Claim Missing Document
Check
Articles

Found 2 Documents
Search
Journal : INSTALL: Information System and Technology Journal

Implementation of COBIT Framework in Improving IT Governance at Indomaret Daud, Excel; Pepriyani, Nor Lintang; Adriani, Adella; Sabrila, Trifebi Shina; Latif, Abdul; Lindawati, Ratna
INSTALL: Information System and Technology Journal Vol 1 No 3 (2024): INSTALL : Information System and Technology Journal
Publisher : LPPM Universitas Sari Mulia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33859/install.v1i3.798

Abstract

This study aims to evaluate the implementation of the COBIT 5 framework in improving information technology governance at Indomaret, one of the largest minimarket chains in Indonesia. COBIT is an internationally recognized framework for IT management and governance that provides structured guidance to ensure that information technology supports business objectives and delivers optimal value. The method used in this study is a case study with a qualitative approach. Dara were collected through in-depth interviews with relevant staff at Indomaret, as well as document analysis and direct observation. The data analysis was conducted to evaluate the alignment between IT processes in Indomaret with best principles and practices proposed by COBIT, specifically in the EDM02 (Ensure Benefits Delivery) and APO06 (Manage Budget and Cost) domains. The evaluation results indicated a gap of 1.39 in the EDM02 domain and 1.15 in the APO06 domain. With an overall average gap score at level 4, it means that at Indomaret, in the EDM02 and APO06 process domains, the findings show that the processes are managed, and the results are determined, controlled, and maintained. For future research, additional process domains in both the governance and management areas could be included, allowing for a more comprehensive audit process using the COBIT framework.
Simulation of End-to-End Secure Channels in Digital Payment Systems Using TLS 1.3 Combined with Client-Side AES-GCM Encryption Neta Yahu, Mikhael; Septian, Daniel Marvelino; Daud, Excel
INSTALL: Information System and Technology Journal Vol 2 No 3 (2025): INSTALL : Information System and Technology Journal
Publisher : LPPM Universitas Sari Mulia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33859/install.v2i3.1002

Abstract

The rapid growth of digital payment systems and online transaction services has intensified the need for stronger mechanisms to protect sensitive user data from interception, leakage, and unauthorized access. Although Transport Layer Security (TLS) is widely adopted to secure communication channels, it primarily protects data during transmission and does not fully address risks arising from compromised servers or application-layer vulnerabilities. This study proposes and simulates an end-to-end secure channel architecture that integrates client-side encryption using the Advanced Encryption Standard in Galois/Counter Mode (AES-GCM) with the TLS 1.3 protocol to provide layered security. A web-based simulation was developed using HTML, CSS, and JavaScript with the Web Crypto API to illustrate the complete workflow, including client-side key generation, application-layer encryption, TLS 1.3 handshake, secure channel establishment, transport-layer encryption, and server-side processing. The simulation also implements a zero-knowledge mode, ensuring that the server does not possess the client-side encryption key and therefore cannot decrypt sensitive data at the application layer. The experimental results indicate that separating cryptographic keys between the application layer and the transport layer significantly enhances confidentiality and minimizes the impact of key compromise or server-side breaches. Furthermore, the visualization provided by the simulation helps clarify the interaction between client-side encryption and TLS 1.3 mechanisms, making it a useful educational and analytical tool. Overall, this study demonstrates that combining AES-GCM-based client-side encryption with TLS 1.3 offers a robust and practical approach for securing digital payment systems and other applications requiring high levels of data protection.