JURIKOM (Jurnal Riset Komputer)
Vol. 13 No. 3 (2026): Juni 2026

Information Security Risk Analysis and Identification in the Tulang Bawang Data Portal Application Using the OCTAVE Allegro Method

Wahyu Aji Pulungan (Universitas Lampung, Bandar Lampung)
Allwine (Universitas Lampung, Bandar Lampung)



Article Info

Publish Date
30 Jun 2026

Abstract

Information technology has become an essential component in supporting organizational and governmental operations. In line with the implementation of E-Government and the Satu Data Indonesia initiative, the Tulang Bawang Regency Government, through its Communications and Information Office (Diskominfo), developed the Tulang Bawang Data Portal to facilitate centralized data management. Despite its strategic role, the system is exposed to various information security risks that may threaten the confidentiality, integrity, and availability of data if not properly addressed. This study aims to systematically identify, assess, and prioritize information security risks within the Tulang Bawang Data Portal using the OCTAVE Allegro method. A qualitative risk assessment approach was employed, incorporating asset identification, threat analysis, impact evaluation, and risk prioritization based on defined risk measurement criteria. The findings indicate the presence of four significant risks, with Risk Relative Scores (RRS) ranging from 14 to 23. Notably, 75% of the identified risks are classified as high priority. The most critical risk is associated with database misuse, which poses a substantial threat to sensitive government data. To address these risks, several mitigation strategies are recommended, including the enhancement of access control mechanisms, periodic security audits, user awareness programs, and the establishment of comprehensive data governance policies. This study contributes to the field by providing a structured and practical risk assessment framework tailored to government-based data portal systems, thereby supporting more effective and informed decision-making in information security management.

Copyrights © 2026






Journal Info

Abbrev

jurikom

Publisher

Subject

Computer Science & IT Control & Systems Engineering Electrical & Electronics Engineering

Description

JURIKOM (Jurnal Riset Komputer) membahas ilmu dibidang Informatika, Sistem Informasi, Manajemen Informatika, DSS, AI, ES, Jaringan, sebagai wadah dalam menuangkan hasil penelitian baik secara konseptual maupun teknis yang berkaitan dengan Teknologi Informatika dan Komputer. Topik utama yang ...