2025 - Strengthening Basic Concepts and Frameworks

In this year, the focus is on building a comprehensive understanding of relevant theories, international standards, and frameworks in the fields of information systems governance, risk management, information security, and IT auditing. 

This activity aims to establish a solid scientific foundation and conceptual framework, as an initial foothold in developing a systematic and contextual IT governance model.

2026 - Field Study and Framework Adjustment

The focus of this year is to conduct field exploration to identify the real challenges faced by organizations in implementing IT governance, including in the aspects of risk management and auditing. 

Through an empirical study approach, this year aims to produce an evidence-based understanding of the gap between theory and practice, which will form the basis for adjusting the framework to better suit the actual needs of organizations.

2027 - Framework Innovation and Adaptation

This year marks the beginning of innovation by focusing on the development of new models or adaptations to existing frameworks. 

Activities at this stage are carried out based on the findings and lessons learned from previous field studies, with the aim of creating a governance approach that is more flexible, adaptive, and oriented towards sustainability and organizational effectiveness in the face of digital dynamics.

2028 - Utilization of AI, Big Data, and Blockchain Technologies

The focus this year is on integrating cutting-edge technologies such as artificial intelligence (AI), big data analytics, and blockchain into governance, risk management, and audit processes. 

This approach aims to drive operational efficiency, improve decision-making accuracy, and strengthen system transparency and security through automation and data-driven intelligent analytics.

2029 - Evaluation of Results and Knowledge Dissemination

In the final year, attention is focused on evaluating the effectiveness of the models and technologies that have been developed throughout this roadmap. In addition, activities are focused on developing practical recommendations that can be widely adopted by organizations. 

The goal is to expand knowledge dissemination and generate tangible impact through documentation of best practices, scientific publications, and provision of applicable implementation guides.