Ambidextrous Cloud Governance Approach to Enhance TelCo's Digital Transformation Using COBIT 2019 Traditional and DevOps

Novi Andriani; Rahmat Mulyana; Rd. Rohmat Saedudin

doi:10.59395/ijadis.v6i2.1398

Authors

Novi Andriani Information System, Faculty of Industrial Engineering, Telkom University, Indonesia
Rahmat Mulyana Department of Computer and Systems Sciences (DSV), Stockholm University, Sweden https://orcid.org/0000-0002-5074-3916
Rd. Rohmat Saedudin Information System, Faculty of Industrial Engineering, Telkom University, Indonesia https://orcid.org/0000-0001-6914-9514

DOI:

https://doi.org/10.59395/ijadis.v6i2.1398

Keywords:

Ambidextrous Cloud Governance, Digital Transformation, COBIT 2019, DevOps, DSS04, Design Science Research, Case Study, Telecommunication

Abstract

Cloud computing plays a crucial role in accelerating digital transformation within the telecommunications sector by enhancing operational efficiency, scalability, and service innovation. However, TelCo faces difficulties in aligning its cloud adoption with effective governance, particularly in ensuring continuous service delivery and resilience. This study proposes a cloud governance framework based on the ambidextrous integration of COBIT 2019 Traditional components and DevOps Focus Area. Employing a Design Science Research methodology, data were collected through semi-structured interviews guided by a structured questionnaire and triangulated with internal documents until data saturation was achieved. Governance and Management Objectives were prioritized using the ambidextrous COBIT 2019 lens, supported by regulatory guidelines from the SOE Minister No. PER-2/MBU/03/2023 and the ICT Minister No. 5/2021, as well as relevant prior studies. The analysis highlighted DSS04: Managed Continuity as the most critical focus area. A capability gap assessment identified vacant leadership roles, overlapping responsibilities, and the lack of Infrastructure as Code (IaC) implementation in cloud services. Recommended improvements include formal assignment of leadership positions, clarification of IT responsibilities, and the adoption of IaC practices. These enhancements are expected to raise the capability maturity of DSS04 from 3.25 to 3.87, representing a 0.62 increase in business continuity readiness. This study contributes to research by extending ambidextrous governance theory to cloud continuity management and provides practical guidance for telecommunications providers seeking to improve operational resilience and manage risks effectively in their digital transformation efforts.

1594 647

Downloads

Download data is not yet available.

Author Biography

Rahmat Mulyana, Department of Computer and Systems Sciences (DSV), Stockholm University, Sweden

Rahmat Mulyana is a PhD researcher and lecturer at the Department of Computer and Systems Sciences (DSV), Stockholm University, Sweden. His research interests include IT governance, digital transformation, IT and digital risk management, audit and assurance, enterprise architecture, and information security and privacy management.

References

[1] R. Mulyana, L. Rusu, dan E. Perjons, “IT Governance Mechanisms that Influence Digital Transformation: A Delphi Study in Indonesian Banking and Insurance Industry,” Pacific Asia Conf. Inf. Syst. (PACIS), AI-IS-ASIA, hal. 1–16, 2022, [Daring]. Tersedia pada: https://aisel.aisnet.org/pacis2022/267/

[2] C. Gong dan V. Ribiere, “Developing a unified definition of digital transformation,” Technovation, vol. 102, no. July 2020, hal. 102217, Apr 2021, doi: 10.1016/j.technovation.2020.102217.

[3] R. Mulyana, L. Rusu, dan E. Perjons, “How Hybrid IT Governance Mechanisms Influence Digital Transformation and Organizational Performance in the Banking and Insurance Industry of Indonesia,” in Proceedings of the 31st International Conference on Information Systems Development, Okt 2023. doi: 10.62036/ISD.2023.33.

[4] Hamed Taherdoost, “An Overview of Trends in Information Systems: Emerging Technologies that Transform the Information Technology Industry,” Cloud Comput. Data Sci., vol. 4, no. 1, hal. 1–16, Agu 2022, doi: 10.37256/ccds.4120231653.

[5] A. H. M. Jafor, K. S. Azim, M. A. Hossain, A. U. Shayed, N. A. Nikita, dan O. U. Khan, “The Evolution of Cloud Computing & 5G Infrastructure and its Economical Impact in the Global Telecommunication Industry,” Adv. Int. J. Multidiscip. Res., vol. 2, no. 5, hal. 1–19, Sep 2024, doi: 10.62127/aijmr.2024.v02i05.1100.

[6] Perdly Setiawan, Raihan Shidqi Putrandi, dan Imelda Imelda, “Systematic Literature Review of Cloud Computing Adoption,” INOVTEK Polbeng - Seri Inform., vol. 9, no. 2, hal. 578–586, Okt 2024, doi: 10.35314/74fzvf09.

[7] B. Thuraisingham, “Cloud governance,” IEEE Int. Conf. Cloud Comput. CLOUD, vol. 2020-Octob, hal. 86–90, 2020, doi: 10.1109/CLOUD49709.2020.00025.

