Claim Missing Document
Check
Articles

Found 3 Documents
Search

Information Security Evaluation at Hospital Using Index KAMI 5.0 and Recommendations Based on ISO/IEC 27001:2022 Wibawa, I Nyoman Adi Artha; Susila, Anak Agung Ngurah Hary; Pasirulloh, Muhammad Alam
Journal of Information System and Informatics Vol 6 No 4 (2024): December
Publisher : Universitas Bina Darma

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.51519/journalisi.v6i4.949

Abstract

Bali Mandara Regional Hospital integrates information technology into its healthcare services, but ransomware attacks pose significant risks to data security. In accordance with the 2016 Indonesian Ministry of Communication and Informatics regulation, Electronic System Operators (PSE) are required to ensure information security, emphasizing confidentiality, integrity, and availability. To support this, the National Cyber and Crypto Agency introduced the Index KAMI, an evaluation tool aligned with ISO/IEC 27001 standards. This study evaluates the hospital’s information security using Index KAMI 5.0, yielding a score of 177, which classifies its readiness as “Not Eligible” for ISO 27001 compliance. Recommendations for improvement include establishing clear governance policies, implementing systematic risk management, enhancing asset management with integrated inventories, and strengthening data protection through access control and encryption. Additional measures involve improving physical security with surveillance systems and fostering stronger vendor relationships through binding SLA agreements. By adopting these measures, Bali Mandara Regional Hospital can enhance its security system, protect patient data, and achieve compliance with international standards.
Perancangan Arsitektur Enterprise Menggunakan Framework TOGAF (Studi Kasus: Badan Pusat Statistik Provinsi Bali) Armi, Nyoman Meira Dewantari; Susila, Anak Agung Ngurah Hary; Pasirulloh, Muhammad Alam
Journal of Comprehensive Science Vol. 3 No. 8 (2024): Journal of Comprehensive Science (JCS)
Publisher : Green Publisher Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59188/jcs.v3i8.836

Abstract

Badan Pusat Statistik merupakan lembaga pemerintahan yang menjalankan fungsi pemerintahan di bidang layanan publik. Mereka telah memiliki sistem informasi untuk mendukung aktivitas perusahaan. Namun, belum terdapat pedoman perancangan sistem informasi, sehingga sistem tidak memenuhi kebutuhan. Oleh karena itu, dibutuhkan perancangan arsitektur perusahaan. Perancangan dibuat menggunakan TOGAF ADM dalam lima fase, meliputi fase persiapan, visi arsitektur, arsitektur bisnis, arsitektur sistem informasi, arsitektur teknologi. Tujuan dari penelitian ini adalah untuk membuat rancangan arsitektur perusahaan yang mendukung visi dan misi perusahaan. Data dikumpulkan dengan menggunakan metode wawancara, observasi, dan analisis dokumen. Hasil diperoleh berupa rancangan arsitektur dalam bentuk katalog dan diagram.
Evaluation of the Information Security Level at the Department of Communication and Informatics of Tabanan Regency Using ISO/IEC 27001:2022 Arinata, Gede Ade Rangga; Susila, Anak Agung Ngurah Hary; Pasirulloh, Muhammad Alam
JITTER: Jurnal Ilmiah Teknologi dan Komputer Vol. 7 No. 1 (2026): JITTER, Vol.7, No.1, April 2026
Publisher : Program Studi Teknologi Informasi, Fakultas Teknik, Universitas Udayana

Show Abstract | Download Original | Original Source | Check in Google Scholar

Abstract

Information security is a crucial aspect in maintaining the confidentiality, integrity, and availability of data, particularly within government environments that manage digital-based public services. The Tabanan Regency Communication and Informatics Office plays a strategic role in managing information systems and providing public information services, thus requiring the implementation of a standardized and measurable information security management system. This study aims to evaluate the level of implementation of the Information Security Management System (ISMS) at the Tabanan Regency Communication and Informatics Office based on the ISO/IEC 27001:2022 standard and to formulate improvement recommendations by referring to the control guidelines in ISO/IEC 27002:2022. The research methods employed include observation, interviews, and document analysis to identify the conformity between the existing information security conditions and the 93 security controls listed in Annex A of ISO/IEC 27001:2022. The evaluation process was conducted using a gap analysis approach to determine the level of compliance and identify gaps in the implementation of information security controls. The results indicate that the overall level of information security implementation falls within the sufficient category; however, several controls have not yet been optimally implemented. The controls requiring further attention include information authentication, access rights management, and the readiness of information and communication technology to support business continuity. Based on these findings, this study proposes technical recommendations, including the implementation of multi-factor authentication, the development and strengthening of information security policies, the enhancement of information and communication technology infrastructure, and the conduct of regular information security awareness training. These recommendations are expected to serve as a reference for the Tabanan Regency Communication and Informatics Office in improving the effectiveness of ISMS implementation in accordance with international standards.