INTEGRATING IT GOVERNANCE FRAMEWORKS INTO SELF-ASSESSMENT INSTRUMENT DEVELOPMENT: A SYSTEMATIC LITERATURE REVIEW
DOI:
https://doi.org/10.32524/ukmcic.v3i1.2302Keywords:
Business Continuity, COBIT 2019, ITIL v4, Self-Assessment Instrument, Systematic Literature ReviewAbstract
Business continuity increasingly depends on mature IT governance, yet many organizations still rely on external audits to judge whether their governance is adequate. This study reviews the literature on integrating the COBIT twenty nineteen and ITIL version four frameworks into the development of self assessment instruments that support business sustainability. A Systematic Literature Review following Kitchenham's guidelines was conducted. Five keyword strings were searched in Google Scholar through Harzing's Publish or Perish, returning one hundred publications from twenty twenty one to twenty twenty six. After inclusion and exclusion criteria were applied, thirty primary studies were retained and analyzed against four research questions. Thirteen studies addressed framework integration, six of which combined COBIT twenty nineteen and ITIL version four. Two studies conducted COBIT twenty nineteen based self assessments. Eleven studies designed their own assessment instruments, ten based on COBIT twenty nineteen and one on ITIL version four. Four studies linked COBIT twenty nineteen implementation to business sustainability. The findings show that integrating the two frameworks is feasible. COBIT twenty nineteen provides strategic control and compliance, while ITIL version four supplies operational service guidance. A self assessment instrument built on this hybrid approach can serve as a proactive pre audit tool. Future research should develop and validate such an instrument with safeguards against self reporting bias.
References
Abdurrahman, L. (2024). Control self-assessment (CSA) on information technology business processes as COBIT 2019-based pre-audit activities. International Journal of Knowledge Management in Tourism and Hospitality, 3(3), 185–200. https://doi.org/10.1504/ijkmth.2023.10057578
Aflakhah, E., & Soewito, B. (2023). Assessing information security using COBIT 2019 and ISO 27001:2013 for developing a mitigation plan. International Journal of Engineering Trends and Technology, 71(10), 223–237. https://doi.org/10.14445/22315381/IJETT-V71I10P221
Amaliyah, P., Dewi, R. S., Wibawa, R. P., & Rofik, A. (2025). Development of audit instruments and maturity assessment of academic information systems using COBIT 2019 (A case study at XYZ University). JDBIM (Journal of Digital Business and Innovation Management), 4(2), 302–316. https://doi.org/10.26740/jdbim.v4i2.71242
Ananda, V., Yasa, G. I., & Dwitawati, I. (2025). Identifying IT governance and management objectives (GMO) with COBIT 2019: Case study Islamic State University Ar-Raniry. Elkawnie: Journal of Islamic Science and Technology, 11(1). https://doi.org/10.22373/ekw.v11i1.26329
Artamevia, Z., & Triayudi, A. (2025). Evaluation of maturity level information security using COBIT 2019 and ISO/IEC 27001:2022. JIKO (Jurnal Informatika dan Komputer), 8(3), 181–187. https://doi.org/10.33387/jiko.v8i3.10704
AXELOS. (2019). ITIL foundation: ITIL 4 edition. TSO (The Stationery Office).
