Harriansyah Harriansyah
Sekolah Tinggi Teknologi Informasi NIIT Itech

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

Analisis Keamanan Sistem Informasi Berdasarkan COBIT 2019 pada Domain Deliver, Service, and Support (DSS) di Website Pojokoto.com Harriansyah Harriansyah; Bayu Nurpatria; Muhammad Bagir
SABER : Jurnal Teknik Informatika, Sains dan Ilmu Komunikasi Vol. 4 No. 3 (2026): Juli : Jurnal Teknik Informatika, Sains dan Ilmu Komunikasi
Publisher : STIKes Ibnu Sina Ajibarang

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59841/saber.v4i3.3860

Abstract

Cyberattacks on online news media can cause websites to cease operations and display unauthorized content, such as links to online gambling sites. Online news media companies have a critical need for robust information security frameworks. This study aims to examine and optimize information security governance at Pojokoto.com, an online news portal frequently targeted by cyberattacks such as Distributed Denial of Service (DDoS) and malware that disrupt operational continuity. By adopting the COBIT 2019 framework, specifically the Deliver, Service, and Support (DSS) domain, this qualitative study assesses current capability levels and identifies gaps relative to desired targets. Data collection involved direct observation, in-depth interviews with IT administrators, and a review of Standard Operating Procedures (SOPs). The results indicate an average current capability level of 2.17, with the most critical deficiencies found in the Continuity Management (DSS04) and Security Service Management (DSS05) processes. To address these gaps, the study proposes several strategic recommendations, including the implementation of a cloud-based Web Application Firewall (WAF), Two-Factor Authentication (2FA), Root Cause Analysis (RCA), and a formalized Disaster Recovery Plan (DRP) utilizing the 3-2-1 backup strategy. The study’s implications highlight that shifting from reactive issue resolution to proactive security management is essential not only to minimize service downtime but also to safeguard press freedom and maintain public trust in the digital era.