Empirical Study of Information Systems Risk Management in Technology Startups in Indonesia
DOI:
https://doi.org/10.58812/wsist.v3i02.2169Keywords:
Information System Risk Management, IT Governance, Digital Innovation, Startup Performance, SEM-PLSAbstract
This study investigates the influence of Information System Risk Management (ISRM) and IT Governance on the performance of technology startups in Indonesia, with Digital Innovation serving as a mediating variable. A quantitative approach was employed, collecting data from 140 respondents using a 5-point Likert scale questionnaire. The data were analyzed using Structural Equation Modeling-Partial Least Squares (SEM-PLS 3). The results indicate that both ISRM and IT Governance have significant positive effects on digital innovation, which in turn positively impacts startup performance. Additionally, digital innovation partially mediates the relationship between ISRM, IT Governance, and startup performance. These findings highlight that effective risk management and IT governance, combined with digital innovation, are essential for enhancing the performance and competitiveness of technology startups in Indonesia.
References
[1] І. І. Рекуненко and А. В. Шупік, “RISK MANAGEMENT STRATEGIES FOR MAINTAINING COMPETITIVENESS IN IT FIRMS,” Наукові праці Міжрегіональної Академії управління персоналом. Економічні науки, no. 3 (75), pp. 84–92, 2024.
[2] L. Hakim, “TANTANGAN DAN STRATEGI INVESTASI PADA PERUSAHAAN STARTUP TEKNOLOGI DI INDONESIA”.
[3] I. S. Rozas and M. Er, “Internal and External Challenges in Digital Startup Ecosystem: A Systematic Literature Review,” in 2024 2nd International Symposium on Information Technology and Digital Innovation (ISITDI), IEEE, 2024, pp. 142–148.
[4] O. S. Joel, A. T. Oyewole, O. G. Odunaiya, and O. T. Soyombo, “Navigating the digital transformation journey: strategies for startup growth and innovation in the digital era,” Int. J. Manag. Entrep. Res., vol. 6, no. 3, pp. 697–706, 2024.
[5] D. K. Rahajeng, “Innovative Governance in the Startup Era: The Interplay of Technology, Innovation, and Value Creation,” J. Indones. Econ. Bus., vol. 40, no. 2, pp. 179–195, 2025.
[6] N. Sudirman, “Digital Entrepreneurship and Business Innovation: Strategies for Indonesian SMEs in the Era of Industry 4.0,” J. Indones. Sch. Soc. Res., vol. 5, no. 1, pp. 24–34, 2025.
[7] F. Riza and N. A. Luhur, “Navigating the Innovation Landscape: The Crucial Role of Technology and Entrepreneurial Orientation,” 2023.
[8] R. Ningsih and W. Murti, “Innovation of Business Models in the Digital Economy: A Case Study of Start-up Companies.,” J. Compr. Sci., vol. 3, no. 12, 2024.
[9] A. Ponnam, “Information systems risk management: An audit and control approach,” in Handbook of research on information security and assurance, IGI Global Scientific Publishing, 2009, pp. 68–84.
[10] S. Fenz, J. Heurix, T. Neubauer, and F. Pechstein, “Current challenges in information security risk management,” Inf. Manag. Comput. Secur., vol. 22, no. 5, pp. 410–430, 2014.
[11] J. Kouns and D. Minoli, “Information technology risk management in enterprise environments: A review of industry practices and a practical guide to risk management teams,” 2011.
[12] S. Radack, “Conducting Information Security-Related Risk Assessments: Updated Guidelines for Comprehensive Risk Management Programs,” National Institute of Standards and Technology, 2012.
[13] M. N. Suresh, T. Varalakshmi, and M. S. Chand, “IT governance framework ensuring effective management and compliance,” Int. Res. J. Adv. Eng. Manag., vol. 2, no. 05, pp. 1627–1632, 2024.
[14] T.-P. Liang, Y.-C. Chiu, S. P. J. Wu, and D. Straub, “The impact of IT governance on organizational performance,” 2011.
[15] M. Spremić, “IT governance mechanisms in managing IT business value,” WSEAS Trans. Inf. Sci. Appl., vol. 6, no. 6, pp. 906–915, 2009.
[16] W. Van Grembergen, S. De Haes, and E. Guldentops, “Structures, processes and relational mechanisms for IT governance,” in Strategies for information technology governance, IGI Global Scientific Publishing, 2004, pp. 1–36.
[17] V. Raodeo, “IT strategy and governance: Frameworks and best practice,” Int. J. Res. Econ. Soc. Sci., vol. 2, no. 3, pp. 49–59, 2012.
[18] A. T. Karabulut, “Digital innovation: An antecedent for digital transformation,” Int. J. Commer. Financ., vol. 6, no. 2, pp. 179–186, 2020.
