Claim Missing Document
Check
Articles

Found 3 Documents
Search
Journal : Buletin Poltanesa

Data Quality Risk Management in the Data Quality Issue Management System at Private Banking Using the OCTAVE Allegro Approach Puspa Riri Agustiana; Wilson; Jarot S. Suroso
Poltanesa Vol 26 No 1 (2025): June 2025
Publisher : P3KM Politeknik Pertanian Negeri Samarinda

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.51967/tanesa.v26i1.3312

Abstract

The success of a private bank is significantly dependent on managing the data quality efficiently so that the operations can run effectively, ensure compliance with regulations, and make its customers happy. Having poor data quality can also result in some pretty major monetary losses, operational inefficiencies, or damage to your reputation. This paper explores the application of the OCTAVE Allegro approach within a Supply Chain Data Quality Issue Management System, to deal with these challenges. The use of an information security risk assessment tool such as OCTAVE Allegro enforces a structured method to gather, analyze, and prioritize data quality risks. It details the benefits of its approach — greater risk comprehension, more effective mitigation strategies, and adherence to industry norms. Using this framework, banks can improve decision-making, enforce data governance policies as well as prevent more serious and costlier data-related errors. Implementation challenges such as how to make OCTAVE Allegro applicable to external requirements, and organizational resistance are explored, and this leads to an evaluation of the proposed strategies. In the end, this paper shows that the implementation of OCTAVE Allegro effectively helps private banks construct a safe and trustworthy data ecosystem. The approach enhances how the process supports improved data quality risk management and ultimately success in a growingly data-centered sector.
Information System Audit using COBIT 2019 on Multi Finance Company Handono Warih; Markus Adrian; Jarot S Suroso
Poltanesa Vol 26 No 1 (2025): June 2025
Publisher : P3KM Politeknik Pertanian Negeri Samarinda

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.51967/tanesa.v26i1.3319

Abstract

This research paper explores the extension of COBIT 2019 into a decentralized governance framework, specifically tailored for multi-finance companies in the fintech industry. The fintech sector faces rapid technological advancements, dynamic regulatory environments, and scaling cybersecurity threats; hence, conventional governance models often do not have the flexibility and scalability to cope with these challenges effectively. It addresses these lapses by proposing a framework for governance incorporating the use of decentralized autonomous organizations, blockchain technology for transparency, and artificial intelligence for predictive risk management. The model shall be endowed with smart contracts that guarantee enforcement of compliance in an automated manner, blockchain maintenance of an unalterable audit trail, and the use of AI in finding and mitigating emerging risks in real time. These innovations are also in tune with critical COBOT 2019 domains such as MEA02 (Auditability), APO12 for Risk Management, and DSS05 for Security Services, giving them an all-encompassing and adaptive governance approach. The testing of the proposed model demonstrates significant improvement in operational resilience, regulatory compliance, and stakeholder confidence, especially within high stakes fintech environments. These findings show that incorporating emergent technologies into COBIT 2019 provides added value in governance practices and positions a scalable and future-oriented solution to help navigate the complexities of the fintech sector. This research has contributed to the development of IT governance by showing how a decentralized and technology-integrated framework can transform governance practices in ensuring agility and security within multi-finance operations.
Web-based Information Security Risks The Grading System in High Schools Uses NIST 800-30 Isman Hidayat; Maria Veronika; Jarot Suroso
Poltanesa Vol 26 No 2 (2025): December 2025
Publisher : P3KM Politeknik Pertanian Negeri Samarinda

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.51967/tanesa.v26i2.3512

Abstract

— Digital transformation in the education sector requires institutions to adopt web-based information systems that serve as the backbone of academic and administrative operations. While these platforms improve efficiency and accessibility, they also introduce a growing number of cyber threats that may compromise the confidentiality, integrity, and availability of institutional data. This study seeks to identify, analyze, and prioritize information security risks associated with web-based systems at SMKN 7 Tangerang Regency. The research adopts the NIST SP 800-30 framework as the methodological foundation for risk assessment, ensuring a systematic and comprehensive evaluation process. A quantitative approach was implemented by distributing questionnaires to key stakeholders, including administrators, IT staff, and teachers, in order to capture diverse perspectives on vulnerabilities and threats. The results revealed 15 significant risk factors spanning governance, operational, and technical domains. Among these, the absence of a formal information security policy, the lack of data encryption mechanisms, and the absence of continuous monitoring systems were identified as the highest-priority risks, each reaching a risk score of 12. To address these challenges, the study recommends the development of structured mitigation strategies, such as formulating security policies, implementing encryption protocols, and establishing proactive monitoring tools. The contribution of this research lies in producing a scalable risk assessment model that can be applied to other educational institutions. By doing so, it provides practical guidance for decision-makers and educators in creating a more secure, resilient, and trustworthy digital learning environment.