[8] R. Mulyana, L. Rusu, dan E. Perjons, “IT governance mechanisms influence on digital transformation: A systematic literature review,” 27th Annu. Am. Conf. Inf. Syst. AMCIS 2021, hal. 0–10, 2021.

[9] BUMN, “Peraturan Menteri Badan Usaha Milik Negara Nomor Per-2/mbu/03/2023 Tahun 2023 Tentang Pedoman Tata Kelola dan Kegiatan Korporasi Signifikan Badan Usaha Milik Negara,” 2023. [Daring]. Tersedia pada: https://www.peraturan.go.id/id/permen-bumn-no-per-2-mbu-03-2023-tahun-2023

[10] ISACA, COBIT 2019 Framework - Introduction and Methodology. 2019. [Daring]. Tersedia pada: https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004Ko9cEAC

[11] Sekhar Chittala, “AIOps and DevOps : Catalysts of Digital Transformation in the Age of Automated Operations,” Int. J. Sci. Res. Comput. Sci. Eng. Inf. Technol., vol. 10, no. 6, hal. 155–166, Nov 2024, doi: 10.32628/CSEIT24106163.

[12] R. Mulyana, L. Rusu, dan E. Perjons, “Key Ambidextrous IT Governance Mechanisms Infuence on Digital Transformation and Organizational Performance in Indonesian Banking and Insurance,” Pacific Asia Conf. Inf. Syst., no. July, hal. 1–16, 2024, [Daring]. Tersedia pada: https://aisel.aisnet.org/pacis2024

[13] M. Kizito, “Ambidextrous IT Governance Enactment in Healthcare: A Comparison between the Swedish and Ugandan Setting,” in Proceedings of the Annual Hawaii International Conference on System Sciences, 2020, hal. 5573–5582. doi: 10.24251/HICSS.2020.686.

[14] R. Mulyana, L. Rusu, dan E. Perjons, “Key ambidextrous IT governance mechanisms for successful digital transformation: A case study of Bank Rakyat Indonesia (BRI),” Digit. Bus., vol. 4, no. 2, hal. 100083, 2024, doi: 10.1016/j.digbus.2024.100083.

[15] D. A. Permana, R. Fauzi, dan R. Mulyana, “Perancangan Tata Kelola Teknologi Informasi Untuk Transformasi Digital di Industri Perbankan Menggunakan Framework Cobit 2019 Domain Align, Plan, And Organise : Studi Kasus Di Bank XYZ,” e-Proceeding Eng., vol. 8, no. 5, hal. 1–8, 2021.

[16] O. T. Poetry, R. Fauzi, dan R. Mulyana, “Perancangan Tata Kelola Teknologi Informasi Untuk Transformasi Digital Di Industri Perbankan Menggunakan Framework Cobit 2019 Dengan Domain Deliver, Service and Support: Studi Kasus Bank Xyz It Governance Design for Digital Transformation in Banking Indus,” e-Proceeding Eng., vol. 8, no. 5, hal. 9684–9692, 2021.

[17] D. Andika, R. Mulyana, dan L. Ramadhani, “IT Governance Design Based on COBIT 2019 SME Focus Area for UMKM BPRBCo Digital Transformation,” J. Inf. Syst. Res., vol. 6, no. 1, hal. 205–218, Okt 2024, doi: 10.47065/josh.v6i1.5905.

[18] A. Viamianni, R. Mulyana, dan F. Dewi, “COBIT 2019 INFORMATION SECURITY FOCUS AREA IMPLEMENTATION FOR REINSURCO DIGITAL TRANSFORMATION,” JIKO (Jurnal Inform. dan Komputer), vol. 6, no. 2, hal. 106–115, Agu 2023, doi: 10.33387/jiko.v6i2.6366.

[19] Achmad Fadhli Satriadi, R. Mulyana, dan R. Fauzi, “AGILE IT SERVICE MANAGEMENT DESIGN OF FINTECHCO DIGITALIZATION BASED ON COBIT 2019 DEVOPS FOCUS AREA,” J. Tek. Inform., vol. 4, no. 5, hal. 1165–1177, Okt 2023, doi: 10.52436/1.jutif.2023.4.5.1304.

[20] ISACA, “COBIT Focus Area: DevOps.” [Daring]. Tersedia pada: https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004Ko9dEAC

[21] D. Tang, “WHAT IS DIGITAL TRANSFORMATION?,” EDPACS, vol. 64, no. 1, hal. 9–13, Jul 2021, doi: 10.1080/07366981.2020.1847813.

[22] C. Tanushev, “Digital Transformation: The Impact on Corporate Strategy,” Econ. Altern., vol. 28, no. 3, hal. 383–404, Sep 2022, doi: 10.37075/EA.2022.3.01.

[23] R. Mulyana, “IT Governance Influence on Digital Transformation,” Stockholm University, 2025. [Daring]. Tersedia pada: http://urn.kb.se/resolve?urn=urn:nbn:se:su:diva-242507

[24] O. Yusuf, “Emerging Technologies To Enhance Optimization In The Process Industries,” J. Artif. Intell. Gen. Sci. ISSN3006-4023, vol. 1, no. 1, hal. 188–199, Jan 2024, doi: 10.60087/jaigs.v1i1.153.