Ayu, A. L., Lubis, M., Abdurrahman, L., Zamzami, I. F., Alqahtani, R. A., & Ramadhani, R. (2024). Assessment of IT risk management at the Faculty of Industrial Engineering, Telkom University, utilizing the COBIT 2019 framework's APO12 domain with LAM INFOKOM standards mapping. Electronic Integrated Computer Algorithm Journal, 1(2), 50–56. https://doi.org/10.62123/enigma.v1i2.21
Bagja, A., Amri, Z., Imtihan, K., Rodi, M., & Rusniatun, S. Y. (2024). Enhancing public sector IT governance through COBIT 2019: A case study on service continuity and data management in the Central Lombok. Journal of Information Systems and Informatics, 6(4), 2761–2776. https://doi.org/10.51519/journalisi.v6i4.924
Bangun, O., Aruan, E. C., Sirait, S. A., Keliat, T. Y., & Sitepu, S. E. B. (2026). Analisis tata kelola keamanan data dan kontinuitas layanan berdasarkan framework COBIT 2019 pada platform e-commerce lokal (Studi kasus: MedanMart). LOFIAN: Jurnal Teknologi Informasi dan Komunikasi, 5(2), 285–297. https://doi.org/10.58918/lofian.v5i2.294
Farannisa, S., Nurtrisha, W. A., & Praditya, D. (2024). Analisis manajemen risiko TI menggunakan kerangka kerja COBIT 2019 domain EDM03 dan APO12: Studi kasus pada PT XYZ. INNOVATIVE: Journal of Social Science Research, 4(4), 11186–11199.
Firmansyah, B., Ipung, H. P., & Soetomo, M. A. (2025). Evaluation of IT governance with a focus on business application continuity using the COBIT 2019 framework: A case study in XYZ Group. Jurnal Ilmiah Multidisiplin Indonesia (JIM-ID), 4(10). https://doi.org/10.58471/esaprom.v4i10
Hanif, M. F., Harahap, A. R., Fakhrudin, A., Madina, F. F., & Febriawan, D. (2025). Integrating COBIT and ISO frameworks in IT audits: A literature review. International Journal of Emerging Research in Engineering, Science, and Management, 4(3), 8–14. https://doi.org/10.58482/ijeresm.v4i3.2
Harjanto, A., & Aji, R. F. (2024). Improving IT assets management with ITIL 4 framework. Jurnal Ilmu Komputer dan Informasi, 17(2), 127–143. https://doi.org/10.21609/jiki.v17i2.1195
Husein, H., & Talita, A. S. (2026). Roadmap for IT governance maturity enhancement with COBIT 2019 at PT Len Telekomunikasi Indonesia. ZONAsi: Jurnal Sistem Informasi, 8(1). https://doi.org/10.31849/ayax3j65
Idrus, N. A., & Widodo, C. E. (2025). Strategy improvement for IT governance in library services using an adaptation of ITIL 4 and FitSM: A COBIT 2019 evaluation. Scientific Journal of Informatics, 12(4), 685–696. https://doi.org/10.15294/sji.v12i4.34197
Indrajit, R. E., Dazki, E., Kurniawan, R. D., & Dio F, J. (2025). IT governance through mathematical modeling: A quantitative assessment of maturity using factor analysis and structural equation modeling. Jurnal Teknik Informatika (JUTIF), 6(5), 3393–3406. https://doi.org/10.52436/1.jutif.2025.6.5.5201
Indrawati, A. R., Rozas, I. S., & Wahyudi, D. N. (2023). Instrumen maturity assessment design toolkit berbasis COBIT 2019. Edu Komputika, 10(1). http://journal.unnes.ac.id/sju/index.php/edukom
ISACA. (2018). COBIT 2019 framework: Introduction and methodology. ISACA.
Kitchenham, B. (2004). Procedures for performing systematic reviews (Technical Report TR/SE-0401). Keele University.
