Achieving business and IT alignment has become the aspiration of most organizations nowadays. Small and medium enterprises (SMEs) are not an exemption as they are also thriving to survive in competitive market using IT. However, implementing all IT control and management components would be excessive with lack of justifiable cost-benefit for SMEs. A tailored governance system based on specificities of SMEs is necessitated to help the organization focus on its main objectives and strategies. By leveraging COBIT 2019 design toolkit, we support Campus A in establishing a healthy governance and IT management. We conducted both qualitative and quantitative approaches to select relevant governance/ management objectives. The toolkit has been designed with a semi-automated quantitative approach through which users will get a scoring for each objective based on associated value inputted for each design factor. Through series of discussions with the management team, we concluded the governance design and recommended several improvements to increase its capability level, from the current level at 1.05 (initial stage) to the desired level at 2.33 (repeatable stage). Though the toolkit is practical to use, it is also rigid by design with its predefined and protected formula. To some extent, the resulting score or importance level of certain governance/ management objectives is questionable and lack of justification. Flags or indicators to should-have governance/ management objectives regardless of the organization size and type will be useful to prevent omission of essential objectives

Business IT alignment, COBIT 2019, design toolkit, SME, vendor risk, tailored governance system, semi-automated approach, predefined formula, governance/ management objectives

• Diana, S.Kom., M.Sc., PSM I, CDAP, CISA.

• Mahaning Indrawaty Wijaya, S.M.B., M.Comm., CDAP, ITIL, CDVP

• Suzanna, S.Kom., M.MT, CDMS