Risk Assessment Analysis on Mobile Banking Using Cobit 5 Framework

In general, public or private organizations or companies have used information-based technology as a support to improve business performance to be more effective and efficient in order to achieve a company's business goals. Banking companies include companies that use information technology such as Mobile Banking in their services. Mobile banking is a banking facility or service using mobile communication tools such as mobile phones, with the provision of facilities for banking transactions through mobile applications. Even though they have used a good SOP (Standard Operating Procedure), there are still many obstacles that occur, especially system problems and human errors. This can result in a high risk if it occurs continuously and will be fatal to the company's business processes. Therefore, COBIT 5 can be used as a benchmark for the IT assessment process on local bank mobile banking services. The purpose of the study is to determine the level of capability and strategy for improving risk management. The method used in this study is to focus on IT risk management with the COBIT 5 framework in the Evaluate Direct Monitoring (EDM) 3 domain, Align Plain Organize (APO) 12. From the results of the analysis, the calculation of the capability level is at Level 1 Performed Process with a score of 82.04%, thus the status has evidence as well as a systematic approach and this achievement is obtained significantly through the assessment of process attributes.