AUDIT OPERASIONAL PT.X MENGGUNAKAN FRAMEWORK COBIT 5
TUGAS AKHIR Diajukan Guna Memenuhi Sebagian Persyaratan dalam Rangka Menyelesaikan Pendidikan Sarjana Strata Satu (S1) Program Studi Teknologi Informasi
I Gede Oka Angga Pramana NIM : 1204505013
JURUSAN TEKNOLOGI INFORMASI FAKULTAS TEKNIK UNIVERSITAS UDAYANA 2016
ii
iii
iv
v
ABSTRAK Audit operasional menggunakan COBIT 5 merupakan suatu bentuk audit yang dilakukan auditor untuk mengetahui proses TI yang ada pada perusahaan. Audit ini dilakukan untuk mengetahui tingkat kapabilitas proses TI yang ada pada perusahaan apakah proses TI sudah digunakan secara baik dan optimal berdasarkan COBIT 5 atau belum. Penelitian diawali dengan memetakan tujuan bisnis perusahaan dengan tujuan bisnis menurut COBIT, dilanjutkan dengan memetakan dengan tujuan TI dan didapatkan proses TI. Proses TI yang didapat kemudian di perkecil untuk mendapatkan proses TI yang penting menurut petinggi perusahaan. Proses TI ini kemudian dilakukan audit menurut framework COBIT untuk mengetahui capability levelnya. Proses TI yang dilakukan audit sebanyak 3 proses, dan hasil dari audit adalah proses EDM 01 berada pada level 1 sedangkan harapan berada pada level 2, proses EDM 02 berada pada level 2 sedangkan harapan berada pada level 3, dan proses DSS 02 berada pada level 4 sedangkan harapan berada pada level 3. Penelitian juga membandingkan antara hasil audit(current capability) dengan harapan petinggi perusahaan (expected capability). Gap didapat apabila terdapat perbedaan antara current capability dengan expected capability. Saran dan perbaikan kemudian diberikan terhadap proses yang memiliki gap dengan cara memberikan beberapa perbaikan agar kedepannya proses diharapkan dapat sesuai dengan harapan petinggi perusahaan.
Kata kunci : Audit TI, COBIT 5, Capability Level, Proses TI.
vi
ABSTRACT A performance audit of information technology management is a form of auditor audits conducted to determine the existing IT processes in the company. These audits using COBIT 5 framework for determining the capability of existing IT processes in the company whether IT has been used properly and optimally based on COBIT 5 or not. The study begins by mapping the company's business objectives with business objectives by COBIT, followed by mapping of IT goals and IT processes is obtained. IT processes are obtained and then minimized to obtain critical IT processes according to company officials. IT process is then conducted an audit in accordance with the COBIT framework to determine the capability level. IT processes are audited as much as 3 process, and the results of the audit is the process of EDM 01 are at level 1, while expectations were at level 2, the EDM process 02 are at level 2, while expectations were at level 3, and the DSS 02 is at level 4 while expectations were at level 3. the study also compared the results of the audit (current capability) with the hope of corporate executives (expected capability). Gap obtained if there is a difference between the current capability with the expected capability. Suggestions and improvements are then given to the process that has a gap by providing some improvements to the process in the future is expected to be in line with expectations company officials.
Keywords: IT audit, COBIT 5, capability level, IT process.
vii
KATA PENGANTAR
Puji Syukur dipanjatkan kehadapan Ida Sang Hyang Widhi Wasa/Tuhan Yang Maha Esa karena atas Asung Kerta Wara Nugraha-Nya Tugas Akhir berjudul “Audit Operasional PT.X
Menggunakan Framework COBIT 5” dapat
diselesaikan. Ucapan terimakasih yang sedalam-dalamnya kepada semua pihak yang telah memberikan bantuan dan bimbingan dalam penyusunan tugas akhir ini, terutama kepada: 1.
Ir. Ngakan Putu Gede Suardana, MT, Ph.D. selaku Dekan Fakultas Teknik Universitas Udayana.
2.
Bapak Dr.Eng. I Putu Agung Bayupati, S.T., M.T. selaku Ketua Jurusan Teknologi Informasi Fakultas Teknik Universitas Udayana.
