SMART-Learning School Information System: A Design Science-Based Framework for IT Governance and Auditing in Senior High Schools

This study addresses the persistent lack of structured, education-specific information technology (IT) governance and auditing frameworks within Senior High Schools (SHSs). While corporate entities heavily leverage mature frameworks such as COBIT 2019 to enforce accountability, maintain system stability, and guarantee security compliance, secondary education systems frequently manage fragmented implementations of Learner Information Systems (LIS) and Learning Management Systems (LMS) devoid of equivalent oversight. Guided by Design Science Research (DSR), this study develops and evaluates the SMART - Learning School Information System (SMART - LSIS) Framework. The framework provides a structured approach to IT governance and auditing, designed to enhance management, monitoring, and accountability of school information systems in Senior High Schools.

A purposive sample of 25 school ICT stakeholders - including ICT Coordinators, School Administrators, Registrars, and Support Staff - evaluated the institutionalized system infrastructure across five core domains. Descriptive statistical analysis revealed a Grand Mean of 4.05 (Agree), demonstrating strong stakeholder validation regarding the utility and structural composition of the artifact. However, Gap Analysis exposed a critical vulnerability: IT Auditing exhibited the lowest evaluation score (M = 3.87) and the highest discrepancy relative to the ideal standard (Gap = 1.13). These empirical insights substantiate the necessity of an integrated framework to consolidate school governance, system tracking, risk mitigation, and performance monitoring into a unified, continuous-improvement architecture.

IT Governance, IT Auditing, School Information Systems, Learner Information Systems (LIS), Learning Management Systems (LMS), Educational ICT Compliance, Risk Management.

1. Almantara, I. P. S. (2020). Evaluation of information technology governance using the COBIT framework in educational environments. Journal of Applied Informatics and Computer Engineering, 12(2), 45–53. [Google Scholar] [Crossref]

2. Al-Rahmi, W. M., Uddin, M., Alkhalaf, S., Al-Dhlan, K. A., Cifuentes-Faura, J., Al-Rahmi, A. M., & Al- Adwan, A. S. (2022). Validation of an integrated IS success model in the study of e-government. Mobile Information Systems, 2022, Article 8909724. https://doi.org/10.1155/2022/8909724 [Google Scholar] [Crossref]

3. Badjuka, A. H., Mozin, S. Y., & Nani, Y. N. (2026). Developing an Integrated Information System for Performance Management in Indonesian Higher Education. Journal of Governance and Public Policy, 13(1), 1–18. https://doi.org/10.18196/jgpp.v13i1.27109 [Google Scholar] [Crossref]

4. Basuki, R., Ahmad, M., & Rochimahabc, H. (2025). Challenges and opportunities for digital education financing against the digital infrastructure gap. Journal of English Language and Education. https://jele.or.id/index.php/jele/article/download/1035/563 [Google Scholar] [Crossref]

5. Bete, J.E., & Collera, A. (2025). Assessing the efficiency of the learners information system in a rural Philippine national high school. Journal of Interdisciplinary Perspectives, 3(4), 483-494. https://doi.org/10.69569/jip.2025.020 [Google Scholar] [Crossref]

6. Bianchi, I., Sousa, R., & Pereira, R. (2021). Information Technology Governance for Higher Education Institutions: A Multi-Country Study. Informatics, 8(2), 26. https://doi.org/10.3390/informatics 8020026 [Google Scholar] [Crossref]

7. Borja, V., Inojales, J., Adora, J., Monforte, A., & Madriaga, P. (2025). Impact analysis of cloud security risks and vulnerabilities in philippine state universities for developing risk mitigation strategies. Cognizance Journal of Multidisciplinary Studies. https://cognizancejournal.com/vol5issue10/V5I1011.pdf [Google Scholar] [Crossref]

8. Cooke, I. (2020). Enhancing the IT audit report using COBIT 2019. ISACA Journal, 2020(4), 1–7. https://www.isaca.org/resources/isaca-journal/issues/2020/volume-4/enhancing-the-it-audit-report- using-cobit-2019 [Google Scholar] [Crossref]

9. DeLone, W. H., & McLean, E. R. (2003). The DeLone and McLean model of information systems success: A ten-year update. Journal of Management Information Systems, 19(4), 9–30. https://doi.org/10.1080/07421222.2003.11045748 [Google Scholar] [Crossref]

10. Egerie. (2026). COBIT framework: Definition, principles and implementation for effective IT governance. Egerie. https://www.egerie.com/en/resources/blog/cobit [Google Scholar] [Crossref]

11. Enad, F. & Balicoco, N. (2023). Management Information System of Public Secondary Schools in Sagbayan District: A Proposed Implementation. Psychology and Education: A Multidisciplinary Journal, 13(1), 1-8. http://dx.doi.org/10.5281/zenodo.8309728 [Google Scholar] [Crossref]

