Article Per Year (5 Year)
p-Index From 2021 - 2026
4.572
P-Index
This Author published in this journals
All Journal International Journal of Electrical and Computer Engineering Seminar Nasional Aplikasi Teknologi Informasi (SNATI) Jurnal Ilmu Komputer dan Informasi TELKOMNIKA (Telecommunication Computing Electronics and Control) Jurnal Teknologi Informasi dan Ilmu Komputer Journal of Information Systems Engineering and Business Intelligence Sistemasi: Jurnal Sistem Informasi Jurnal RESTI (Rekayasa Sistem dan Teknologi Informasi) JURNAL MEDIA INFORMATIKA BUDIDARMA CogITo Smart Journal METIK JURNAL Jurnal Teknologi Dan Sistem Informasi Bisnis Jurnal Manajemen Pendidikan dan Ilmu Sosial (JMPIS) Jurnal Restikom : Riset Teknik Informatika dan Komputer J-SAKTI (Jurnal Sains Komputer dan Informatika) Eduvest - Journal of Universal Studies Ranah Research : Journal of Multidisciplinary Research and Development Jurnal Sistem Informasi The Indonesian Journal of Computer Science Scientific Journal of Informatics
Rizal Fathoni Aji
Faculty Of Computer Science, Universitas Indonesia
Aerospace Engineering Chemical Engineering, Chemistry & Bioengineering Civil Engineering, Building, Construction & Architecture Computer Science & IT Control & Systems Engineering Decision Sciences, Operations Research & Management Earth & Planetary Sciences Economics, Econometrics & Finance Education Electrical & Electronics Engineering Energy Engineering Health Professions Law, Crime, Criminology & Criminal Justice Library & Information Science Neuroscience Public Health Social Sciences Transportation Other

Published : 40 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 40 Documents
Search

 1   2   3   4 
PEMILIHAN METODE TERBAIK DALAM SISTEM PENDUKUNG KEPUTUSAN UNTUK REKRUTMEN TENAGA SATGAS GERDEMA DI KABUPATEN MALINAU Henri Tetiawadi; Rizal Fathoni Aji
METIK JURNAL Vol 2 No 2 (2018): METIK Jurnal
Publisher : LP3M Universitas Mulia

Show Abstract | Download Original | Original Source | Check in Google Scholar

Abstract

Penelitian ini bertujuan untuk menyusun suatu analisis penilaian dalam rekrutmen tenaga Satgas GERDEMA berdasarkan cara kerja algoritma dua buah metode dalam sistem pendukung keputusan, yaitu Analytical Hierarchy Process dan Profile Matching. Pemakaian metode ini ditujukan untuk memperkecil peluang terjadinya campur tangan yang bersifat probadi dalam keputusan perekrutan tenaga baru, sebab keputusan yang baru adalah berdasarkan hasil keluaran dari proses pengolahan data penilaian dengan dua buah metode di atas.Peneliti hendak melakukan perbandingan cara kerja algoritma dari dua metode itu dan melihat keluaran-keluarannya untuk menentukan metode logika mana yang tepat dipakai dalam permasalahan perekrutan ini, yang kemudian hasil penilaian ini dapat diusulkan sebagai kontribusi peneliti kepada Dinas Pemberdayaan Masyarakat Kabupaten Malinau sebagai suatu framework untuk keperluan perekrutan tenaga Satgas GERDEMA. Sebagai hasil dari penelitian ini adalah berupa dua buah keluaran dari dua buah metode yang dibandingkan itu, yang mana keluaran-keluaran ini berisi informasi perankingan nilai secara descending untuk masing-masing tenaga baru yang akan direkrut sebagai tenaga Satgas GERDEMA.
PENILAIAN RISIKO KEAMANAN INFORMASI APLIKASI ONLINE TRAVEL AGENT: STUDI KASUS PT XYZ Hendra Dwi Hadmanto; Rizal Fathoni Aji; Jihan Prama Nurahman
Jurnal RESTIKOM : Riset Teknik Informatika dan Komputer Vol 3 No 2 (2021): Agustus
Publisher : Program Studi Teknik Informatika Universitas Nusa Putra