3.
Bapak Dr.Eng. I Putu Agung Bayupati, S.T., M.T. selaku dosen pembimbing I dan Bapak I Made Sukarsa, S.T., M.T. selaku dosen pembimbing II yang telah banyak memberikan bantuan, petunjuk dan bimbingan dalam menyelesaikan laporan Tugas Akhir.
4.
Bapak A. A. Kt Agung Cahyawan Wiranatha, ST.,MT. selaku dosen pembimbing akademik yang telah memberikan bimbingan selama menempuh pendidikan di Jurusan Teknologi Informasi Fakultas Teknik Universitas Udayana.
5.
Kedua Orang Tua dan keluarga yang telah memberikan dan motivasi dalam pembuatan tugas akhir ini.
6.
Teman-teman seperjuangan dan segenanp civitas di Jurusan Teknologi Informasi Universitas Udayana. Penulis menyadari bahwa tugas akhir ini masih jauh dari sempurna. Akhir
kata penulis memohon maaf jika ada kesalahan dalam penulisan tugas akhir ini.
Denpasar, 27 Juni 2016
I Gede Oka Angga Pramana
viii
ix
DAFTAR ISI
PERNYATAAN ........................................................ Error! Bookmark not defined. LEMBAR PENGESAHAN TUGAS AKHIR ........ Error! Bookmark not defined. BERITA ACARA TUGAS AKHIR ........................ Error! Bookmark not defined. KATA PENGANTAR ........................................................................................ viii ABSTRAK ............................................................................................................ vi ABSTRACT ......................................................................................................... vii DAFTAR ISI .......................................................................................................... x DAFTAR GAMBAR .......................................................................................... xiii DAFTAR TABEL .............................................................................................. xiv BAB I ......................................................................... Error! Bookmark not defined. 1.1 Latar Belakang ................................................ Error! Bookmark not defined. 1.2 Rumusan Masalah ........................................... Error! Bookmark not defined. 1.3 Batasan Masalah ............................................. Error! Bookmark not defined. 1.4. Tujuan ............................................................. Error! Bookmark not defined. 1.5 Manfaat ........................................................... Error! Bookmark not defined. 1.6 Sistematika Penulisan ..................................... Error! Bookmark not defined. BAB II ....................................................................... Error! Bookmark not defined. 2.1 State of The Art ............................................... Error! Bookmark not defined. 2.2 Latar Belakang Perusahaan ............................. Error! Bookmark not defined. 2.2.1 Sejarah PT.X ....................................... Error! Bookmark not defined. 2.2.2 Visi dan Misi Perusahaan .................... Error! Bookmark not defined. 2.2.3 Struktur Perusahaan............................. Error! Bookmark not defined. 2.2.4 Bisnis Proses PT.X .............................. Error! Bookmark not defined. 2.2.5 Bisnis Proses Manajemen Produksi Komunikasi Data PT.X ...... Error! Bookmark not defined. 2.2.6 Bisnis Proses Aktivasi Komunikasi DataError! defined.
Bookmark
not
2.2.7 Bisnis Proses Preventive MaintenanceError! Bookmark not defined. 2.3 Metode Penelitian ........................................... Error! Bookmark not defined. 2.3.1 Metode Penelitian Kuantitatif ............. Error! Bookmark not defined. 2.3.2 Metode Penelitian Kualitatif ............... Error! Bookmark not defined. 2.4 Metode Pengumpulan Data ............................. Error! Bookmark not defined.
x
2.4.1 Angket (Questionnare) ........................ Error! Bookmark not defined. 2.4.2 Wawancara(Interview) ........................ Error! Bookmark not defined. 2.4.3 Pengamatan (Obervation) ................... Error! Bookmark not defined. 2.4.4 Ujian(Test)........................................... Error! Bookmark not defined. 2.4.5 Dokumentasi........................................ Error! Bookmark not defined. 2.5 Audit Sistem Informasi ................................... Error! Bookmark not defined. 2.6 Model Framework TI ...................................... Error! Bookmark not defined. 2.6.1 ITIL ..................................................... Error! Bookmark not defined. 2.6.2 COSO .................................................. Error! Bookmark not defined. 2.6.3 ISO ...................................................... Error! Bookmark not defined. 2.6.4 CMMI (Capability Maturity Model Integration)Error! not defined.