[19] F. Wiesböck and T. Hess, “Digital innovations: Embedding in organizations,” Electron. Mark., vol. 30, no. 1, pp. 75–86, 2020.
[20] S. Nambisan, K. Lyytinen, A. Majchrzak, and M. Song, “Digital innovation management,” MIS Q., vol. 41, no. 1, pp. 223–238, 2017.
[21] K. Deng, “Three Empirical Studies on Digital Innovation Management: New Organizing Logic of Antecedents and Consequences of Innovation,” 2018.
[22] F. Kartika, “The role of innovation in startup success: A comprehensive review,” Adv. J. Ekon. Bisnis, vol. 2, no. 1, pp. 46–58, 2024.
[23] Y. Konga and K. Ramaiah, “The role of innovation in startup business financing, performance, and survival,” in Handbook of Research on Future Opportunities for Technology Management Education, IGI Global, 2021, pp. 331–348.
[24] R. Schulte, “New venture risk management: Theoretical framework and research perspectives,” J. Int. Counc. Small Bus., pp. 1–20, 2025.
[25] B. Ruiter, “The quantification of start-up performance: An empirical study about the determinants of early stage IT start-up success,” 2015, University of Twente.
[26] T. R. Eisenmann, “Determinants of early-stage startup performance: Survey results,” Harvard Bus. Sch. Entrep. Manag. Work. Pap., no. 21–057, 2020.
[27] E. Aprilia, C. Sani, and M. Rezha, “Manajemen Risiko Perbankan Syariah: PERAN TEKNOLOGI DALAM MANAJEMEN RISIKO DAN INOVASI,” An Najah (Jurnal Pendidik. Islam dan Sos. Keagamaan), vol. 4, no. 1, pp. 39–50, 2025.
[28] G. Matturro, P. Franco, and S. Ledesma, “Technical and Business Risk Management in Software Startups,” in International Conference on Information Technology & Systems, Springer, 2024, pp. 75–85.
[29] G. Duchidze, “RISK MANAGEMENT AS A DETERMINING FACTOR IN THE EFFECTIVENESS OF INNOVATION MANAGEMENT,” თავდაცვა და მეცნიერება, vol. 3, pp. 103–112, 2024.
[30] O. F. Nahid, R. Rahmatullah, M. Al-Arafat, M. Enamul Kabir, and A. Dasgupta, “Risk mitigation strategies in large scale infrastructure project: A project management perspective,” 2024.
[31] K. Anggraito, M. Lubis, H. Fakhrurroja, and A. R. Lubis, “Relationship of IT Governance Domain with a Case Study of the Application of ‘One Price Fuel in Indonesia’ by National Oil Company,” in International conference on WorldS4, Springer, 2023, pp. 35–45.
[32] F. S. Lubis, V. S. Praditha, M. Lubis, H. Fakhrurroja, M. F. Safitra, and A. R. Lubis, “Corporate ICT Governance of Indonesian State-Owned Companies: Governance Structure and Decision Making Archetype,” in 2023 IEEE International Conference on Computing (ICOCO), IEEE, 2023, pp. 277–282.
[33] C. H. Primasari and D. B. Setyohadi, “Supporting factors of IT business alignment at Indonesian it companies,” Int. J. Heal. Sci. Technol., vol. 3, no. 3, 2022.
[34] A. Hamzah, “Penyelarasan Strategi Bisnis dan Strategi Sistem/Teknologi Informasi Untuk Peningkatan Kinerja Organisasi,” InFestasi, vol. 3, no. 2, pp. 79–89, 2007.
[35] Y. Zhou, C. Yang, Z. Liu, and L. Gong, “Digital technology adoption and innovation performance: a moderated mediation model,” Technol. Anal. Strateg. Manag., vol. 36, no. 11, pp. 3341–3356, 2024.
[36] D. Arkhipova, G. Vaia, W. DeLone, and C. Braghin, “IT governance in the digital era,” Univ. Ca’Foscari Venezia Work. Pap. SSRN, vol. 12, 2016.
[37] A. Alhuraibi, “From IT-business strategic alignment to performance: A moderated mediation model of social innovation, and enterprise governance of IT,” 2017.
[38] N. K. N. Kuteesa, N. C. U. Akpuokwe, and N. C. A. Udeh, “Navigating the digital transformation journey: Strategies for startup growth and innovation in the digital era,” Int. J. Sch. Res. Multidiscip. Stud., vol. 4, no. 2, pp. 38–53, 2024.
Downloads
Published
Issue
Section
License
Copyright (c) 2025 Faiz Muqorrir Kaaffah, Kartono, Bambang Winardi

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.