Leonardo, K., & Latuperissa, R. (2024). Information technology governance design in trading companies using the COBIT 2019 framework. Journal of Information Systems and Informatics, 6(3). https://doi.org/10.51519/journalisi.v6i3.798
Mambu, J. Y., Fanesa, V., Pythagoras, M., & Lumingkewas, C. (2023). Identifikasi level kapabilitas IT governance menggunakan framework COBIT 2019 pada PT Icon+. Jurnal Informasi dan Teknologi, 5(2). https://doi.org/10.37034/jidt.v5i2.322
Mambu, J. Y., Todingdatu, Z., & Kondo, J. (2025). SAP assessment using COBIT 2019 and ITIL for system improvement and strategic decision support. JITK (Jurnal Ilmu Pengetahuan dan Teknologi Komputer), 11(1), 201–215. https://doi.org/10.33480/jitk.v11i1.6942
Mokodaser, W. G., Mambu, J. Y., Koapaha, H. P., & Lompoliu, E. (2024). Aligning information technology governance with business goals using the COBIT 2019 framework: A case study of an innovation consultancy firm. CogITo Smart Journal, 10(2), 548–560. https://doi.org/10.31154/cogito.v10i2.799.548-560
Munaspin, Z. D. P., Indah, D. R., Baturohmah, H., Ibrahim, A., Sanjaya, M. R., & Syahbani, M. H. (2025). IT governance maturity assessment of the BRAVO application using an integrated COBIT 2019 and ITIL 4 framework. JUSIFO (Jurnal Sistem Informasi), 11(2), 97–110. https://doi.org/10.19109/jusifo.v11i2.31602
Nurwahid, A., Meilinda, V., Tarsini, I., Solikhah, M., & Firmansah, S. R. (2025). Optimizing the performance of database and information systems architecture through the COBIT 2019 framework and ITIL V4: A case study of PT. Syntax Corporation Indonesia. Jurnal Indonesia Sosial Teknologi (JIST), 6(12). http://jist.publikasiindonesia.id/
Perdana, B. G. A., Muhammad, A. H., & Nasiri, A. (2024). Evaluation of IT governance based on SPBE using COBIT 2019 and ISO/IEC 38500:2015. Jurnal Inovtek Polbeng – Seri Informatika, 9(1).
Pratama, R. Y., & Umaroh, S. (2024). An IT asset governance model design using COBIT 2019 and ITIL V4 framework at BKU Itenas. E3S Web of Conferences, 484, Article 02006. https://doi.org/10.1051/e3sconf/202448402006
Primaditama, A., Fadhil, M. R. M., & Sanan, F. F. (2025). Application of company goal design factor based on COBIT 2019 to improve startup company goals. Journal of Software Engineering, Information and Communication Technology (SEICT), 6(1), 63–72. https://doi.org/10.17509/seict.v6i1.66264
Putra, B., Jazman, M., Megawati, M., & Salisah, F. N. (2022). IT governance audit at the Kampar Regency Library and Archives Department using COBIT 2019 and ITIL 4. Jurnal Teknik Informatika (JUTIF), 3(6), 1591–1600. https://doi.org/10.20884/1.jutif.2022.3.6.406
Svirfa, A. N., Dewi, R. S., & Wibawa, R. P. (2025). Design of an audit instrument for the internship information system (IIS) based on COBIT 2019 (A case study at Universitas XYZ). JDBIM (Journal of Digital Business and Innovation Management), 4(2), 393–410. https://doi.org/10.26740/jdbim.v4i2.71831
Wulandari, S. M., Pratama, A. R., Al-Habsie, M., Muhammad, D., & Huda, Q. (2025). Systematic literature review of IT governance: Dominant frameworks, implementation challenges, and comparative analysis of COBIT, ITIL, and ISO/IEC 38500. Jurnal Sistem Informasi dan Teknologi Informasi, 7(3), 952–960.
Yulistiawan, B. S., Widyastuti, R., Mulianingtyas, R. O., A, G. P. R., & Sihotang, H. T. (2025). Developing the adaptive digital IT governance framework for next-generation IT governance. MATRIK: Jurnal Manajemen, Teknik Informatika dan Rekayasa Komputer, 25(1), 97–112. https://doi.org/10.30812/matrik.v25i1.5628
Zahroh, S. A., Dewi, R. S., & Wibawa, R. P. (2025). Development of audit working papers and maturity levels for helpdesk information technology governance using COBIT 2019 in the DSS domain (A case study of XYZ University). JDBIM (Journal of Digital Business and Innovation Management), 4(2), 378–392. https://doi.org/10.26740/jdbim.v4i2.71778
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Surya Andita Nasution, Antonius Wahyu Sudrajat, Mardiani Mardiani

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.








