cover
Contact Name
-
Contact Email
-
Phone
-
Journal Mail Official
-
Editorial Address
-
Location
Kab. indragiri hilir,
Riau
INDONESIA
Sistemasi: Jurnal Sistem Informasi
ISSN : 23028149     EISSN : 25409719     DOI : -
Sistemasi adalah nama terbitan jurnal ilmiah dalam bidang ilmu sains komputer program studi Sistem Informasi Universitas Islam Indragiri, Tembilahan Riau. Jurnal Sistemasi Terbit 3x setahun yaitu bulan Januari, Mei dan September,Focus dan Scope Umum dari Sistemasi yaitu Bidang Sistem Informasi, Teknologi Informasi,Computer Science,Rekayasa Perangkat Lunak,Teknik Informatika
Arjuna Subject : -
Articles 1,111 Documents
Internal Compliance Audit of the Information Security Management System in a Cybersecurity Company based on ISO/IEC 27001 Sterevania Rambu Muna; Halim Budi Santoso; Jong Jek Siang
Sistemasi: Jurnal Sistem Informasi Vol 15, No 6 (2026): Sistemasi: Jurnal Sistem Informasi
Publisher : Universitas Islam Indragiri

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32520/stmsi.v15i6.6471

Abstract

Information Security Management Systems (ISMSs) require periodic evaluation to assess their level of compliance with established standards and frameworks. This study evaluates the implementation of an Information Security Management System in an Indonesian cybersecurity services company, with a particular focus on the Compliance Division and the Security Operations Center (SOC). The case study was selected because the organization's ISMS had not been implemented consistently, particularly regarding the regular updating of security policies and operational procedures. As a cybersecurity service provider, the company is expected to conduct periodic compliance assessments to ensure alignment with recognized information security management standards, such as ISO/IEC 27001:2022. The study employed a Gap Analysis approach that combined qualitative and quantitative data. Data were collected through direct observation and a review of internal documentation after obtaining the company's authorization. The results indicate an overall compliance level of 77.5%. Three control areas achieved full compliance: the timely execution of internal audits, incident documentation, and log management. Based on the identified gaps, a set of improvement recommendations was developed to assist the organization in achieving greater compliance with the requirements of ISO/IEC 27001:2022. This study provides practical contributions by demonstrating the application of the ISO/IEC 27001:2022 framework for conducting internal compliance audits of Information Security Management Systems and offering actionable recommendations for strengthening organizational information security governance.

Filter by Year

2013 2026


Filter By Issues
All Issue Vol 15, No 6 (2026): Sistemasi: Jurnal Sistem Informasi Vol 15, No 5 (2026): Sistemasi: Jurnal Sistem Informasi Vol 15, No 4 (2026): Sistemasi: Jurnal Sistem Informasi Vol 15, No 3 (2026): Sistemasi: Jurnal Sistem Informasi Vol 15, No 2 (2026): Sistemasi: Jurnal Sistem Informasi Vol 15, No 1 (2026): Sistemasi: Jurnal Sistem Informasi Vol 14, No 6 (2025): Sistemasi: Jurnal Sistem Informasi Vol 14, No 5 (2025): Sistemasi: Jurnal Sistem Informasi Vol 14, No 4 (2025): Sistemasi: Jurnal Sistem Informasi Vol 14, No 3 (2025): Sistemasi: Jurnal Sistem Informasi Vol 14, No 2 (2025): Sistemasi: Jurnal Sistem Informasi Vol 14, No 1 (2025): Sistemasi: Jurnal Sistem Informasi Vol 13, No 6 (2024): Sistemasi: Jurnal Sistem Informasi Vol 13, No 5 (2024): Sistemasi: Jurnal Sistem Informasi Vol 13, No 4 (2024): Sistemasi: Jurnal Sistem Informasi Vol 13, No 3 (2024): Sistemasi: Jurnal Sistem Informasi Vol 13, No 2 (2024): Sistemasi: Jurnal Sistem Informasi Vol 13, No 1 (2024): Sistemasi: Jurnal Sistem Informasi Vol 12, No 3 (2023): Sistemasi: Jurnal Sistem Informasi Vol 12, No 2 (2023): Sistemasi: Jurnal Sistem Informasi Vol 12, No 1 (2023): Sistemasi: Jurnal Sistem Informasi Vol 11, No 3 (2022): Sistemasi: Jurnal Sistem Informasi Vol 11, No 2 (2022): Sistemasi: Jurnal Sistem Informasi Vol 11, No 1 (2022): Sistemasi: Jurnal Sistem Informasi Vol 10, No 3 (2021): Sistemasi: Jurnal Sistem Informasi Vol 10, No 2 (2021): Sistemasi: Jurnal Sistem Informasi Vol 10, No 1 (2021): Sistemasi: Jurnal Sistem Informasi Vol 9, No 3 (2020): Sistemasi: Jurnal Sistem Informasi Vol 9, No 2 (2020): Sistemasi: Jurnal Sistem Informasi Vol 9, No 1 (2020): Sistemasi: Jurnal Sistem Informasi Vol 8, No 3 (2019): Sistemasi: Jurnal Sistem Informasi Vol 8, No 2 (2019): Sistemasi: Jurnal Sistem Informasi Vol 8, No 1 (2019): Sistemasi Vol 8, No 1 (2019): Sistemasi: Jurnal Sistem Informasi Vol 7, No 3 (2018): Sistemasi: Jurnal Sistem Informasi Vol 7, No 2 (2018): Sistemasi: Jurnal Sistem Informasi Vol 7, No 2 (2018): SISTEMASI Vol 7, No 1 (2018): Sistemasi: Jurnal Sistem Informasi Vol 6, No 3 (2017): Sistemasi: Jurnal Sistem Informasi Vol 6, No 2 (2017): Sistemasi: Jurnal Sistem Informasi Vol 6, No 1 (2017): Sistemasi: Jurnal Sistem Informasi Vol 5, No 3 (2016): Sistemasi: Jurnal Sistem Informasi Vol 5, No 2 (2016): sistemasi Vol 5, No 2 (2016): Sistemasi: Jurnal Sistem Informasi Vol 5, No 1 (2016): Sistemasi: Jurnal Sistem Informasi Vol 4, No 3 (2015): Sistemasi: Jurnal Sistem Informasi Vol 4, No 2 (2015): Sistemasi: Jurnal Sistem Informasi Vol 4, No 1 (2015): Sistemasi: Jurnal Sistem Informasi Vol 3, No 4 (2014): SISTEMASI: Jurnal Sistem Informasi Vol 3, No 3 (2014): Sistemasi: Jurnal Sistem Informasi Vol 3, No 2 (2014): Sistemasi: Jurnal Sistem Informasi Vol 3, No 1 (2014): Sistemasi: Jurnal Sistem Informasi Vol 2, No 4 (2013): Sistemasi: Jurnal Sistem Informasi Vol 2, No 3 (2013): Sistemasi: Jurnal Sistem Informasi Vol 2, No 2 (2013): Sistemasi:Jurnal Sistem Informasi Vol 2, No 1 (2013): Sistemasi: Jurnal Sistem Informasi More Issue