12. ESET. (2025). Key cybersecurity challenges in the education sector. https://web assets.eset.com/fileadmin/ESET/US/B2B_Resource_centre/whitepapers/Key-Cybersecurity-Challenges -in-the-Education-Sector_Penfield-CS_FINAL.pdf [Google Scholar] [Crossref]

13. Fattah, A., Saragih, H., Rahman, T., & Setyadi, R. (2021). The Influence IT Governance Mechanism on Effectiveness ITG and IT Performance: A Partial Least Squares Structural Equation Modeling Approach (PLS-SEM). Internal Journal of Science, Technology & Management. http://ur.aeu.edu.my/890/1/212- Article%20Text-1461-1-10-20210527.pdf [Google Scholar] [Crossref]

14. Gulzar, M. (2023). IT Infrastructure Management: A Digital Services Context. ICSOB ’23: 14th International Conference on Software Business. CEUR Workshop Proceedings. https://ceur-ws.org/Vol-3621/phd-paper6.pdf [Google Scholar] [Crossref]

15. Harahap, A. M., & Ikhwan, A. (2023). Implementation of information technology governance in MAN 1 Medan using the COBIT 2019 framework. Sinkron: Jurnal dan Penelitian Teknik Informatika, 8(1), 241–246. https://doi.org/10.33395/sinkron.v8i1.11936 [Google Scholar] [Crossref]

16. Hevner, A. R., March, S. T., Park, J., & Ram, S. (2004). Design science in information systems research. MIS Quarterly, 28(1), 75–105. https://doi.org/10.2307/25148625 [Google Scholar] [Crossref]

17. Humaidi, R., & Sarwan. (2026). Educational Management Information System Governance in Islamic Secondary Schools. Journal of Educational Management Research, 5(1), 846–855. https://doi.org/10.61987/jemr.v5i1.1742 [Google Scholar] [Crossref]

18. Julianti, M. R., Gaol, F. L., Ranti, B., & Supangkat, S. H. (2021). IT governance framework for academic information system at higher education institutions: A systematic literature review. In 2021 International Conference on ICT for Smarrt Society (ICISS), 1-6. IEEE. https://doi.org/10.1109/ICISS53185.2021.9533213 [Google Scholar] [Crossref]

19. Karatas, M. H., & Çakir, H. (2024). A systematic literature review on IT governance mechanisms and frameworks. Journal of Learning and Teaching in Digital Age, 9(1), 88–101. [Google Scholar] [Crossref]

20. Krumova, M., & Kataria, A. (2023). Education cybersecurity: Learning management system, data and tools. [Google Scholar] [Crossref]

21. In Proceedings of the 16th International Conference on Theory and Practice of Electronic Governance (ICEGOV 2023) (pp. 318–323). Association for Computing Machinery. https://doi.org/10.1145/3614321.3614364 [Google Scholar] [Crossref]

22. Lee, J.-S., Tyler, A. R. B., Veinot, T. C., & Yakel, E. (2024). Strengthening government-academic data infrastructures for crisis response. JMIR Public Health and Surveillance, 10, e51880. https://doi.org/10.2196/51880 [Google Scholar] [Crossref]

23. Lee, K., Bart, Y., & Cauffman, C. (2026). Consumer vulnerability within digital platform service [Google Scholar] [Crossref]

24. ecosystems. Journal of Services Marketing, 40(3), 1–18. https://doi.org/10.1108/JSM-03-2025-0179 [Google Scholar] [Crossref]

25. Mandei, J., Siang, J., & Mamahit, M. (2025). The effectiveness of the management information system in improving the quality of education at SMP Negeri 1 Tumpaan, South Minahasa Regency. International Journal of Education, Information Technology, and Others, 8(3.B), 211-218. Retrieved from https://jurnal.peneliti.net/index.php/IJEIT/article/view/12663 [Google Scholar] [Crossref]

26. Metin, B., Özhan, F. G., & Wynn, M. (2024). Digitalization and cybersecurity: Towards an operational framework. Electronics, 13(21), 4226. https://doi.org/10.3390/electronics13214226 [Google Scholar] [Crossref]

27. Mulokonzi, A. M. & Kitula, P. R. (2023). Electronic Governance System Implementation and Its Influence on Public Secondary School Management: A Case Study of Meru District, Tanzania. Journal of Research Innovation and Implications in Education, 7(3), 297 – 309. https://doi.org/10.59765/qaia532f [Google Scholar] [Crossref]

28. Octave, F. F., Abakar, M. A., Faraja, S. N. & Bhumika, T. (2024). Digital infrastructure: Addressing cyber security threats and vulnerability. Journal of Emerging Technologies and Innovative Research. 11(11), a272-a276. https://www.jetir.org/papers/JETIR2411031.pdf [Google Scholar] [Crossref]

29. Peffers, K., Tuunanen, T., Gengler, C.E., Rossi, M., Hui, W., Virtanen, V., & Bragge, J. (2020). Design science research process: A model for producing and presenting information systems research. https://arxiv.org/abs/2006.02763 [Google Scholar] [Crossref]

