Auditing Library Information Systems Using COBIT 2019: A Systematic Review of Governance, Compliance, and Cyber Risk Mitigation

The digital transformation of academic libraries has introduced increasing complexity in the management of information systems, demanding reliable governance frameworks to ensure effectiveness, compliance, and cyber risk mitigation. This study presents a Systematic Literature Review (SLR) to evaluate the implementation of the COBIT 2019 framework in auditing library information systems and its role in strengthening IT governance. The review focuses on ten peer-reviewed articles selected through PRISMA-based criteria, drawn from reputable academic databases. Findings reveal that COBIT 2019 facilitates structured audit processes through design factors, maturity level assessments, and alignment of IT operations with institutional goals. It provides valuable guidance in identifying governance gaps, improving service delivery, and establishing internal controls. Moreover, integration with complementary frameworks such as the Capability Maturity Model Integration (CMMI) enhances the depth of gap analysis and supports continuous improvement in IT governance practices. However, limitations are noted in the form of technical documentation gaps and the one-dimensional nature of COBIT's taxonomic structure, which may restrict its applicability in organizations with complex cybersecurity needs. As a response, the study recommends a multi-framework approach that incorporates COBIT 2019 with ITIL, ISO/IEC 27001, or NIST frameworks to address broader audit and risk management requirements. This research contributes by contextualizing COBIT 2019 within the academic library sector-an area often underrepresented in IT audit studies-and highlights its potential to guide institutions toward more accountable, adaptive, and resilient digital governance models in higher education environment.