<![CDATA[PT. Andhana Kirana Yasa uses a Human Resource Information System (HRIS) to support employee data management, attendance, leave, payroll, and human resource administration. Along with the use of information technology, HRIS systems pose various risks that can impact the confidentiality, integrity, and availability of information. Therefore, this study was conducted to examine security risks in the HRIS system using the NIST SP 800-30 framework. This study employed a qualitative descriptive approach through data collection methods, including interviews and document checklists. The risk analysis was conducted based on the NIST SP 800-30 stages, which include System Characterization, Threat Identification, Vulnerability Identification, Control Analysis, Likelihood Determination, Impact Analysis, Risk Determination, Control Recommendation, and Results Documentation. The results indicate that PT. Andhana Kirana Yasa's HRIS system faces several security risks, such as unauthorized access, data breaches, misuse of access rights, and human error. Based on the analysis, most assets are at high risk, requiring special attention in system security management. This research yielded control recommendations in the form of strengthening access security, managing user access rights, monitoring system activity, and regular data maintenance and backup. The findings are projected to serve as evaluation material for companies to tighten HRIS system security and minimize risks that could disrupt operations.]]>
