From Legacy to Intelligent SIMS:A Framework for AI Integration and IT Governance in Philippine Diocesan Schools
DOI:
https://doi.org/10.5281/zenodo.19874381Keywords:
Legacy Systems, Student Information Management, AI Governance, Cybersecurity, COBIT, Diocesan Schools, PhilippinesAbstract
Legacy Student Information Management Systems (SIMS) remain operational across Philippine higher education institutions, yet their prolonged use has created an accumulating deficit in cybersecurity governance, privacy engineering, and institutional accountability. This paper presents a governance-centered design framework for transforming a legacy SIMS—in continuous use since 2015 at a Philippine diocesan school—into an intelligent academic data infrastructure. Adopting design science research supported by mixed methods, the current-state assessment is structured using ISO/IEC 25010:2023, NIST CSF 2.0, NIST SSDF, NIST AI RMF 1.0, COBIT 2019, the Philippine Data Privacy Act of 2012, and recent NPC guidance on AI and privacy engineering. The proposed five-layer artifact preserves the registrar database as the system of record while introducing security controls, governance mechanisms, AI-assisted duplicate detection, anomaly scoring, intelligent retrieval, workflow prioritization, and online algorithms for incremental validation. The paper contributes a practical modernization pathway that balances technological intelligence with human accountability, offering strategic value for diocesan and similarly resourced institutions navigating digital transformation.
Downloads
References
Braun, V., & Clarke, V. (2006). Using thematic analysis in psychology. Qualitative Research in Psychology, 3(2), 77–101.
Camilleri, M. A. (2020). Using the Balanced Scorecard as a performance management tool in higher education. Management in Education, 35(1), 10–21. https://doi.org/10.1177/0892020620921412
COBIT. (2019). COBIT 2019 framework: Introduction and methodology. ISACA.
Creswell, J. W., & Creswell, J. D. (2018). Research design: Qualitative, quantitative, and mixed methods approaches (5th ed.). SAGE Publications.
De Haes, S., Van Grembergen, W., Joshi, A., & Huygh, T. (2020). Enterprise governance of information technology: Achieving alignment and value in digital organizations. Springer Nature Switzerland AG. https://doi.org/10.1007/978-3-030-25918-1_5
De Jesus Alvares Mendes Junior, I., & Alves, M. D. C. (2023). The balanced scorecard in the education sector: A literature review. Cogent Education, 10(1). https://doi.org/10.1080/2331186X.2022.2160120
Fahd, K., Miah, S. J., Ahmed, K., Venkatraman, S., & Miao, Y. (2021). Integrating design science research and design based research frameworks for developing education support systems. Education and Information Technologies, 26(4), 4027–4048. https://doi.org/10.1007/s10639-021-10442-1
Hadi, T. R., & Marpanaji, E. (2019). Designing and quality testing of "Digichip" virtual simulation software of Android platform for mobile-virtual learning supporting vocational mechatronics engineering. Jurnal Pendidikan Vokasi, 9(2), 105–118. https://doi.org/10.21831/jpv.v9i2.23570
Hevner, A. R., March, S. T., Park, J., & Ram, S. (2004). Design science in information systems research. MIS Quarterly, 28(1), 75–105.
International Organization for Standardization/International Electrotechnical Commission. (2023). *ISO/IEC 25010:2023: Systems and software engineering—Systems and software Quality Requirements and Evaluation (SQuaRE)—Product quality model*. ISO/IEC.
ISACA. (2019). COBIT 2019 framework: Introduction and methodology.
Jung, H. S., Lee, H., & Park, K. C. (2025). Analysis of UX elements in educational applications for young children and implementation of ISO/IEC 25010 quality standards. SAGE Open, 15(3). https://doi.org/10.1177/21582440251377385
Li, Y. (2024). Research on informatization construction of educational management innovation path in colleges and universities in the intelligent era. Applied Mathematics and Nonlinear Sciences. https://doi.org/10.2478/amns-2024-1621
Muftikhali, Q. E., Kurniawan, Y. C., & Rahma, D. W. (2024). The impact of enterprise systems on user performance using the IGRACIAS V.1 application at Telkom University Jakarta. Journal of Advances in Information and Industrial Technology, 6(1), 41–50. https://doi.org/10.52435/jaiit.v6i1.540
National Institute of Standards and Technology. (2022). Secure Software Development Framework (SSDF) version 1.1: Recommendations for mitigating the risk of software vulnerabilities (NIST SP 800-218). U.S. Department of Commerce.
