DEVELOPMENT OF INFORMATION TECHNOLOGY AUDIT PROGRAM FOR CHANGE MANAGEMENT PROCESS AT THE DIRECTORATE OF INFORMATION TECHNOLOGY BANDUNG INSTITUTE OF TECHNOLOGY

• Main Author: Ivenita Mokalu, Gisela
• Format: Final Project
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/73935
• Institution: Institut Teknologi Bandung

Information Technology (IT) plays a crucial role in enhancing business process efficiency at Bandung Institute of Technology (ITB). The implementation of IT must be supported by IT governance in carrying out business processes. The evolving needs of business processes require various changes in IT services. Effective and efficient change management can maximize the number of successful service changes by ensuring that risks are properly assessed. To ensure effective and efficient IT change management, an audit needs to be conducted. The first stage in the audit process is planning. The key component in audit planning is an audit program that outlines the procedures for conducting the audit. Therefore, this Final Project proposes an IT audit program for the change management process at the Directorate of Information Technology, ITB, based on the ideal conditions according to applicable standards and regulations. The development of the audit program consists of determining the audit subjects, audit objectives, audit scope, pre-audit planning, determining audit procedures and data collection, validating the audit program, and improving the audit program. The referenced standards and regulations include COBIT 2019, ITIL 4, ITB Rector's Decision on IT Policies and Regulations, ITB Rector's Regulation on Data Governance, ITB Rector's Regulation on Domain Management, IT Directorate's SOP on IT Change Management, Republic of Indonesia Government Regulation No. 65 of 2013 on ITB Statute, and Rector's Regulation on Internal Control and Supervision System of Bandung Institute of Technology as a State Legal Entity. The results of the IT audit program for the change management process consist of IT as an Organizational Member, Governance, IT Infrastructure, Data, and Processes. The audit program has undergone validity testing by expert assessment and has been deemed suitable by experts.