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.52005/restikom.v3i2.82

Abstract

PT XYZ adalah perusahaan milik swasta yang bergerak di bidang Online Travel Agent (OTA). PT XYZ menggunakan Aplikasi OTA berupa web dan mobile apps untuk menjalankan bisnis utamanya menjual produk untuk kebutuhan perjalanan dan pariwisata, baik penjualan tiket transportasi, akomodasi dan Event. Aplikasi OTA sebagai aset penting dari PT XYZ harus dilindungi dari segala ancaman yang dapat mengganggu proses bisnis dan memberikan kerugian bagi perusahaan. Adanya berbagai ancaman dan kerentanan terhadap aplikasi OTA membutuhkan adanya hasil Penilaian Risiko Keamanan Informasi (PRKI) yang mampu mendeteksi risiko-risiko beserta dampaknya bagi perusahaan dan seperti apa penanganan terhadap risiko-risiko tersebut. Penentuan metode PRKI pada penelitian ini menggunakan Core Unified Risk Framework (CURF) untuk melakukan evaluasi terhadap sembilan metode PRKI yang dipilih berdasarkan kriteria pemilihan metode PRKI dan dengan melakukan studi literatur terhadap metode PRKI dengan skor tertinggi berdasarkan hasil evaluasi menggunakan CURF. Berdasarkan hasil evaluasi, metode ISO 27005 dipilih untuk menjalankan PRKI aplikasi OTA PT XYZ. Penilaian Risiko aplikasi OTA menggunakan ISO 27005 menghasilkan 16 risiko yang kemudian dipetakan dengan 18 penanganan risiko
DevOps Implementation with Enterprise On-Premise Infrastructure Muhammad Alvin; Rizal Fathoni Aji
JURNAL MEDIA INFORMATIKA BUDIDARMA Vol 7, No 1 (2023): Januari 2023
Publisher : Universitas Budi Darma

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.30865/mib.v7i1.5500

Abstract

Digital transformation is essential in today's VUCA era (volatile, uncertain, complex, ambiguous). As the primary driver of digital transformation, the software has widely adopted agile concepts with agile software development. Its short and iterative cycle makes it adaptable to change. Instead of producing significant changes simultaneously, the development team produces small but frequent changes. The operations team is overwhelmed with implementing these changes, and bottlenecks arise. DevOps comes to remove these bottlenecks and allow the development and operations teams to work together to release the software to users quickly. As part of the digital transformation, PT Logistik Pangan has started to implement DevOps with on-premise infrastructure, which is yet to be optimal. This qualitative research aims to understand the steps taken by the company for implementing DevOps with on-premise infrastructure using GitLab and offers suggestions on how to maximize its implementation. The results show that implementing DevOps with on-premises infrastructure requires additional works to manage the supporting infrastructures for DevOps. Implementation was done incrementally, by adopting DevOps practices one by one at a time. Version control (also known as source control or source code management) is implemented by using GitLab, and requires self-managed GitLab as supporting infrastructure. Continuous integration and continuous delivery are implemented by using GitLab CI/CD, and requires GitLab Runner as supporting infrastructure. Besides the DevOps practices, the company also implement container technology by using Docker that is upgraded to Docker Swarm later, and requires local Docker Registry as supporting infrastructure. All the supporting infrastructures are installed on-premise in company’s data center. It includes servers, storage, and networking that must be managed separately. Some improvements are ensuring mindset and culture have been adjusted, implementing other principles alongside automation, and should continuing beyond these stages: Code, Build, Test, Release, and Deploy. This research has limitation of using GitLab products only. Future research can use other DevOps tools or combine GitLab products with other products.
Utilization of Mobile Network Infrastructure to Prevent Financial Mobile Application Account Takeover Aldiansah Prayogi; Rizal Fathoni Aji
Jurnal RESTI (Rekayasa Sistem dan Teknologi Informasi) Vol 7 No 4 (2023): August 2023
Publisher : Ikatan Ahli Informatika Indonesia (IAII)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.29207/resti.v7i4.5025

