Claim Missing Document
Check
Articles

Found 2 Documents
Search

Risk Management in Information Systems: Applying ISO 31000:2018 and ISO/IEC 27001:2022 Controls at PMI's Central Clinic Basri, Wahyu Setiawan; Ayu, Adinda Laras
International Journal for Applied Information Management Vol. 4 No. 1 (2024): Regular Issue: April 2024
Publisher : Bright Institute

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.47738/ijaim.v4i1.70

Abstract

PMI Main Clinic is a national association organization in Indonesia engaged in health services. PMI Main Clinic has an information system to support its health service process. One of the information systems is the Clinic Management Information System (Smart Klinik), this information system is used to record patients from the beginning of the patient's arrival to register until the patient gets the medicine. PMI Main Clinic has never implemented information system risk management before. If a risk occurs at the PMI Main Clinic, the PMI Main Clinic can suffer huge losses and hamper the health service process. To find out the possible risks that can occur at PMI, the ISO 31000: 2018 method is used and the control standard uses ISO 27001: 2022. It can be seen from the 22 possible risks, there are 4 possible risks with very high levels, 2 possible risks with high risk levels, 10 possible risks with moderate risk levels, and 6 possible risks with low risk levels. The control recommendations used ISO/EIC 27001:2022 from the result Equipment maintenance, Information backup, Protection against malware, Installation of software on operational systems, Monitoring activities, Web filtering, Network’s security, Security of network services, Segregation of networks, Secure system architecture and engineering principles.
Assessment of IT Risk Management at the Faculty of Industrial Engineering, Telkom University, Utilizing the COBIT 2019 Framework's APO12 Domain with LAM INFOKOM Standards Mapping Ayu, Adinda Laras; Lubis, Muharman; Abdurrahman, Lukman; Zamzami, Ikhlas Fuad; Alqahtani, Raied Ali; Ramadhani, Rafian
Electronic Integrated Computer Algorithm Journal Vol. 1 No. 2 (2024): VOLUME 1, NO 2: APRIL 2024
Publisher : Yayasan Asmin Intelektual Berkah

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62123/enigma.v1i2.21

Abstract

In the era of rapid technological development, Information Technology (IT) plays a critical role in the operational aspects of companies/organizations, including educational institutions like Telkom University. The proper implementation of IT can enhance system efficiency and integration within an institution. IT Governance aims to ensure that the measurement of effectiveness and efficiency within an agency aligns with its strategic goals. Telkom University, especially the Faculty of Industrial Engineering, is one of the educational institutions focusing on the development of Information Technology to ensure that the information systems and technologies used in academic activities are effective. COBIT 2019 is a framework developed by ISACA to organize and implement strategies in information management and governance with international standards. In this analysis, the focus is on the APO12 domain of COBIT 2019, which plays a role in IT risk management. The Faculty of Industrial Engineering also requires standardization with LAM-INFOKOM, an accreditation body that establishes standards for risk management in informatics and computer science. This research aims to map the standards of LAM-INFOKOM and COBIT 2019 to determine the capability level of Risk Management. Additionally, it aims to provide recommendations for potential improvements in three aspects: people, process, and technology. The expected outcome of this research is to enhance risk management at the Faculty of Industrial Engineering, Telkom University, to align with LAM-INFOKOM standards and the institution's vision and mission. The results of the IT Risk Management analysis using the COBIT 2019 framework can also serve as a structured approach for other universities in improving IT Governance.