National Institute of Standards and Technology. (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0) (NIST AI 100-1).
National Institute of Standards and Technology. (2024). The NIST Cybersecurity Framework (CSF) 2.0.
National Privacy Commission. (2024). *NPC Advisory No. 2024-04: Guidelines on the application of Republic Act No. 10173 or the Data Privacy Act of 2012, its implementing rules and regulations, and the issuances of the Commission to artificial intelligence systems processing personal data*. Republic of the Philippines.
National Privacy Commission. (2025). *NPC Advisory No. 2025-02: Guidelines on privacy engineering in systems life cycle processes*. Republic of the Philippines.
Nguyen, A., Tuunanen, T., Gardner, L., & Sheridan, D. (2021). Design principles for learning analytics information systems in higher education. European Journal of Information Systems, 30(5), 541–568. https://doi.org/10.1080/0960085X.2020.1816144
Osano, H. S., Villaronte, C. M., Yuesti, A., & Alve, J. A. (2026). Strengthening the Philippine education sector through fiscal and monetary policies: Analyzing government interventions for resilience and growth. JUARA: Jurnal Riset Akuntansi, 16(1), 40–49. https://doi.org/10.36733/juara.v16i1.13872
Peffers, K., Tuunanen, T., Rothenberger, M. A., & Chatterjee, S. (2007). A design science research methodology for information systems research. Journal of Management Information Systems, 24(3), 45–77.
Purnama, D. G., & Akbar, R. I. (2025). Analysis of IT governance implementation using COBIT 5.0 and COBIT 2019. Jurnal SAINTIKOM, 8(2). https://doi.org/10.36085/jsai.v8i2.8417
Ramachandran, N., & Thangamani, G. (2020). Factors determining successful implementation of ERP in higher education – A review. AIMS International Journal of Management, 14(3), 159. https://doi.org/10.26573/2020.14.3.3
Republic of the Philippines. (2012). Republic Act No. 10173: Data Privacy Act of 2012. Official Gazette of the Republic of the Philippines.
Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020). Zero trust architecture (NIST SP 800-207). National Institute of Standards and Technology, U.S. Department of Commerce.
Sipayung, A. B., Yunis, R., & Elly. (2022). Evaluation of information technology governance at Mikroskil University using COBIT 2019 framework with BAI11 domain. International Journal of Research and Applied Technology, 2(2). https://doi.org/10.34010/injuratech.v2i2.8085
Tupaz, E. F., Tabeta, G. G., & Unarce, J. S. (2025, February 5). Philippines: NPC releases guidelines on AI systems. Gorriceta Africa Cauton & Saavedra. https://gorricetalaw.com/philippines-npc-releases-guidelines-on-ai-systems/
Villaronte, C. (2026). Motivating the global learner: Unpacking educational drive in the age of internationalized marketing. International Journal of Education, Research, and Innovation Perspectives, 2(3), 1575–1584. https://doi.org/10.5281/zenodo.19154031
Villaronte, C. M., & Guevarra, J. G. (2025). Donor relation and income diversification strategies of a diocese in the Philippines. Philippine Social Science Journal, 8(2), 9. https://doi.org/10.52006/main.v8i2.1279
Villaronte, C. M., & Yuesti, A. (2025a). The major causes of cultural difference and change: A global business perspective with Philippine context. EMAS, 6(10), 2350–2359. https://doi.org/10.36733/emas.v6i10.12739
Villaronte, C. M., & Yuesti, A. (2025b). Strategic implementation of global marketing management: A critical exploration of opportunities and challenges in a borderless economy. JUIMA: Jurnal Ilmu Manajemen, 15(2), 163–175.
Downloads
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
How to Cite
