Claim Missing Document
Check
Articles

Found 2 Documents
Search

Manajemen Risiko pada Teknologi Informasi: Studi Kasus pada Perusahaan Jasa Sujatmiko Dwi Kuncoro; Rafie Ahza Ghaisan; Muhammad Usamah Zaky; Anita Wulansari
Scientica: Jurnal Ilmiah Sains dan Teknologi Vol. 1 No. 3 (2023): Scientica: Jurnal Ilmiah Sains dan Teknologi
Publisher : Komunitas Menulis dan Meneliti (Kolibi)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.572349/scientica.v1i3.601

Abstract

Penelitian ini menyelidiki manajemen risiko di bidang teknologi informasi (TI) dalam konteks perusahaan jasa dengan menggunakan metode Systematic Literature Review (SLR). Hal ini berfokus pada bagaimana perusahaan jasa mengidentifikasi risiko-risiko penting terkait TI, metode atau kerangka kerja yang digunakan untuk manajemen risiko TI, penilaian dampak risiko TI terhadap operasi dan keberlanjutan bisnis, dan tantangan yang dihadapi dalam mengelola risiko TI. Studi tersebut mengidentifikasi 14 artikel yang relevan dan membahas penggunaan kerangka kerja seperti ISO 31000 dan COBIT 5 dalam mengelola risiko TI. Penelitian ini juga menyoroti tantangan yang dihadapi oleh perusahaan jasa dalam mengelola risiko TI, termasuk kompleksitas teknologi, ketergantungan data dan sistem TI, serta keterbatasan sumber daya. Studi ini bertujuan untuk memberikan wawasan berharga mengenai strategi dan praktik yang digunakan oleh perusahaan jasa dalam mengelola risiko TI, yang pada akhirnya mendukung dalam memperkuat kemampuan manajemen risiko TI dan memitigasi potensi dampak buruk terhadap operasional dan keberlanjutan bisnis.
Evaluation of Information Security Management Capability Level with COBIT 5 Dita Ayu; Asif Faroqi; Anita Wulansari
bit-Tech Vol. 8 No. 1 (2025): bit-Tech
Publisher : Komunitas Dosen Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32877/bt.v8i1.2682

Abstract

Information security is a crucial aspect of information technology management, especially in government institutions such as the Department of Communication and Informatics (DISKOMINFO), which often faces challenges such as cyberattacks, lack of formal documentation, and limited resources in managing risks and securing data. These challenges hinder the organization’s ability to protect sensitive information and maintain public trust. This study evaluates the maturity level of information security governance at DISKOMINFO of Sampang Regency using the COBIT 5 framework, focusing on three domains: APO12 (Manage Risk), APO13 (Manage Security), and DSS05 (Manage Security Services). The method used is a case study with a descriptive qualitative approach through interviews and documentation. The results show that all three processes are at Level 1 (Performed Process), with 40.34% in the Partially Achieved category for APO12, 84.60% in the Largely Achieved category for APO13, and 57.23% in the Largely Achieved category for DSS05, where processes are carried out but not formally documented or standardized. There is a lack of monitoring and continuous improvement, making the governance reactive rather than proactive. Improvements are needed through development of policies, formal procedures, and more organized, sustainable security controls. Increasing employee awareness and allocating resources for information security are also critical. This research provides novelty by evaluating three COBIT 5 domains (APO12, APO13, DSS05) in a local government context, which has rarely been done. The findings offer a comprehensive maturity mapping as a strategic reference for improving information security governance in local government institutions.