Michael Imanuel
Universitas Katolik Musi Charitas

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

Evaluasi Manajemen Risiko Teknologi Informasi Menggunakan Framework Cobit 5 Pada Rumah Sakit Wleowleo Samuel Dimas Sutikno; Michael Imanuel; Johan Abisay Tambunan; Sri Andayani
Jurnal Tata Kelola dan Kerangka Kerja Teknologi Informasi Vol. 12 No. 1 (2026): April 2026
Publisher : Universitas Komputer Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.34010/jtk3ti.v12i1.19318

Abstract

Rumah Sakit XY memiliki ketergantungan tinggi pada sistem informasi terintegrasi seperti SIMRS dan RME. Risiko kegagalan sistem dapat berdampak langsung pada keselamatan pasien. Penelitian ini bertujuan mengevaluasi tata kelola risiko TI menggunakan COBIT 5 domain APO12 (Manage Risk). Metode penelitian menggunakan pendekatan kualitatif deskriptif melalui wawancara mendalam. Hasil analisis mendetail pada sub-domain APO12.01 hingga APO12.06 menunjukkan bahwa rumah sakit telah menjalankan seluruh proses manajemen risiko dasar, mulai dari pengumpulan data insiden, analisis dampak klinis, hingga respon insiden yang terstruktur. Tingkat kapabilitas dinilai berada pada Level 2 (Managed Process). Meskipun aktivitas pengelolaan risiko berjalan rutin dan dilaporkan ke Komite Mutu, ketiadaan dokumen formal seperti Risk Register terpusat menjadi kendala utama untuk mencapai level yang lebih tinggi. Kata Kunci – Manajemen Risiko TI; COBIT 5; APO 12; Rumah Sakit.
Analisis Manajemen Risiko Sistem Informasi Menggunakan Standar ISO 31000:2018 pada PT WleoWleo Michael Imanuel; Kevin Alexander Yech; Sri Andayani
Jurnal Tata Kelola dan Kerangka Kerja Teknologi Informasi Vol. 12 No. 2 (2026): Agustus 2026
Publisher : Universitas Komputer Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.34010/jtk3ti.v12i2.20269

Abstract

PT ABC is a property developer that relies heavily on the utilization of information technology in its operations. This dependency creates system vulnerabilities that could potentially disrupt business continuity. This study aims to analyze and evaluate information systems risk management at the company by applying the ISO 31000:2018 framework. The research stages include defining the scope, identifying assets and risks, analyzing likelihood and impact, evaluating risk levels, and determining treatment strategies. The results mapped 21 possible risk threats originating from hardware, software, data, and user factors. The risk matrix evaluation indicates that the most critical threats are at a very high level, such as power outages, cyberattacks, and data backup failures. To address these vulnerabilities, risk treatments are formulated with a dominance of mitigation actions, followed by risk avoidance, acceptance, and sharing. This research contributes as a strategic recommendation guide for company leaders to minimize risks and enhance the security of their information asset governance.