Bookmark
2.7 COBIT 5 .......................................................... Error! Bookmark not defined. 2.7.1 Sejarah Perkembangan COBIT ........... Error! Bookmark not defined. 2.7.2 Definisi COBIT 5 ................................ Error! Bookmark not defined. 2.7.3 Lima Prinsip Dalam Cobit 5 ............... Error! Bookmark not defined. 2.7.4 Model Kapabilitas Dalam COBIT 5.... Error! Bookmark not defined. BAB III ...................................................................... Error! Bookmark not defined. 3.1 Metodologi Penelitian ..................................... Error! Bookmark not defined. 3.2 Studi Kepustakaan .......................................... Error! Bookmark not defined. 3.3 Pemilihan Proses TI ........................................ Error! Bookmark not defined. 3.3.1 Identifikasi Tujuan Bisnis ................... Error! Bookmark not defined. 3.3.2 Identifikasi Tujuan TI.......................... Error! Bookmark not defined. 3.3.3 Identifikasi Proses TI .......................... Error! Bookmark not defined. 3.4.4 Management Awareness ...................... Error! Bookmark not defined. 3.4 Pengumpulan Data .......................................... Error! Bookmark not defined. 3.4.1 Wawancara .......................................... Error! Bookmark not defined. 3.4.2 Kuesioner ............................................ Error! Bookmark not defined. 3.4.3 Komposisi Data Responden ................ Error! Bookmark not defined. 3.5 Pengolahan dan Analisis Data ........................ Error! Bookmark not defined. 3.5.1 Analisis Tingkat Kepentingan Proses TIError! defined. 3.5.2 Rancangan Kuesioner Tingkat KepentinganError! defined.
Bookmark Bookmark
not not
3.5.3 Analisis Capability Level Proses TI .... Error! Bookmark not defined.
xi
3.5.4 Penilaian Capability Level .................. Error! Bookmark not defined. 3.5.5 Rancangan Kuesioner Capability LevelError! defined.
Bookmark
not
3.7 Pengujian data ................................................. Error! Bookmark not defined. 3.8 Analisis Tingkat Kesenjangan (Gap level) ..... Error! Bookmark not defined. 3.9 Analisis Tingkat Kematangan dengan CMMI Error! Bookmark not defined. 3.9.1 Penilaian Tingkat Kematangan CMMIError! Bookmark not defined. 3.10Saran dan Perbaikan ........................................ Error! Bookmark not defined. BAB IV ...................................................................... Error! Bookmark not defined. 4.1 Pemilihan Proses TI ........................................ Error! Bookmark not defined. 4.1.1 Identifikasi Tujuan Bisnis ................... Error! Bookmark not defined. 4.1.2 Identifikasi Tujuan TI.......................... Error! Bookmark not defined. 4.1.3 Identifikasi Proses TI .......................... Error! Bookmark not defined. 4.1.4 Penentuan Responden Tingkat KepentinganError! Bookmark defined.
not
4.1.5 Penentuan Tingkat Kepentingan ......... Error! Bookmark not defined. 4.2 Penentuan Capability Level Proses TI ............ Error! Bookmark not defined. 4.2.1 Hasil Kuesioner Capability Level ....... Error! Bookmark not defined. 4.2.2 Penentuan Target Capability Proses TIError! Bookmark not defined. 4.3 Mengatasi Kesenjangan dari Capability Proses TIError! defined.
Bookmark
not
4.3.1 Rekomendasi Proses EDM 01 ............. Error! Bookmark not defined. 4.3.2 Rekomendasi Proses EDM 02 ............. Error! Bookmark not defined. 4.3.3 Rekomendasi Proses DSS 02 .............. Error! Bookmark not defined. 4.4 Analisis tingkat kematangan (Maturity) dengan CMMIError! Bookmark not defined. 4.4.1 Hasil Tingkat Kematangan EDM 01 (Manajemen Produksi Komunikasi Data) Error! Bookmark not defined. 4.4.2 Hasil Tingkat Kematangan EDM 02 (Provisioning dan Aktivasi Komunikasi Data) .......................................... Error! Bookmark not defined. 4.4.3 Hasil Tingkat Kematangan DSS 02 (Preventive Maintenance Jaringan Akses Pelanggan) ........................................... Error! Bookmark not defined. 4.5 Analisis Perbedaan COBIT dan CMMI .......... Error! Bookmark not defined. BAB V........................................................................ Error! Bookmark not defined. 5.1 Simpulan ......................................................... Error! Bookmark not defined. 5.2 Saran ............................................................... Error! Bookmark not defined.
