INTEGRATING IT GOVERNANCE FRAMEWORKS INTO SELF-ASSESSMENT INSTRUMENT DEVELOPMENT: A SYSTEMATIC LITERATURE REVIEW

Authors

  • Surya Andita Nasution Universitas Multi Data Palembang
  • Antonius Wahyu Sudrajat Universitas Multi Data Palembang
  • Mardiani Mardiani Universitas Multi Data Palembang

DOI:

https://doi.org/10.32524/ukmcic.v3i1.2302

Keywords:

Business Continuity, COBIT 2019, ITIL v4, Self-Assessment Instrument, Systematic Literature Review

Abstract

Business continuity increasingly depends on mature IT governance, yet many organizations still rely on external audits to judge whether their governance is adequate. This study reviews the literature on integrating the COBIT twenty nineteen and ITIL version four frameworks into the development of self assessment instruments that support business sustainability. A Systematic Literature Review following Kitchenham's guidelines was conducted. Five keyword strings were searched in Google Scholar through Harzing's Publish or Perish, returning one hundred publications from twenty twenty one to twenty twenty six. After inclusion and exclusion criteria were applied, thirty primary studies were retained and analyzed against four research questions. Thirteen studies addressed framework integration, six of which combined COBIT twenty nineteen and ITIL version four. Two studies conducted COBIT twenty nineteen based self assessments. Eleven studies designed their own assessment instruments, ten based on COBIT twenty nineteen and one on ITIL version four. Four studies linked COBIT twenty nineteen implementation to business sustainability. The findings show that integrating the two frameworks is feasible. COBIT twenty nineteen provides strategic control and compliance, while ITIL version four supplies operational service guidance. A self assessment instrument built on this hybrid approach can serve as a proactive pre audit tool. Future research should develop and validate such an instrument with safeguards against self reporting bias.

References

Abdurrahman, L. (2024). Control self-assessment (CSA) on information technology business processes as COBIT 2019-based pre-audit activities. International Journal of Knowledge Management in Tourism and Hospitality, 3(3), 185–200. https://doi.org/10.1504/ijkmth.2023.10057578

Aflakhah, E., & Soewito, B. (2023). Assessing information security using COBIT 2019 and ISO 27001:2013 for developing a mitigation plan. International Journal of Engineering Trends and Technology, 71(10), 223–237. https://doi.org/10.14445/22315381/IJETT-V71I10P221

Amaliyah, P., Dewi, R. S., Wibawa, R. P., & Rofik, A. (2025). Development of audit instruments and maturity assessment of academic information systems using COBIT 2019 (A case study at XYZ University). JDBIM (Journal of Digital Business and Innovation Management), 4(2), 302–316. https://doi.org/10.26740/jdbim.v4i2.71242

Ananda, V., Yasa, G. I., & Dwitawati, I. (2025). Identifying IT governance and management objectives (GMO) with COBIT 2019: Case study Islamic State University Ar-Raniry. Elkawnie: Journal of Islamic Science and Technology, 11(1). https://doi.org/10.22373/ekw.v11i1.26329

Artamevia, Z., & Triayudi, A. (2025). Evaluation of maturity level information security using COBIT 2019 and ISO/IEC 27001:2022. JIKO (Jurnal Informatika dan Komputer), 8(3), 181–187. https://doi.org/10.33387/jiko.v8i3.10704

AXELOS. (2019). ITIL foundation: ITIL 4 edition. TSO (The Stationery Office).

Ayu, A. L., Lubis, M., Abdurrahman, L., Zamzami, I. F., Alqahtani, R. A., & Ramadhani, R. (2024). Assessment of IT risk management at the Faculty of Industrial Engineering, Telkom University, utilizing the COBIT 2019 framework's APO12 domain with LAM INFOKOM standards mapping. Electronic Integrated Computer Algorithm Journal, 1(2), 50–56. https://doi.org/10.62123/enigma.v1i2.21

Bagja, A., Amri, Z., Imtihan, K., Rodi, M., & Rusniatun, S. Y. (2024). Enhancing public sector IT governance through COBIT 2019: A case study on service continuity and data management in the Central Lombok. Journal of Information Systems and Informatics, 6(4), 2761–2776. https://doi.org/10.51519/journalisi.v6i4.924

