Claim Missing Document
Check
Articles

Found 2 Documents
Search

Penilaian Keamanan Informasi Menggunakan Pendekatan Indeks Keamanan Informasi 4.0 dan Vulnerability Asessment Juliharta, I Gede Putu Krisna; Erawan, Ayu Pradnyandari Dananjaya
Brahmana : Jurnal Penerapan Kecerdasan Buatan Vol 6, No 1 (2024): Edisi Desember
Publisher : LPPM STIKOM Tunas Bangsa

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.30645/brahmana.v6i1.526

Abstract

In the era of rapidly evolving information technology, information security has become increasingly crucial. Threats to data and information are becoming more diverse and complex, making information security preparedness the key to protecting an organization's critical assets. XYZ City, with its commitment to optimizing the use of information technology, recognizes the importance of information security. Therefore, the Information and Communication Technology Office (Diskominfo) of XYZ City conducted an assessment using the Information Security Index (KAMI) to measure, analyze, and improve the maturity of information security in its organization. The results of the KAMI assessment indicate that XYZ City has achieved a good evaluation result. While there are some areas that show good performance, such as Risk Management and Technology and Information Security, there are still areas that need to be strengthened.
Pengukuran Risiko Indeks Keamanan Informasi(Kami) Bagian Tata Kelola Kota XYZ Menggunakan Framework Nist Sp 800-30 Juliharta, I Gede Putu Krisna; Adrian, A; Erawan, Ayu Pradnyandari Dananjaya
Brahmana : Jurnal Penerapan Kecerdasan Buatan Vol 6, No 1 (2024): Edisi Desember
Publisher : LPPM STIKOM Tunas Bangsa

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.30645/brahmana.v6i1.527

Abstract

The XYZ City Government has conducted an assessment using the KAMI Index, revealing that the governance aspect is weaker compared to other areas. Given this issue, a risk assessment was conducted to provide recommendations for the City of XYZ to improve its information security. The risk assessment was carried out using the NIST SP 800-30 framework, designed as a guideline for evaluating risk management. There are five risk categories: Very Low, Low, Moderate, High, and Very High. Based on the assessment using NIST 800-30, several critical areas for improvement were identified: Policy with a High level of risk, Data and Information with a Very High level of risk, Information Security Education with a Moderate level of risk, Accountability with a High level of risk, Implemented Programs with a High level of risk, Legal Aspects with a High level of risk, BCP and DRP Implementation with a High level of risk, Information Security Standards and Performance with a Moderate level of risk, and Information Security Management with a High level of risk.