Effective information technology (IT) governance is a decisive factor for public-sector organizations in aligning IT use with their strategic objectives. However, many institutions have never measured the governance maturity of the application portfolio they operate, so investment and improvement decisions are not evidence-based. This study aims to evaluate the IT governance maturity level of an Indonesian public-sector financing institution (referred to as Institution X) that channels revolving-fund financing to cooperatives and micro, small, and medium enterprises. The evaluation employs the COBIT 4.1 framework, focusing on the Monitor and Evaluate (ME) domain, and the Capability Maturity Model (CMM) as the assessment instrument. Data were collected through a questionnaire survey (15 indicators, 1–5 scale), interviews, observation, and Focus Group Discussion covering 24 active applications out of 46. The results show an average IT governance maturity of 3.75 (SD = 0.53), located at the upper range of level 3 (Defined) toward level 4 (Managed), with 7 applications at level 3, 16 at level 4, and 1 at level 5. The main findings indicate that standard procedures have been defined but are not accompanied by consistent monitoring and measurement, distribution of user manuals and training remains weak, and infrastructure configuration (single-disk VM servers, NAS-based storage) poses service-recovery risks. This study contributes a concise application-level maturity assessment model and improvement recommendations replicable by similar public-sector organizations.
Copyrights © 2026