The use of Information Systems and Information Technology (IS/IT) is a crucial factor in improving the efficiency and accuracy of retail sector operations. PT XYZ, a retail-level staple goods provider, has implemented IS/IT to support sales recording, inventory management, security, and operational reporting. This study aims to assess the effectiveness, efficiency, security, and compliance of the information system used. The audit was conducted through observation, interviews, document review, and system testing, referring to the COBIT framework and the ISO/IEC 27001 standard. The audit results indicated that the system supported core operational functions, but weaknesses remained, including insufficient system documentation, limited access controls, and suboptimal data security and backup mechanisms. Furthermore, reliance on manual procedures has the potential to lead to errors and slow down service delivery. Therefore, system improvements, strengthening security controls, developing standard operating procedures, and enhancing the competency of human resources and IT infrastructure are needed. This audit is expected to support improved service quality and secure, effective, and sustainable IT governance at PT XYZ.
Copyrights © 2026