IT Risk Assessment at City Medical Partners using COBIT 4.1 Framework

This report analyzes the IT-related risk assessment at City Medical Partners using COBIT 4.1 framework and suggests regulatory actions for better administration and risk management.

CITY MEDICAL PARTNERS
CASE STUDY

This report will analyze the IT-related
risk assessment at City Medical
Partners, which is situated in New
Zealand using COBIT 4.1 framework.
The objective of this report is to identify
the IT risk parameters of the hospital
and suggest regulatory actions, which
will be beneficial for the organizations.

Why COBIT is Implemented?
• To analyze the risk factors in an
organization and how to cop with
them.
• How to implement IT based
solution for better administration
and risk management.
• Increase knowledge regarding IT
based solutions among
employees

Objective of COBIT Analysis in City Medical Partners
Organization
• To give reasonable conformation that
future objectives can be achieved and
any undesirable event can be predicted
successful and can be prevented in time.
• The company policies, practices, and
organizational formation is reviewed and
renewed.
• Identifying certain control objectives do
exist in IT based governance system,
which are helpful to build sustainable
administration.

Requirement Analysis Based on COBIT 4.1
• Communication between administration
and other staffs of the hospital is
important
• Strong IT based HR department is
required
• Strong IT risk assessment team is
required
• Secure risk management policy should be
implemented
• Regular training on Regulatory laws is
required
• Firm communication with health
insurance providers is important

Planning Based on COBIT 4.1 Framework
• High Service Level IT based framework.
• Prepare the system in a way that there
should be no lag.
• News on recent trends and knowledge of
medical field around the glob must be
recorded.
• High level system security design.
• Regular training on IT based system and
medical regulations for doctors and nurses.
• Strong IT department.
• Patient-friendly environment in the
hospital.

References
Amid, A., & Moradi, S. (2013). A Hybrid Evaluation Framework of CMM and COBIT for Improving the
Software Development Quality. Journal of Software Engineering and Applications, 6(05), 280.
Andry, J. F., & Hartono, H. (2017). Performance Measurement of IT Based on COBIT Assessment: A
Case Study. Jurnal Sistem Informasi Indonesia, 2(1).
Batenburg, R., Neppelenbroek, M., & Shahim, A. (2014). A maturity model for governance, risk
management and compliance in hospitals. Journal of Hospital Administration, 3(4), 43.
Božić, V. (2012, June). Risk management in informatization. In Central European Conference on
Information and Intelligent Systems Pg (pp. 337-493).
Khther, R. A., & Othman, M. (2013). Cobit framework as a guideline of effective it governance in higher
education: a review. International Journal of Information Technology Convergence and
Services, 3(1), 21.
Krisanthi, G. T., Sukarsa, I. M., & Bayupati, I. P. A. (2014). Governance audit of application
procurement using COBIT framework. Journal of Theoretical and Applied Information
Technology, 59(2), 342-351.
Latif, A. A., & Hanifi, N. (2013). Analyzing IT Function Using COBIT 4.1–A Case Study of Malaysian
Private University. Journal of Economics, Business and Management, 1(4), 406-408.
Mangalaraj, G., Singh, A., & Taneja, A. (2014). IT governance frameworks and COBIT-a literature

Othman, M., Ahmad, M. N., Suliman, A., Arshad, N. H., & MARA, N. (2013). Towards COBIT-based
Framework to Govern Flood Management. In PACIS (p. 118).
Pasquini, A., & Galiè, E. (2013). COBIT 5 and the Process Capability Model. Improvements Provided for IT
Governance Process. Proceedings of FIKUSZ, 13, 67-76.
Putri, M. A., Lestari, V. A., & Aknuranda, I. (2017, January). Audit of Information Technology
Governance Using COBIT 4.1: Case Study in PT. XY. In Int. Conf. Ind. Internet Things (ICIIOT),
Bandung, Indonesia (pp. 1-7).
Ramadhani, D. P., Kurniati, A. P., & Maharani, W. (2013). IT governance analysis of XYZ hospital based
on COBIT 4.1. In The Proceedings of The 7th international conference on information and communication
technology and systems (ICTS).
Sadikin, M., Hardi, H., & Haji, W. H. (2014). IT governance self assessment in higher education Based on
COBIT case study: University of Mercu Buana. Journal of Advanced Management Science Vol, 2(2).
Surbakti, H. (2014). Cobit 4.1: A Maturity Level Framework For Measurement of Information System
Performance (Case Study: Academic Bureau at Universitas Respati Yogyakarta). International Journal
of Engineering, 3(8).
TARIQ, M. I., HAQ, D. I. U., & IQBAL, J. (2013). SLA Based Information Security Metric for Cloud
Computing from COBIT 4.1 Framework. International Journal of Computer Networks and Communications
Security, 1(3), 95-101.
Zhang, S., & Le, F. H. (2013). An Examination of the Practicability of COBIT Framework and the Proposal
of a COBIT-BSC Model. Journal of Economics, 1, 5.

Thank You