[25] I. Bojanova, R. Kuhn, dan J. Voas, “Emerging Disruptive Technologies,” Computer (Long. Beach. Calif)., vol. 56, no. 12, hal. 27–30, Des 2023, doi: 10.1109/MC.2023.3314933.

[26] Ridham Singh Bhatia, Nishant Yadav, dan Saarthak Chawla, “Exploring Cloud Computing,” Int. J. Adv. Res. Sci. Commun. Technol., hal. 404–408, Apr 2024, doi: 10.48175/IJARSCT-17564.

[27] X. Zhiqun, C. Duan, H. Zhiyuan, dan S. Qunying, “Emerging of Telco Cloud,” China Commun., vol. 10, no. 6, hal. 79–85, Jun 2013, doi: 10.1109/CC.2013.6549261.

[28] ISACA, “ISACA GLOSSARY,” in ISACA, hal. 1–159. [Daring]. Tersedia pada: https://www.isaca.org/-/media/files/isacadp/project/isaca/resources/glossary/glossary.pdf

[29] T.-F. Fortis dan V. I. Munteanu, “From Cloud Management to Cloud Governance,” hal. 265–287, 2014, doi: 10.1007/978-1-4471-6452-4_11.

[30] ISACA, COBIT 2019 Implementation Guide: Implementing and Optimizing an Information and Technology Governance Solution. 2018. [Daring]. Tersedia pada: https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004Ko9aEAC

[31] E. Simmon, “Evaluation of cloud computing services based on NIST SP 800-145,” NIST, Gaithersburg, MD, Feb 2018. doi: 10.6028/NIST.SP.500-322.

[32] “ISO/IEC 27017.” [Daring]. Tersedia pada: https://www.iso27001security.com/html/27017.html

[33] M. Chauhan dan S. Shiaeles, “An Analysis of Cloud Security Frameworks, Problems and Proposed Solutions,” Network, vol. 3, no. 3, hal. 422–450, Sep 2023, doi: 10.3390/network3030018.

[34] Y. Al-Ashmoery dkk., “Impact of Integrating Lean, Agile, and DevOps with ITIL4 Framework for Modern IT Service Management,” in 2024 1st International Conference on Emerging Technologies for Dependable Internet of Things (ICETI), IEEE, Nov 2024, hal. 1–8. doi: 10.1109/ICETI63946.2024.10777262.

[35] P. Desfray dan G. Raymond, “Chapter 1 - TOGAF®: General Presentation,” in The MK/OMG Press, P. Desfray dan G. B. T.-M. E. A. with T. Raymond, Ed., Boston: Morgan Kaufmann, 2014, hal. 1–24. doi: https://doi.org/10.1016/B978-0-12-419984-2.00001-X.

[36] S. Naik, “Cloud-Based Data Governance: Ensuring Security, Compliance, and Privacy,” Eastasouth J. Inf. Syst. Comput. Sci., vol. 1, no. 01, hal. 69–87, Agu 2023, doi: 10.58812/esiscs.v1i01.452.

[37] A. R. Hevner, S. T. March, J. Park, dan S. Ram, “Design Science in Information Research,” Des. Sci. IS Res. MIS Q., vol. 28, no. 1, hal. 75–105, 2004.

[38] R. Yin, “How to do Better Case Studies: (With Illustrations from 20 Exemplary Case Studies),” in The SAGE Handbook of Applied Social Research Methods, 2455 Teller Road, Thousand Oaks California 91320 United States: SAGE Publications, Inc., 2009, hal. 254–282. doi: 10.4135/9781483348858.n8.

[39] P. Johannesson dan E. Perjons, An Introduction to Design Science. Cham: Springer International Publishing, 2014. doi: 10.1007/978-3-319-10632-8.

[40] M. Denscombe, The Good Research Guide for small-scale social research projects, 4 ed. New York, USA, 2010.

[41] P. Fusch dan L. Ness, “Are We There Yet? Data Saturation in Qualitative Research,” Qual. Rep., vol. 20, no. 9, hal. 1408–1416, Sep 2015, doi: 10.46743/2160-3715/2015.2281.

[42] ISACA, “COBIT 2019 Framework: Governance & Management Objectives.” [Daring]. Tersedia pada: https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004Ko9ZEAS

[43] KOMINFO, “Peraturan Menteri Komunikasi dan Informatika Nomor 5 Tahun 2021 tentang Penyelenggaraan Telekomunikasi,” 2021. [Daring]. Tersedia pada: https://jdih.komdigi.go.id/produk_hukum/view/id/768/t/peraturan+menteri+komunikasi+dan+informatika+nomor+5+tahun+2021

[44] J. Song, A. Martens, dan M. Vanhoucke, “Using Earned Value Management and Schedule Risk Analysis with resource constraints for project control,” Eur. J. Oper. Res., vol. 297, no. 2, hal. 451–466, Mar 2022, doi: 10.1016/j.ejor.2021.05.036.