Article Per Year (5 Year)
p-Index From 2020 - 2025
2.647
P-Index
This Author published in this journals
All Journal TEKNIK INFORMATIKA Techno.Com: Jurnal Teknologi Informasi CESS (Journal of Computer Engineering, System and Science) Seminar Nasional Teknologi Informasi Komunikasi dan Industri J I M P - Jurnal Informatika Merdeka Pasuruan Jurnal Nasional Komputasi dan Teknologi Informasi Jurnal Informasi dan Komputer Journal of Applied Engineering and Technological Science (JAETS) Indonesian Journal of Electrical Engineering and Computer Science KLIK: Kajian Ilmiah Informatika dan Komputer JUSTIN (Jurnal Sistem dan Teknologi Informasi) Journal of Information Technology and Cyber Security
Rahmad Kurniawan
Universitas Riau
Aerospace Engineering Automotive Engineering Civil Engineering, Building, Construction & Architecture Computer Science & IT Control & Systems Engineering Decision Sciences, Operations Research & Management Electrical & Electronics Engineering Engineering Industrial & Manufacturing Engineering Mathematics Neuroscience Transportation Other

Published : 19 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search
Journal : Journal of Information Technology and Cyber Security

 1 
Risk Management Analysis of Information Security in an Academic Information System at a Public University in Indonesia: Implementation of ISO/IEC 27005:2018 and ISO/IEC 27001:2013 Security Controls Meitarice, Sonya; Febyana, Lidya; Fitriansyah, Aidil; Kurniawan, Rahmad; Nugroho, Riki Ario
Journal of Information Technology and Cyber Security Vol. 2 No. 2 (2024): July
Publisher : Department of Information Systems and Technology, Faculty of Intelligent Electrical and Informatics Technology, Universitas 17 Agustus 1945 Surabaya

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.30996/jitcs.12099

Abstract

An online academic information system is potentially exposed to various threats from internal and external sources, which may compromise the institution's objectives if not managed effectively and appropriately. Academic portals often experience issues such as server downtime and unauthorised access attempts. However, there is no specific documentation dedicated to managing these issues. This study aims to analyze risk management in information security for the academic portal of Universitas Riau, Indonesia. The study employs the International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 27005:2018 standard and ISO/IEC 27001:2013 security controls, following four key stages: context establishment, risk assessment, risk treatment, and recommendations. The findings identify eight categories of information system assets, 30 identified threats, and 43 vulnerabilities, including two high-risk categories, 19 medium-risk categories, and 22 low-risk categories. Of the 43 vulnerabilities, 21 risks required risk modification, four required risk avoidance, and four required risk sharing. Fourteen risks, which can be managed through risk retention (acceptance of risk), fall under the category of risk acceptance. Furthermore, ISO/IEC 27001 suggests that implementing control recommendations can minimize and effectively address these risks. Nevertheless, this study focuses primarily on information security risks and does not extensively cover related areas such as data privacy, regulatory compliance, or operational risks. Future research can explore the effectiveness of training programs and awareness campaigns in reducing human-related risks, such as phishing and social engineering attacks.
Co-Authors Abdul Somad Batubara Ahmad Efendi Alwis Nazir Arisman Adnan Avisha Delinda Jukris Benny Sukma Negara Daqiqil Id, Ibnu Elvia Budianita Elvia Budianita Elvia Budianita Fadhilah Syafria Fadhilah Syafria Fadhilah Syafria Fatayat Febyana, Lidya Fitra Lestari Fitra Lestari Fitri Insani Fitriansyah, Aidil Habibi Al Rasyid Harpizon Ibnu Afdhal Ibnu Daqiqil ID Iis Afrianty Ilyas Husti Ismar Puadi Ivo Dwi Ananda Iwan Iskandar Iwan Iskandar Iwan Iskandar Iwan Iskandar Luh Kesuma Wardhani m azwan Muhammad Affandes Muhammad Irsyad Muhammad Irsyad Nazruddin Safaat H Novi Yanti Pizaini Pizaini Pratiwi, Trya Ayu Riyan Wibowo Saputra Roni Salambue Saputra, Hendy Silfia Silfia Silvi Ana Sonya Meitarice Sukamto, Sukamto Surya Agustian Syamsudhuha Syamsudhuha Trya Ayu Pratiwi Yanti Andriyani