Abstract

The Covid-19 pandemic has kept almost everyone at home and forced them to perform online activities using their mobile gadgets. Penetration of the Internet and mobile use is increased as lockdowns or restrictions on meeting face to face are getting used to. This has become a new market for cyber criminals to carry out their actions, such as spreading Social Engineering, sending Phishing, doing Account Takeover, and ending in theft of money in Financial Mobile Applications. Application protection with OTP SMS and Magic Link SMS still has vulnerabilities, with several examples of cases that have occurred. For this reason, this problem was raised to find a solution using the Mobile Network Infrastructure. The method used is to compare the congruence between the phone numbers registered in the application and the phone numbers used. Every time a user signs in or signs up, the Financial Mobile Application will perform Mobile Network Verification to cellular operators via API. Verification is carried out by utilizing the header enrichment in the background of the application process that was installed on the user's smartphone or tablet to the Mobile Network Verification Server. The Financial Mobile Applications can then determine whether the user is using a valid or invalid telephone number. Therefore, the target account cannot be taken over because the cyber criminal's mobile device does not have the phone number attached to the victim’s mobile device. This proof is carried out with four test case scenarios with the sign-up and sign-in processes on the same phone number and different phone numbers between devices and applications. It is hoped that this kind of protection model can reduce losses experienced by users of Financial Mobile Applications due to Account Takeover.
Cybersecurity Improvement Design in Critical Infrastructure PT XYZ Case Study Gunawan, Adi; Rizal Fathoni Aji
The Indonesian Journal of Computer Science Vol. 12 No. 6 (2023): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v12i6.3624

Abstract

Prevention of cyber attacks is an important factor that organizations need to do to support maximum business process continuity. One of the important factors needed is the protection of data and information assets by the critical infrastructure owned. This paper discusses increasing the capacity of critical infrastructure at XYZ organization. The NIST CSF framework is a benchmark assessment tool for critical infrastructure capacity at PT XYZ. The results obtained from the assessment are used to make recommendations for controls related to critical infrastructure. The risk assessment found 107 risk scenarios that led to 11 recommendations for critical infrastructure improvement areas. Prioritization of the resulting recommendations is expected to increase the resilience and capacity of critical infrastructure at PT XYZ in the face of current and future cyber threats.
Perancangan Enterprise Architecture untuk Meningkatkan Indeks SPBE Pemerintah Daerah: Studi Kasus Kabupaten Tasikmalaya Yustisiawandana, Fajri Tsani; Aji, Rizal Fathoni
Jurnal Teknologi Dan Sistem Informasi Bisnis Vol 6 No 1 (2024): Januari 2024
Publisher : Prodi Sistem Informasi Universitas Dharma Andalas

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.47233/jteksis.v6i1.1133

Abstract

Enterprise architecture has become one of the most crucial strategic tools in the development of information technology within an organization, particularly in the public sector such as government, as it can enhance public service performance and reduce costs. In the Regional Medium-Term Development Plan (RPJMD), it was found that the assessment domain index of the National SPBE in Tasikmalaya Regency is 2.0, with the smallest value in the SPBE governance and SPBE management domains. This is partly due to the absence of enterprise architecture as a foundation or reference for implementing SPBE services in Tasikmalaya Regency. Therefore, the research adopts the methodology of the national SPBE framework or master plan as the initial reference in designing enterprise architecture, following the steps outlined in the TOGAF framework. In the business architecture, simplification is applied, reducing seven sub-activities to two new sub-activities, while addressing seven major changes to confront strategic issues. In the data architecture, five significant changes are identified as solutions to data issues in the Tasikmalaya Regency Local Government. The application architecture encompasses six significant solutions to address internal organizational issues and integrate them with the national SPBE architecture. In the technology architecture, two new technologies are added to support business, data, and application processes. In the security architecture domain, nine security additions are implemented to protect the organization from attacks on its information systems. The planning of architectural changes is structured according to the RPJMD period, spanning five years from 2026 to 2030.
Risk Assessment Keamanan Informasi dengan Menggunakan ISO/IEC 27001: Studi Kasus PT Dyandra Promosindo Putra, Mahansa; Aji, Rizal Fathoni
J-SAKTI (Jurnal Sains Komputer dan Informatika) Vol 8, No 1 (2024): EDISI MARET
Publisher : STIKOM Tunas Bangsa Pematangsiantar

