES