Claim Missing Document
Check
Articles

Found 40 Documents
Search

Evaluasi dan Rekomendasi Perbaikan Proses Pemenuhan Permintaan Layanan Teknologi Informasi: Studi Kasus PT Bank XYZ Permatasari, Yuniar; Aji, Rizal Fathoni
Jurnal Teknologi Dan Sistem Informasi Bisnis Vol 7 No 1 (2025): Januari 2025
Publisher : Prodi Sistem Informasi Universitas Dharma Andalas

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.47233/jteksis.v7i1.1769

Abstract

As digital payments in Indonesia increase, they drive the financial industry, especially banking, to continue their digital transformation. BANK XYZ is one of the banks that is also undergoing digital transformation. To improve banking services that are always available and meet market demand, it is necessary to fulfill the demand for information technology (IT) services. However, there is a problem in this process, namely that many requests are not followed up and closed even though they have been worked on, causing delays in fulfilling user requests. Therefore, this research aims to evaluate the process of fulfilling IT service requests and provide improvement recommendations for the future. The evaluation process in this study uses the COBIT 2019 framework to measure the capability of relevant process areas, and ITIL V4 provides good practices for process improvement recommendations. After data collection and capability measurement on eleven processes, the results showed that three processes were at level two, namely APO09, BAI08, and BAI10. There are five processes at level three, namely BAI07, BAI08, DSS02, DSS03, and DSS04. For the achievement of level four, there are two processes, namely APO14 and BAI06, and one process that has reached the level, namely DSS01. Then, in the gap analysis process, there are three processes that have met the management's targets, namely APO14, BAI06, and DSS01, and eight processes that have not yet met the targets. Recommendations are given for the eight processes that have not yet met the management's expected targets.
Critical Success Factors Implementasi ERP PT Asuransi Kredit Indonesia Elke Cahya Putri; Rizal Fathoni Aji
The Indonesian Journal of Computer Science Vol. 13 No. 6 (2024): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v13i6.4572

Abstract

Information technology plays a vital role in achieving corporate objectives, especially for organizations that rely on data integration through technology. Technology-based information systems assist in processing data into high-quality information. To support this, management must maintain the reliability of information, one way being the implementation of Enterprise Resource Planning (ERP). ERP helps enhance the reliability of information for decision-making. This study analyzes the Critical Success Factors (CSFs) in the implementation of ERP at PT Asuransi Kredit Indonesia (PT Askrindo). The primary focus is to identify relevant CSFs to ensure that ERP implementation aligns with the targets of corporate management and the Insurance Holding Company. This supports the shared information technology services initiative toward a single multi-tenant platform within the Insurance Holding environment. The research methods include a case study, literature review, categorization, and qualitative interviews. The results show that PT Askrindo must ensure the success of key factors at various stages of ERP implementation to achieve its goals
Cloud Migration Analysis for Core System Infrastructure in Financial Services: Study Case PT XYZ Hadinata, Stefanus Kevin; Aji , Rizal Fathoni
The Indonesian Journal of Computer Science Vol. 13 No. 5 (2024): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v13i5.4433

Abstract

Currently, cloud computing adoption is being utilized in the financial sector for its flexibility and innovative technologies. This study assesses PT XYZ's readiness to migrate its core systems to a cloud environment, which is crucial for maintaining competitive agility and robustness in Indonesia's financial services sector. Focusing on the diffusion of innovations (DOI) model and the technology-organization-environment (TOE) framework, the research examines ten factors influencing PT XYZ's migration strategy. The analysis identifies challenges related to PT XYZ's aging on-premises infrastructure, including server procurement delays and maintenance issues, which impact operational efficiency. Through semi-structured interviews with key IT personnel, this study explores perceptions of the benefits and challenges of cloud computing, as well as regulatory compliance, aiming to guide PT XYZ toward a successful cloud migration that ensures continuity, compliance, and enhanced operational capabilities. The findings contribute to understanding the relative advantages, such as cost savings and security concerns, complexity, compatibility, technology readiness, top management support, firm size, competitive pressure, and regulatory factors. PT XYZ’s decision to migrate aligns with all the factors for cloud computing adoption, with the relative advantage, complexity, compatibility, technological readiness, and top management support being high impacts on the migration decision, while regulatory compliance presents a challenge for the financial services industry in Indonesia].
Perancangan Kapabilitas Security Operations Center di Public Cloud Computing Environment: Studi Kasus PT. XYZ Fadholi, M Ryan; Rizal Fathoni Aji
The Indonesian Journal of Computer Science Vol. 14 No. 4 (2025): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v14i4.4945

Abstract

Cybersecurity has become a major challenge for financial institutions, including PT. XYZ. Although PT. XYZ has established a Security Operations Center (SOC) to safeguard its digital assets, the current SOC team lacks optimal capability to monitor the organization's newly adopted public cloud environment. This gap increases the risk of undetected cyberattacks targeting the cloud infrastructure. This study aims to develop recommendations for enhancing SOC capabilities in PT. XYZ’s public cloud environment using the Design Science Research (DSR) method. The initial SOC condition was analyzed through document review and observation. Capability gaps were identified through focus group discussions (FGD) guided by the SOC-CMM screening tool. The NIST Cybersecurity Framework (CSF) was then employed as the foundation for defining target capabilities. The study resulted in a set of 35 practical recommendations to improve the SOC team's capabilities, categorized according to the SOC-CMM domains.
Assessing Information Security Awareness Among Indonesian Government Employees: A Case Study of the Meteorology, Climatology, and Geophysics Agency Prasetyo, Aji; Aji, Rizal Fathoni; Wibowo, Wahyu Setiawan
Journal of Information Systems Engineering and Business Intelligence Vol. 11 No. 2 (2025): June
Publisher : Universitas Airlangga

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.20473/jisebi.11.2.126-142

Abstract

Background: Cybersecurity is important for government agencies and the usefulness shows the need for a thorough understanding of information security awareness (ISA) among employees in order to enhance protective measures and ensure compliance with regulations. The Meteorology, Climatology, and Geophysical Agency (BMKG) of Indonesia is very important in providing essential national data and this responsibility shows the need to assess and promote ISA among the employees. The efforts to ensure a robust ISA culture can allow BMKG to safeguard sensitive meteorological and geophysical data, strengthen operational resilience, maintain public trust, and mitigate potential cyber threats that are capable of compromising national security.  Objective: This study aimed to evaluate the level of organizational ISA among employees at BMKG and to improve measures considered important.  Methods: The Human Aspects of Information Security Questionnaire (HAIS-Q) was administered as the reference model to assess the knowledge, attitudes, and behaviors of employees regarding information security. A descriptive statistical analysis and Partial Least Squares Structural Equation Modelling (PLS-SEM) were further applied to analyze data from 459 BMKG employees across various security domains, including password management, email use, internet use, social media use, mobile device security, and incident reporting.  Results: The results showed that BMKG employees possessed a high overall level of ISA (88.06%) with the average knowledge, attitudes, and behaviors recorded to be 88.06%, 81.89%, and 80.74%, respectively. Meanwhile, specific areas such as email use (78.70%) and mobile device use (73.19%) had only moderate awareness. The structural model analysis also showed that behavior exerted the most significant influence on ISA (β = 0.423), followed by attitude (β = 0.289) and knowledge (β = 0.214).  Conclusion: The overall awareness level was positive but there was a need for targeted efforts in password management, email use, and mobile device security to improve ISA practices. Moreover, the implementation of comprehensive information security policies, regular training, and organizational support was suggested to be important for fostering a robust security culture within BMKG.  Keywords: Information Security Awareness, Cybersecurity, BMKG, PLS-SEM, Government Employees, Indonesia
Implementation of Cloud Native Architecture in PT XYZ's Accounting System Tri Saputro, Tedy; Fathoni Aji, Rizal
The Indonesian Journal of Computer Science Vol. 13 No. 4 (2024): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v13i4.4099

Abstract

Microservices are commonly used as an architectural style in SaaS applications. Compared to monolithic architectures, they offer various advantages, such as fault tolerance mechanisms, scalability, and ease of customization. However, microservice architectures cannot stand alone. This is because microservices are based on distributed services and data isolation, and such systems will rely heavily on supporting infrastructure, Therefore, a cloud-native architecture is necessary, taking a philosophical approach to building applications that can fully leverage the cloud-native application model, with the microservice architecture style as one of the key components. This study delves into the integration of cloud-native architecture into the accounting system application of PT XYZ, an IT company specializing in consulting and software integration. The researcher examined the five elements of cloud-native architecture, evaluated them using the twelve-factor app, and identified areas for improvement for PT XYZ
A Comprehensive Case Study Rekomendasi Implementasi 11 Kontrol keamanan informasi baru ISO 27001:2022 di Perusahaan HealthTech XYZ: Studi Kasus Komprehensif tentang Meningkatkan Kepatuhan dan Keamanan Siber di HealthTech Company Suryo Wibowo, Bimantoro; Rizal Fathoni Aji
The Indonesian Journal of Computer Science Vol. 13 No. 4 (2024): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v13i4.4166

Abstract

This study aims to recommend the implementation of new annex controls in ISO 27001:2022, guided by ISO 27002:2022, for PT XYZ. The research questions addressed are: (1) What are the existing gaps between PT XYZ's current information security controls and the requirements of ISO 27001:2022? (2) What specific recommendations can close these gaps? Using a qualitative case study approach, data were collected in May 2024 through purposive sampling, interviews, observations, and document analysis. Findings reveal that while some controls are partially implemented, others lack full documentation and SOPs. Detailed recommendations were provided to ensure compliance with updated standards, emphasizing formalization into SOPs. This study offers practical guidance for organizations transitioning to ISO 27001:2022, enhancing cybersecurity readiness and compliance with stringent data protection regulations.
Audit Keamanan Informasi Pemasok Pada Perusahaan Penyelenggara Sistem Pembayaran XYZ Mulyadi, Farroh Sakinah; Rizal Fathoni Aji
The Indonesian Journal of Computer Science Vol. 13 No. 4 (2024): The Indonesian Journal of Computer Science
Publisher : AI Society & STMIK Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33022/ijcs.v13i4.4167

Abstract

The relationship between companies and suppliers is one of the manifestations of the company's resource strategy to remain productive and competitive. However, suppliers also create information security risks, such as cybersecurity threats and data protection. To ensure the security of the company's information assets, PT XYZ implements an information security management system based on ISO / IEC 27001: 2022 for all company information assets, both managed by internal and external parties (suppliers). Therefore, this research aims to measure suppliers' criticality level with an information technology asset risk management approach. The company will evaluate the critical suppliers's information security control implementation through systematic monitoring processes such as audits and due diligence. The results of this study indicate that two suppliers at PT XYZ with a high level of criticality need to be audited, and three suppliers with a medium level of criticality need to conduct due diligence.
Design of GeoAi-Based Control Tower Dashboard Application Infrastructure at PT. XYZ Siregar, Maulana Bobby Rakhman; Aji, Rizal Fathoni
Sistemasi: Jurnal Sistem Informasi Vol 13, No 1 (2024): Sistemasi: Jurnal Sistem Informasi
Publisher : Program Studi Sistem Informasi Fakultas Teknik dan Ilmu Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32520/stmsi.v13i1.3466

Abstract

The increasing demand for technology and data necessitates the enhancement of infrastructure for the Control Tower Dashboard Geographic Information System (CTD GIS) application at PT XYZ. The current system operates within a Virtual Private Server (VPS) Cloud environment but faces challenges such as data loading delays and increasing demands for broader functionalities. To address these issues, a comprehensive future infrastructure recommendation is outlined, including upgrading ArcGIS Server, integrating with Portal for ArcGIS, implementing ArcGIS Datastore, utilizing NAS Storage, and incorporating Script & VGA Server. Through the proposed infrastructure changes, the CTD GIS application is poised to navigate the dynamics of data growth, providing geospatial insights to support better decision-making processes at PT XYZ.
Application of Blockchain for Tracking Government Funds: Case Studies on Distribution of Regional Transfer Funds Hakim, Lutfi; Aji, Rizal Fathoni
Sistemasi: Jurnal Sistem Informasi Vol 13, No 1 (2024): Sistemasi: Jurnal Sistem Informasi
Publisher : Program Studi Sistem Informasi Fakultas Teknik dan Ilmu Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32520/stmsi.v13i1.3481

Abstract

Tracking of Regional Transfer Funds from the Central Government to Regional Governments cannot be carried out optimally which causes the potential for fraud. The tracking in question is related to how long the funds have been sitting in the regional bank before being distributed, when should the funds be distributed, and whether the funds have been used to pay for a predetermined project. This research is a qualitative research through literature studies, observations and interviews which aims to analyze whether blockchain can be the right solution for the problem of tracking regional transfer funds. Based on an analysis using the Enterprise Blockchain Design Framework (EDBF), blockchain can be an alternative solution to this problem, especially if it is built with the characteristics of a Private/Consortium Permitted Blockchain using Hyperledger Fabric. There are five participants in the proposed design starting from government agencies and banking. The results of this design were verified by system developers at the Ministry of Finance, the results of this technology have the potential to be applied and overcome the problem of tracking regional transfer funds.