Bangun, O., Aruan, E. C., Sirait, S. A., Keliat, T. Y., & Sitepu, S. E. B. (2026). Analisis tata kelola keamanan data dan kontinuitas layanan berdasarkan framework COBIT 2019 pada platform e-commerce lokal (Studi kasus: MedanMart). LOFIAN: Jurnal Teknologi Informasi dan Komunikasi, 5(2), 285–297. https://doi.org/10.58918/lofian.v5i2.294

Farannisa, S., Nurtrisha, W. A., & Praditya, D. (2024). Analisis manajemen risiko TI menggunakan kerangka kerja COBIT 2019 domain EDM03 dan APO12: Studi kasus pada PT XYZ. INNOVATIVE: Journal of Social Science Research, 4(4), 11186–11199.

Firmansyah, B., Ipung, H. P., & Soetomo, M. A. (2025). Evaluation of IT governance with a focus on business application continuity using the COBIT 2019 framework: A case study in XYZ Group. Jurnal Ilmiah Multidisiplin Indonesia (JIM-ID), 4(10). https://doi.org/10.58471/esaprom.v4i10

Hanif, M. F., Harahap, A. R., Fakhrudin, A., Madina, F. F., & Febriawan, D. (2025). Integrating COBIT and ISO frameworks in IT audits: A literature review. International Journal of Emerging Research in Engineering, Science, and Management, 4(3), 8–14. https://doi.org/10.58482/ijeresm.v4i3.2

Harjanto, A., & Aji, R. F. (2024). Improving IT assets management with ITIL 4 framework. Jurnal Ilmu Komputer dan Informasi, 17(2), 127–143. https://doi.org/10.21609/jiki.v17i2.1195

Husein, H., & Talita, A. S. (2026). Roadmap for IT governance maturity enhancement with COBIT 2019 at PT Len Telekomunikasi Indonesia. ZONAsi: Jurnal Sistem Informasi, 8(1). https://doi.org/10.31849/ayax3j65

Idrus, N. A., & Widodo, C. E. (2025). Strategy improvement for IT governance in library services using an adaptation of ITIL 4 and FitSM: A COBIT 2019 evaluation. Scientific Journal of Informatics, 12(4), 685–696. https://doi.org/10.15294/sji.v12i4.34197

Indrajit, R. E., Dazki, E., Kurniawan, R. D., & Dio F, J. (2025). IT governance through mathematical modeling: A quantitative assessment of maturity using factor analysis and structural equation modeling. Jurnal Teknik Informatika (JUTIF), 6(5), 3393–3406. https://doi.org/10.52436/1.jutif.2025.6.5.5201

Indrawati, A. R., Rozas, I. S., & Wahyudi, D. N. (2023). Instrumen maturity assessment design toolkit berbasis COBIT 2019. Edu Komputika, 10(1). http://journal.unnes.ac.id/sju/index.php/edukom

ISACA. (2018). COBIT 2019 framework: Introduction and methodology. ISACA.

Kitchenham, B. (2004). Procedures for performing systematic reviews (Technical Report TR/SE-0401). Keele University.

Leonardo, K., & Latuperissa, R. (2024). Information technology governance design in trading companies using the COBIT 2019 framework. Journal of Information Systems and Informatics, 6(3). https://doi.org/10.51519/journalisi.v6i3.798

Mambu, J. Y., Fanesa, V., Pythagoras, M., & Lumingkewas, C. (2023). Identifikasi level kapabilitas IT governance menggunakan framework COBIT 2019 pada PT Icon+. Jurnal Informasi dan Teknologi, 5(2). https://doi.org/10.37034/jidt.v5i2.322

Mambu, J. Y., Todingdatu, Z., & Kondo, J. (2025). SAP assessment using COBIT 2019 and ITIL for system improvement and strategic decision support. JITK (Jurnal Ilmu Pengetahuan dan Teknologi Komputer), 11(1), 201–215. https://doi.org/10.33480/jitk.v11i1.6942

Mokodaser, W. G., Mambu, J. Y., Koapaha, H. P., & Lompoliu, E. (2024). Aligning information technology governance with business goals using the COBIT 2019 framework: A case study of an innovation consultancy firm. CogITo Smart Journal, 10(2), 548–560. https://doi.org/10.31154/cogito.v10i2.799.548-560

Munaspin, Z. D. P., Indah, D. R., Baturohmah, H., Ibrahim, A., Sanjaya, M. R., & Syahbani, M. H. (2025). IT governance maturity assessment of the BRAVO application using an integrated COBIT 2019 and ITIL 4 framework. JUSIFO (Jurnal Sistem Informasi), 11(2), 97–110. https://doi.org/10.19109/jusifo.v11i2.31602

Nurwahid, A., Meilinda, V., Tarsini, I., Solikhah, M., & Firmansah, S. R. (2025). Optimizing the performance of database and information systems architecture through the COBIT 2019 framework and ITIL V4: A case study of PT. Syntax Corporation Indonesia. Jurnal Indonesia Sosial Teknologi (JIST), 6(12). http://jist.publikasiindonesia.id/

Perdana, B. G. A., Muhammad, A. H., & Nasiri, A. (2024). Evaluation of IT governance based on SPBE using COBIT 2019 and ISO/IEC 38500:2015. Jurnal Inovtek Polbeng – Seri Informatika, 9(1).

Pratama, R. Y., & Umaroh, S. (2024). An IT asset governance model design using COBIT 2019 and ITIL V4 framework at BKU Itenas. E3S Web of Conferences, 484, Article 02006. https://doi.org/10.1051/e3sconf/202448402006

Primaditama, A., Fadhil, M. R. M., & Sanan, F. F. (2025). Application of company goal design factor based on COBIT 2019 to improve startup company goals. Journal of Software Engineering, Information and Communication Technology (SEICT), 6(1), 63–72. https://doi.org/10.17509/seict.v6i1.66264

Putra, B., Jazman, M., Megawati, M., & Salisah, F. N. (2022). IT governance audit at the Kampar Regency Library and Archives Department using COBIT 2019 and ITIL 4. Jurnal Teknik Informatika (JUTIF), 3(6), 1591–1600. https://doi.org/10.20884/1.jutif.2022.3.6.406

Svirfa, A. N., Dewi, R. S., & Wibawa, R. P. (2025). Design of an audit instrument for the internship information system (IIS) based on COBIT 2019 (A case study at Universitas XYZ). JDBIM (Journal of Digital Business and Innovation Management), 4(2), 393–410. https://doi.org/10.26740/jdbim.v4i2.71831

Wulandari, S. M., Pratama, A. R., Al-Habsie, M., Muhammad, D., & Huda, Q. (2025). Systematic literature review of IT governance: Dominant frameworks, implementation challenges, and comparative analysis of COBIT, ITIL, and ISO/IEC 38500. Jurnal Sistem Informasi dan Teknologi Informasi, 7(3), 952–960.

Yulistiawan, B. S., Widyastuti, R., Mulianingtyas, R. O., A, G. P. R., & Sihotang, H. T. (2025). Developing the adaptive digital IT governance framework for next-generation IT governance. MATRIK: Jurnal Manajemen, Teknik Informatika dan Rekayasa Komputer, 25(1), 97–112. https://doi.org/10.30812/matrik.v25i1.5628

Zahroh, S. A., Dewi, R. S., & Wibawa, R. P. (2025). Development of audit working papers and maturity levels for helpdesk information technology governance using COBIT 2019 in the DSS domain (A case study of XYZ University). JDBIM (Journal of Digital Business and Innovation Management), 4(2), 378–392. https://doi.org/10.26740/jdbim.v4i2.71778

Downloads

Published

2026-10-23

How to Cite

Nasution, S. A., Sudrajat, A. W., & Mardiani, M. (2026). INTEGRATING IT GOVERNANCE FRAMEWORKS INTO SELF-ASSESSMENT INSTRUMENT DEVELOPMENT: A SYSTEMATIC LITERATURE REVIEW. UKMC International Conference (UKMC IC) Proceedings, 3(1), 251-264. https://doi.org/10.32524/ukmcic.v3i1.2302

Issue

Section

ARTIKEL UKMC IC