<![CDATA[This study assesses the security capabilities and technical control compliance of the Credit Information System at PT BPR Prisma Dana Manado, referencing ISO/IEC 27002:2013 guidelines and COBIT 5 domains (APO13 and DSS05). Using a mixed approach that combined RACI-based surveys with work product triangulation, we found that DSS05 reached Level 1 capability (88.83%), whereas APO13 stayed at Level 0 (75.83%). Meanwhile, ISO/IEC 27002:2013 compliance averaged 83.95% (Partially Compliant). Measured against the target Level 3 (Established Process), gap analysis showed a 2-level deficit in DSS05 and a 3-level deficit in APO13. These gaps stem mainly from irregular audit trail reviews, weak risk management practices, outdated policy reviews, and insufficient vulnerability management. To reach the target levels, the study suggests formalizing security SOPs, running routine audit log reviews and vulnerability assessments, and setting up clear information security KPIs.]]>
Copyrights © 2026