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.30645/j-sakti.v8i1.775

Abstract

PT Dyandra Promosindo is a company that operates in the event organizer sector, when carrying out their daily business processes they will always be in contact with important information from their clients. Therefore, it is necessary to carry out a risk assessment to avoid loss of confidentiality, integrity and availability of an information asset. The author wants to know how big the risk impact that threatens the security of information assets and provide control recommendations over these assets. The risk assessment process can be divided into three stages, namely, risk identification through interviews and document review, risk analysis using asset valuation and vulnerability and threat ratings, and finally risk evaluation using risk impact measurements. The results of this research showed that 10 critical information assets were identified and only 1 was in the Tolerable risk mitigation group where the other assets were in the Acceptable group. Recommendations for controls for PT Dyandra Promosindo information assets risk based on Annex A ISO/IEC 27001:2022 show 15 controls consisting of 4 Organizational control, 5 People control, 1 Physical control, and 5 Technological control
Evaluasi Keamanan Informasi Menggunakan ISO/IEC 27001: Studi Kasus PT XYZ Fatih, Dayyan; Aji, Rizal Fathoni
J-SAKTI (Jurnal Sains Komputer dan Informatika) Vol 8, No 1 (2024): EDISI MARET
Publisher : STIKOM Tunas Bangsa Pematangsiantar

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.30645/j-sakti.v8i1.767

Abstract

PT XYZ is one of the government-owned enterprises of the Republic of Indonesia that engaged in agribusiness. PT XYZ already has an information security management system (ISMS), but there are still several obstacles that are found, such as low personnel attention to information security, the need to remain compliant with government regulations, to technical constraints that arise, so PT XYZ wants to improve its information security-related capabilities. This study aims to determine the current condition of the existing ISMS  at PT XYZ and provide recommendations for improving the ISMS. This research uses information security controls based on the ISO/IEC 27001: 2022 standard to get the information security condition gap, then divides the information technology (IT) assets owned by the IT division of PT XYZ into several categories using the ISO/IEC 27005: 2018 standard, and conducts a risk assessment using the gap result data, namely the selected information security controls. Then recommendations were made based on the ISO/IEC 27002:2022 standard. The findings of this study were the discovery of 17 ISO/IEC 27001:2022 control activities whose value results were not maximised. These 17 controls are then divided into 3 categories of recommendations based on the urgency, from the results of the risk assessment.
Pengukuran Kesadaran Keamanan Informasi Pegawai: Studi Kasus PT Meshindo Jayatama Gofur, Abdul; Fathoni Aji, Rizal; Kurniawan, Heri
Jurnal Teknologi Informasi dan Ilmu Komputer Vol 11 No 2: April 2024
Publisher : Fakultas Ilmu Komputer, Universitas Brawijaya