30. Rosário, A. T., & Dias, J. C. (2022). Learning management systems in education. In Digital active [Google Scholar] [Crossref]

31. Methodologies for educative learning management, 47–77. IGI Global. https://doi.org/10.4018/978-1-6684-4706-2.ch003 [Google Scholar] [Crossref]

32. Setyadi, R., Rahman, A. A., & Subiyakto, A. (2023). The role of information technology in governance [Google Scholar] [Crossref]

33. mechanism for strategic business contribution: A pilot study. International Journal on Informatics Visualization, 7(3–2), 2135–2144. https://doi.org/10.30630/joiv.7.3-2.1657 [Google Scholar] [Crossref]

34. Syarwani, M., & Syahrani, S. (2022). The role of information system management for educational institutions during pandemic. Indonesian Journal of Education (INJOE), 2(3), 270–281. https://doi.org/10.54443/injoe.v3i2.33 [Google Scholar] [Crossref]

35. Shokouhyar, S., Zarrin, S., & Shokoohyar, S. (2020). Analysing the impact of IT governance on the [Google Scholar] [Crossref]

36. performance of project-based organisations. International Journal of Business and Systems Research, 14(4), 411–433. https://doi.org/10.1504/IJBSR.2020.110763 [Google Scholar] [Crossref]

37. Steuperaert, D., & Poels, G. (2026). Enriching the COBIT 2019 IT governance framework through a [Google Scholar] [Crossref]

38. Structured comparison with selected IS theories. In Proceedings of the 59th Hawaii International Conference on System Sciences (HICSS 2026). https://doi.org/10.24251/hicss.2026.727 [Google Scholar] [Crossref]

39. Supardi, S., Agustina, T., & Muslimin, A. I. (2024). Exploring the role of digital infrastructure in school accreditation across types and geographies. Edelweiss Applied Science and Technology, 8(6), 8793– 8804. https://doi.org/10.55214/25768484.v8i6.3877 [Google Scholar] [Crossref]

40. Timotheou, S., Miliou, O., Dimitriadis, Y., Sobrino, S. V., Giannoutsou, N., Cachia, R., Monés, A. M., & Ioannou, A. (2023). Impacts of digital technologies on education and factors influencing schools’ digital transformation: A literature review. Education and Information Technologies, 28(6), 6675–6726. https://doi.org/10.1007/s10639-022-11431-8 [Google Scholar] [Crossref]

41. Tulus, B. V., & Tanaamah, A. R. (2023). Design of information technology governance in educational [Google Scholar] [Crossref]

42. Institutions using COBIT 2019. Journal of Information Systems and Informatics, 5(1), 31–43. https://doi.org/10.51519/journalisi.v5i1.408s [Google Scholar] [Crossref]

43. Vaya-Arboledas, Á., Ferrer-Oliva, M., & Medina-Merodio, J. A. (2025). Evolution and Perspectives in IT Governance: A Systematic Literature Review. Computers, 14(12), 520. https://doi.org/10.3390/computers14120520 [Google Scholar] [Crossref]

44. Villaseñor, R. A. M. (2025). Challenges and dilemmas of digitalization in Philippine education: A grassroots perspective. Journal of Public Administration and Governance, 14(2), 232-244. https://doi.org/10.5296/jpag.v14i22325 [Google Scholar] [Crossref]

45. Wattimury, G., & Faza, A. (2023). COBIT 2019 implementation for enhancing IT governance in educational institutions. JISKA (Jurnal Informatika Sunan Kalijaga), 8(3), 210–221. https://doi.org/10.14421/jiska.2023.8.3.210-221 [Google Scholar] [Crossref]

46. Weill, P., & Ross, J. W. (2004). IT governance: How top performers manage IT decision rights for superior results. Harvard Business School Press. [Google Scholar] [Crossref]

47. Wibowo, B., Yuswanto, A., Hidayat, T., & Ibrahim, N. (2025). Cyber resilience to digital threats for Education institutions 4.0. International Journal of Management Science and Application. https://ejournal.sultanpublisher.com/ijmsa/article/download/370/263/2762 [Google Scholar] [Crossref]

48. World Health Organization. (2020). Digital health platform handbook: Building a digital information infrastructure (infostructure) for health. https://iris.who.int/handle/10665/334331 [Google Scholar] [Crossref]

• Enhancing Formation Control of Multi Agent Systems Using Ann Based Technique
• Improving Sliding Mode Control with Chattering Reduction using Fuzzy Based Technique
• Cooking Quality, Fasting Blood Glucose, Glycemic Index and Load of High–Fiber Noodles Made from Wheat, Tiger Nut Residue and Cassava Flour Blends
• Matrix Rhythm Therapy Versus Interferential Therapy Combined with Lumbar Stabilization Exercises in Chronic Non-Specific Low Back Pain: A Randomized Comparative Trial
• Formulation and Sensory Evaluation of Functional Cake Prepared from Sweet Potato Powder