Claim Missing Document
Check
Articles

Found 2 Documents
Search
Journal : Applied Information System and Management

Risk Management in IT Projects for Digital Banking: A Case Study of an Indonesian State-Owned Bank Wibowo, Aji Prastio; Raharjo, Teguh; Trisnawaty, Ni Wayan; Muhamad, Gilang Aulia; Faridy, Azka
Applied Information System and Management (AISM) Vol. 8 No. 2 (2025): Applied Information System and Management (AISM)
Publisher : Depart. of Information Systems, FST, UIN Syarif Hidayatullah Jakarta

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.15408/aism.v8i2.46123

Abstract

The increasing use of information technology in the banking industry has made it more difficult to manage risks in the digital projects of state-owned banks. This study aims to examine the risk management processes of a state-owned mortgage bank in Indonesia and how it manages the information technology risks in the digital banking project lifecycle. This qualitative research is based on content analysis of forty-three risk assessment documents, with thematic coding using ATLAS.ti. This research was further enriched through expert interviews and a quantitative survey conducted among 38 project stakeholders. Risks are defined in a hierarchical classification and mapped to project phases using the PMBOK. Identifying operational, compliance, and third-party risks is most pertinent in the execution and post-implementation phases. Additionally, there are pressing concerns, such as the potential for cyber threats, non-compliance with applicable laws and regulatory frameworks, integration issues, over-reliance on service vendors, and systemic dependence on external vendors. In this case, the study integrates PMBOK, ISO 31000:2018, and the insights of seasoned practitioners to create a singular holistic mitigation strategy. It comprises a risk prioritization matrix, phased actionable treatment plans for each defined stage, and robust governance and responsiveness enhancement mechanisms for high-risk reactive IT environments. The guidance is triangulated with sector-specific intelligence, thereby underscoring proactive risk governance through communication, vendor due diligence, dynamic control, and real-time accountability across boundaries scaffolding. Further single-initiative case studies, multi-institutional case studies, evolving longitudinal risk studies, and the application of AI and blockchain for predictive and autonomous risk steering in digital finance could enhance and refine this work. 
An Integrated IT Governance and Project Management Framework for Resource-Constrained Universities in Timor-Leste Trisnawaty, Ni Wayan; Raharjo, Teguh; Soares, Domingas
Applied Information System and Management (AISM) Vol. 8 No. 2 (2025): Applied Information System and Management (AISM)
Publisher : Depart. of Information Systems, FST, UIN Syarif Hidayatullah Jakarta

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.15408/aism.v8i2.46689

Abstract

This study designed and validated an integrated information technology governance (ITG) and project management strategy for resource-constrained universities in developing countries. A mixed-methods approach combined a Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA)-guided systematic review, three criterion-based elite interviews at a private university in Timor-Leste, and expert validation to refine the model. The framework operationalized ISO/IEC 38500 principles as governance guardrails across the PMBOK 7th Edition performance domains, linking decision rights, escalation paths, and conformance duties to day-to-day delivery routines. Findings indicated that the integration clarified accountability, mitigated the mum effect through time-boxed escalation and red-flag protocols, supported phased low-bandwidth service deployment, and aligned institutional priorities with budget and capacity constraints. This study introduced a governance–execution fit mechanism that made governance actionable in resource-constrained higher education settings. It also provided policy recommendations for university leaders and regulators: formalize an IT Steering Committee (ITSC) by decree, embed ISO/IEC 38500 guardrails into portfolio and project life cycles, mandate lightweight governance artifacts (charters, responsible–accountable–consulted–informed (RACI) matrices, risk registers, and decision logs), and adopt phase-gated funding with targeted capability building. These measures strengthen feasibility, scalability, and strategic adoption across comparable contexts.