Ahriz, S., El Yamami, A., Mansouri, K. and Qbadou, M. (2018), “Cobit 5-based approach for IT project portfolio management: application to a Moroccan university”, International Journal of Advanced Computer Science and Applications, Vol. 9 No. 4, pp. 88-95, doi: 10.14569/IJACSA.2018.090416.
Almeida, R., Souza Neto, J. and Mira da Silva, M. (2018), “Using analytic hierarchy process for COBIT 5 process prioritization”, in 24th Americas Conference on Information Systems, Los Angeles, USA.
Behzadian, M., Otaghssara, S. K., Yazdani, M. and Ignatius, J. (2012), “A state-of-the-art survey of TOPSIS applications”, Expert Systems with Applications, Vol. 39 No. 17, pp. 13051-13069, doi: 10.1016/j.eswa.2012.05.056.
De Haes, S., Van Grembergen, W., Joshi, A. and Huygh, T. (2019), Enterprise governance of information technology: achieving alignment and value in digital organizations, Springer International Publishing, New York, NY.
Emovon, I. and Oghenenyerowho, O. S. (2020), “Application of MCDM method in material selection for optimal design: a review”, Results in Materials, Vol. 7, p. 100115, doi: 10.1016/j.rinma.2020.100115.
Fasihuddin, H., Alharbi, S., Alshehri, A., Alzahrani, A. and Fatani, H. (2022), “Measuring the maturity of information technology governance based on COBIT”, Romanian Journal of Information Technology & Automatic Control, Vol. 32 No. 2, pp. 65-78, doi: 10.33436/v32i2y202205.
Febriana, H., Ginting, D. S. B. and Manik, F. Y. (2022), “The applied approach impact information security for government and company (a review)”, Data Science: Journal of Computing and Applied Informatics, Vol. 6 No. 1, pp. 45-54, doi: 10.32734/jocai.v6.11-7935.
Franek, J. and Kresta, A. (2014), “Judgment scales and consistency measure in AHP”, Procedia Economics and Finance, Vol. 12, pp. 164-173, doi: 10.1016/S2212-5671(14)00332-3.
Ghelani, D., Hua, T. K. and Koduru, S. K. R. (2022), “Cyber security threats, vulnerabilities, and security solutions models in banking”, Authorea Preprints, doi: 10.22541/au.166385206.633111335/v1.
Ginting, G., Fadlina, M., Siahaan, A. P. U. and Rahim, R. (2017), “Technical approach of TOPSIS in decision making”, International Journal of Recent Trends in Engineering, Vol. 3 No. 8, pp. 58-64.
Gorry, G. A. and Scott Morton, M. S. (1971), “A framework for management information systems”, Sloan Management Review, Vol. 13 No. 1, pp. 55-70.
Harguem, S., Boubaker, K. B. and Echatti, H. (2022), “Information technology governance in the Tunisian banking industry: an exploratory study”, Academic Journal of Interdisciplinary Studies, Vol. 11 No. 3, pp. 121-133, doi: 10.36941/ajis-2022-0072.
Hwang, C. L. and Yoon, K. (1981), “Multiple attribute decision making”, in Wallenius, J. (Ed.), Lecture Notes in Economics and Mathematical Systems, Berlin, pp. 58-191.
ISACA (2007), COBIT 4.1: framework, control objectives, management guidelines, maturity models, IT Governance Institute, Schaumburg, USA.
ISACA (2018), COBIT 2019 framework: governance and management objectives, IT Governance Institute, Schaumburg, USA.
Joshi, A., Benitez, J., Huygh, T., Ruiz, L. and De Haes, S. (2022), “Impact of IT governance process capability on business performance: theory and empirical evidence”, Decision Support Systems, Vol. 153, p. 113668, doi: 10.1016/j.dss.2021.113668.
Kori, D. and Naik, R. (2023), “Information security awareness among postgraduate students: a study of Mangalore University”, in Holland, B. J. (Ed.), Handbook of Research on Technological Advances of Library and Information Science in Industry 5.0, IGI Global, Pennsylvania, USA, pp. 270-286, doi: 10.4018/978-1-6684-4755-0.ch014.
Makhsud, U. (2021), “Practical security management”, International Journal of Academic Engineering Research (IJAER), Vol. 5 No. 1, pp. 71-74.
Malatji, M. (2023), “Management of enterprise cyber security: a review of ISO/IEC 27001: 2022”, in 2023 International Conference on Cyber Management and Engineering (CyMaEn), Bangkok, Thailand, pp. 117-122, doi: 10.1109/CyMaEn57228.2023.10051114.
Nugroho, H. (2019), “A review on information system audit using COBIT framework”, International Journal of Applied Information Technology, Vol. 3 No. 2, pp. 46-52, doi: 10.25124/ijait.v3i02.2114.
Rahim, R., Supiyandi, S., Siahaan, A., Listyorini, T., Utomo, A. P., Triyanto, W. A., Irawan, Y., Aisyah, S., Khairani, M. and Sundari, S. (2018), “TOPSIS method application for decision support system in internal control for selecting best employees”, Journal of Physics: Conference Series, Vol. 1028, p. 012052, doi: 10.1088/1742-6596/1028/1/012052.
Rainer, R. K. and Prince, B. (2021), Introduction to information systems, John Wiley & Sons, New York, NY.
