Analisis Risiko Teknologi Informasi Menggunakan ISO 31000 (Studi kasus: Sistem Penjualan PT Matahari Department Store Cabang Malang Town Square)

Hana Talitha Iddo Driantami (Fakultas Ilmu Komputer, Universitas Brawijaya)
Suprapto Suprapto (Fakultas Ilmu Komputer, Universitas Brawijaya)
Andi Reza Perdanakusuma (Fakultas Ilmu Komputer, Universitas Brawijaya)

Jurnal Pengembangan Teknologi Informasi dan Ilmu Komputer
Vol 2 No 11 (2018): November 2018

PT Matahari Department Store become one of the best retailers in Indonesia. Which the vision of this company was to be main choice retailer on Indonesia. To realize that vision the company requires risk management especially of information technology. The company using Alphapos sales system for manage activities on back-office and front-office. Until now company still does not have documentation about risk which is focus for IT. Until now to manage the company, their used ASEAN Corporate Governance Scorecard (ACGS). In this research will try to implementing the ISO 31000 risk management framework to know any risk on Alphapos sales system. This research was helping with NIST 800-30 framework to specify the risk rating of system. That framework used to specify the recommendation of control for each priority risk with cost benefit analysis.