IT security governance evaluation with use of COBIT 5 framework: A case study on UIN Syarif Hidayatullah library information system

The purpose of this study was to evaluate the application system TULIS in the Main Library of UIN Syarif Hidayatulllah Jakarta by using COBIT 5 framework focuses on the process of managing security (APO13) and managed security services and to know the gap and provide recommendations to top management of the Library. This study used Likert scale calculations. The results of this study are as score value for APO13 was 0.65 and for DSS05 was 0.87 which indicated that both were in the level of capability 1 (Performed Process) but security governance standard has not been well implemented yet. Moreover, value for to beAPO13 was 1.65 and DSS05 was 0.87 which indicated that both were in the capability level 2. Besides upgrading the system, having high standard security policy were among recommendations to overcome the problems. Firewall and SSL (Secure Socket Layer) needed to be implement into the system to protect any attacks.