Ramanathan, R. (2006), “Data envelopment analysis for weight derivation and aggregation in the analytic hierarchy process”, Computers & Operations Research, Vol. 33 No. 5, pp. 1289-1307, doi: 10.1016/j.cor.2004.09.020.
Rouhani, S. and Ravasan, A. Z. (2014), “A fuzzy TOPSIS based approach for ITSM software selection”, International Journal of IT/Business Alignment and Governance (IJITBAG), Vol. 5 No. 2, pp. 1-26.
Saaty, R. W. (1987), “The analytic hierarchy process—what it is and how it is used”, Mathematical Modelling, Vol. 9 No. 3-5, pp. 161-176, doi: 10.1016/0270-0255(87)90473-8.
Saaty, T. L. (1977), “A scaling method for priorities in hierarchical structures”, Journal of Mathematical Psychology, Vol. 15 No. 3, pp. 234-281, doi: 10.1016/0022-2496(77)90033-5.
Saaty, T. L. (1980), The analytic hierarchy process: planning, priority setting, resource allocation, McGraw Hill, New York, NY.
Saaty, T. L. (1988), What is the analytic hierarchy process?, Springer, Berlin, DE.
Saaty, T. L. (1990), “How to make a decision: the analytic hierarchy process”, European Journal of Operational Research, Vol. 48 No. 1, pp. 9-26, doi: 10.1016/0377-2217(90)90057-1.
Saaty, T. L. (2008), “Decision making with the analytic hierarchy process”, International Journal of Services Sciences, Vol. 1 No. 1, pp. 83-98, doi: 10.1504/IJSSCI.2008.017590.
Sadreddin, A. and Chan, Y. E. (2023), “Pathways to developing information technology-enabled capabilities in born-digital new ventures”, International Journal of Information Management, Vol. 68, p. 102572, doi: 10.1016/j.ijinfomgt.2022.102572.
Saeed, V. A. and Asaad, R. (2022), “A cyber security threats, vulnerability, challenges and proposed solution”, Applied Computing Journal, Vol. 2 No. 4, pp. 227-244.
Smith, K. J. (2017), The practical guide to world-class IT service management, Outskirts Press, Colorado, USA.
Steuperaert, D. (2019), “COBIT 2019: a significant update”, EDPACS, Vol. 59 No. 1, pp. 14-18, doi: 10.1080/07366981.2019.1578474.
Symons, C., Cecere, M., Young, O. and Lambert, N. (2005), IT governance framework: structures, processes and communication, Forrester Research Inc.
Taherdoost, H. (2023), “An overview of trends in information systems: emerging technologies that transform the information technology industry”, Cloud Computing and Data Science, Vol. 4 No. 1, pp. 1-16, doi: 10.37256/ccds.4120231653.
Taherdoost, H. and Madanchian, M. (2023), “Multi-criteria decision making (MCDM) methods and concepts”, Encyclopedia, Vol. 3 No. 1, pp. 77-87, doi: 10.3390/encyclopedia3010006.
Toyner, L. G. and Sfenrianto, S. (2023), “Information system security evaluation using Cobit 5 framework”, Journal of Information System Management (JOISM), Vol. 4 No. 2, pp. 147-157, doi: 10.24076/joism.2023v4i2.992.
Tulus, B. V. and Tanaamah, A. R. (2023), “Design of information technology governance in educational institutions using COBIT 2019 framework”, Journal of Information Systems and Informatics, Vol. 5 No. 1, pp. 31-43, doi: 10.51519/journalis.v5i1.408.
Utamajaya, J. N., Supangat, S. H., Gaol, F. L. and Ranti, B. (2023), “Hotel information system management audit using COBIT 2019-APO12”, in 2023 2nd International Conference for Innovation in Technology (INOCON), Bangalore, India, pp. 1-7, doi: 10.1109/INOCON57975.2023.10101245.
Vafaei, N., Ribeiro, R. A. and Camarinha-Matos, L. M. (2016), “Normalization techniques for multi-criteria decision making: analytical hierarchy process case study”, in Technological Innovation for Cyber-Physical Systems, pp. 261-269, doi: 10.1007/978-3-319-31165-4_26.
Van Schaik, E. A. (1985), A management system for the information business: organizational analysis, Prentice-Hall Inc, New Jersey, NJ.
Wang, Y., Peng, X. and Prybutok, V. (2022), “The importance of information technology to organizational results within the Baldrige award”, Quality Management Journal, Vol. 29 No. 1, pp. 3-17, doi: 10.1080/10686967.2021.2006584.
Xu, J. and Lu, W. (2022), “Developing a human-organization-technology fit model for information technology adoption in organizations”, Technology in Society, Vol. 70, p. 102010, doi: 10.1016/j.techsoc.2022.102010.
Yoon, K. P. and Kim, W. K. (2017), “The behavioral TOPSIS”, Expert Systems with Applications, Vol. 89, pp. 266-272, doi: 10.1016/j.eswa.2017.07.045.
Zavadskas, E. K., Turskis, Z. and Kildienė, S. (2014), “State of art surveys of overviews on MCDM/MADM methods”, Technological and Economic Development of Economy, Vol. 20 No. 1, pp. 165-179, doi: 10.3846/20294913.2014.892037.
