Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Jurnal Tata Kelola dan Kerangka Kerja Teknologi Informasi
Angelly Vincentsia Rondonuwu
Magister Sistem Informasi, Universitas Komputer Indonesia
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Compliance Audit of Application in Credit System Againts ISO/IEC 27002 Using The COBIT 5 Framework Angelly Vincentsia Rondonuwu; Yeffry Handoko Putra
Jurnal Tata Kelola dan Kerangka Kerja Teknologi Informasi Vol. 12 No. 2 (2026): Agustus 2026
Publisher : Universitas Komputer Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.34010/jtk3ti.v12i2.21335

Abstract

This study assesses the security capabilities and technical control compliance of the Credit Information System at PT BPR Prisma Dana Manado, referencing ISO/IEC 27002:2013 guidelines and COBIT 5 domains (APO13 and DSS05). Using a mixed approach that combined RACI-based surveys with work product triangulation, we found that DSS05 reached Level 1 capability (88.83%), whereas APO13 stayed at Level 0 (75.83%). Meanwhile, ISO/IEC 27002:2013 compliance averaged 83.95% (Partially Compliant). Measured against the target Level 3 (Established Process), gap analysis showed a 2-level deficit in DSS05 and a 3-level deficit in APO13. These gaps stem mainly from irregular audit trail reviews, weak risk management practices, outdated policy reviews, and insufficient vulnerability management. To reach the target levels, the study suggests formalizing security SOPs, running routine audit log reviews and vulnerability assessments, and setting up clear information security KPIs.
Co-Authors Yeffry Handoko Putra