Managing Information Technology Risks to Achieve Business Goals: A Case of Pharmaceutical Company

Extant literature has shown that sectoral characteristics play a critical role in business value creation through information technology (IT). Therefore, managing IT and its associated risks needs to consider specific industrial traits understand the distinct nature regulations shape IT-enabled creation. This study presents an in-depth analysis of goals, processes, case pharmaceutical company which appropriate controls are designed ensure IT. Drawing on Indonesia, we found industry entails two main objectives: 1) ensuring compliance with external laws as well internal policies, 2) supporting optimization functions, costs. Throughout one year engagement during project, this identified ten operation processes. Risks dominated by moderate levels given current state appetite, most emerge from company’s existing Internal actors involved all risks, events occurring due regulations. Further, designs elaborates risk drawing COBIT 5 Seven Enablers. Overall, management cascading processes ensures alignment achieving goals industry.