I Gusti Ngurah Made Putra Eryawan
Udayana University

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

Information Security Risk Strategy at PT. X Using NIST SP 800-30 I Gusti Ngurah Made Putra Eryawan; Gusti Made Arya Sasmita; Anak Agung Ketut Agung Cahyawan Wiranatha
Jurnal Ilmiah Merpati (Menara Penelitian Akademika Teknologi Informasi) Vol 9 No 3 (2021): Vol. 9, No. 3, December 2021
Publisher : Lembaga Penelitian dan Pengabdian kepada Masyarakat Universitas Udayana

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.24843/JIM.2021.v09.i03.p03

Abstract

Information security is a vital aspect that must be considered in use of information technology devices by active users. PT. X runs a business that applies information technology related to distribution aspects through company resource planning. Information technology formed assets IT infrastructure, information systems, operating procedures, and network infrastructure. This asset has a potential threat that causes disruption resulting losses. This problem arises to cope through the response to the risk strategy. NIST SP 800-30 method has a flexible risk perspective for the organization and federation standards of American security. Research is divided into risk measurement as a risk, risk mitigation as risk planning, and risk evaluation embodied risk reports. Results of the research show the value of risk through the calculation of the likelihood and impact matrix of the highest threat is at a low level is 14, medium at 12, and high of 4 are categorized good enough. Keywords: Risk Strategy, Information Security, NIST SP 800-30, Risk