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.25126/jtiik.20241128106

Abstract

Integrasi teknologi dalam organisasi meningkatkan pertukaran informasi yang membuat organisasi lebih rentan terhadap serangan siber. Laporan Publik Hasil Monitoring Keamanan Siber Bulan April 2023 Badan Siber dan Sandi negara (BSSN) menyatakan terdapat 27.476.788 anomali trafik dan tertinggi adalah malware sebanyak 14.235.050. Serangan cyber juga dialami oleh PT Meshindo Jayatama yang memiliki data informasi penting sebagai aset dalam mendukung kegiatan usahanya. Hasil wawancara dengan Presiden Direktur dan Manager Teknologi Informasi (TI) PT Meshindo Jayatama menyatakan bahwa telah terjadi serangan seperti Phishing dan Malware sebanyak 26 kali ditahun 2023. Dengan adanya serangan malware yang mengakibatkan terinfeksinya dokumen laporan perusahaan dan kerugian finansial yang disebabkan oleh faktor kelalaian sumber daya manusia, menjadi pertimbangan perlu untuk dilakukan pengukuran kesadaran keamanan informasi dan mengetahui area yang perlu ditingkatkan. Penelitian ini menggunakan kuesioner sebagai metode pengumpulan data yang disusun berdasarkan Human Aspects of Information Security Questionnaire (HAIS-Q) dengan kerangka kerja Knowledge Attitude Behavior (KAB) dan penskalaan prioritas menggunakan Analytic Hierarchy Process (AHP). Hasil pengukuran kesadaran keamanan informasi pegawai PT Meshindo Jayatama berada dilevel “baik” dengan nilai 83,40%. Dari pengukuran tersebut, diketahui terdapat fokus area pada level “sedang” yaitu penggunaan perangkat mobile dan pengelolaan password. selanjutnya, Peneliti memberikan saran untuk diselenggarakan program pelatihan keamanan informasi dengan media yang menarik dan dilakukan secara berkelanjutan dan perlu diterapkan atau diperbaharui seluruh kebijakan terkait keamanan informasi perusahaan.
The Strategic Role of Information Technology Leadership in Indonesia Stock Exchange Yosephine Novianti; Aditya Reza Firdaus; Rizal Fathoni Aji
The Indonesian Journal of Computer Science Vol. 13 No. 4 (2024): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v13i4.4255

Abstract

Information Technology involvement on an organization may vary. Based on McFarlan’s IT strategic impact grid, it is being classified to be support, factory, turnaround, and strategic. Each quadrant has a different IT leadership position and IT role. PT Bursa Efek Indonesia (IDX) is an institution with high dependency on IT, as they manage online activities, use website, and enter global market. This qualitative study focuses on IDX’s IT leadership implication and role of IT on the system used. The data collection was carried out by exploratory literature studies and semi-structured interview. The findings of this study show that IDX is now in the strategic quadrant. It depicts from McFarlan application mapped which shifts to focus on strategic as The Role of IT, also dominant quadrant category of IT Leadership Implication is strategic.
Co-Authors Abdul Gofur Adi Gunawan, Adi Adi Hartanto Adib Prima Yadri Aditya Reza Firdaus Afganta Chezar Enhartana Agus Widodo Aji Prasetyo Aldiansah Prayogi Anugerah Christian Rompis Atissalam, Lintang Wisesa Axel Shira Sapata Negara Baginda Anggun Nan Cenka Budiarti Camelia Fikrillah Dekaton Punjulhafiidhi Dony Abdul Chalid Elke Cahya Putri Erza Janitradevi Nadine Fadholi, M Ryan Fatih, Dayyan Hadinata, Stefanus Kevin Harjanto, Andro Harry B. Santoso Hendra Dwi Hadmanto Henri Tetiawadi Heri Kurniawan Heri Kurniawan, Heri Heru Suhartanto Hierony Manurung Indra Budi Jihan Prama Nurahman Lutfi Hakim Martin Schrepp Mira Suryani Muhammad Alvin Mulyadi, Farroh Sakinah Permatasari, Yuniar Punto Widharto Putra, Mahansa Setiadi Yazid, Setiadi Siregar, Maulana Bobby Rakhman Suryo Wibowo, Bimantoro Tri Saputro, Tedy Wibowo, Wahyu Setiawan Yosephine Novianti Yustisiawandana, Fajri Tsani Zainal A. Hasibuan Zainudin Saputra Zaldy Suhatman