xii
DAFTAR PUSTAKA ............................................ Error! Bookmark not defined.
DAFTAR GAMBAR
Gambar 2.1 Struktur Organisasi PT.X .................. Error! Bookmark not defined. Gambar 2.2 Bisnis Proses Manajemen Produksi Komunikasi PT.X ........ Error! Bookmark not defined. Gambar 2.3 Bisnis Proses Aktivasi Komunikasi DataError! defined.
Bookmark
not
Gambar 2.4 Preventive Maintenance PT.X ........... Error! Bookmark not defined. Gambar 3.1 Tahapan Penelitian ............................. Error! Bookmark not defined. Gambar 3.2 Contoh kuesioner capability level EDM 01Error! Bookmark not defined.
xiii
DAFTAR TABEL Tabel 2.1 Bisnis Proses pada Lintasarta ................ Error! Bookmark not defined. Tabel 2.2 Bisnis Proses Komunikasi Data ............. Error! Bookmark not defined. Tabel 2.3 Bisnis Proses Aktivasi Komunikasi DataError! defined.
Bookmark
not
Tabel 2.4 Bisnis Proses Preventive Maintenance ... Error! Bookmark not defined. Tabel 3.1 Tujuan Bisnis pada COBIT 5 ................. Error! Bookmark not defined. Tabel 3.2 Tujuan TI Menurut COBIT 5 ................ Error! Bookmark not defined. Tabel 3.3 Pemetaan Tujuan Bisnis dan Tujuan TIError! Bookmark not defined. Tabel 3.4 Pemetaan Tujuan TI dengan Proses TI Error! Bookmark not defined. Tabel 3.5 Deskripsi Serta Tujuan Proses TI .......... Error! Bookmark not defined. Tabel 3.6 Responden Kuesioner Tingkat KepentinganError! defined.
Bookmark
not
Tabel 3.7 Responden Kuesioner Capability Level .. Error! Bookmark not defined. Tabel 3.8 Kuesioner Tingkat Kepentingan ............ Error! Bookmark not defined. Tabel 4.1 Pemetaan Misi Perusahaan dengan Tujuan Bisnis COBIT 5. .. Error! Bookmark not defined. Tabel 4.2 Pemetaan Tujuan Bisnis dengan Tujuan TIError! defined.
Bookmark
not
Tabel 4.3 Tujuan TI yang sesuai dengan tujuan perusahaan.Error! Bookmark not defined. Tabel 4.4 Pemetaan Tujuan TI dengan Proses TI Error! Bookmark not defined. Tabel 4.5 Proses TI pada PT.X ............................... Error! Bookmark not defined. Tabel 4.6 RACI Chart Penentuan Tingkat KepentinganError! Bookmark not defined. Tabel 4.7 Perhitungan Nilai Kuesioner KepentinganError! defined.
xiv
Bookmark
not
Tabel 4.8 Hasil Akhir Kuesioner Tingkat KepentinganError! Bookmark not defined. Tabel 4.9 Perhitungan Nilai Kuesioner KepentinganError! defined.
Bookmark
not
Tabel 4.10 Hasil Akhir kuesioner Tingkat KepentinganError! Bookmark not defined. Tabel 4.11 Hasil Kuesioner Proses EDM 01 .......... Error! Bookmark not defined. Tabel 4.12 Hasil Kuesioner Proses EDM 02 .......... Error! Bookmark not defined. Tabel 4.13 Hasil Kuesioner Proses DSS 02 ............ Error! Bookmark not defined. Tabel 4.14 Tingkat Kesenjangan dari Capability ProsesError! Bookmark not defined.
xv
