PENERAPAN MANAJEMEN RISIKO ASET IT PADA PERUSAHAAN MENGGUNAKAN ISO 31000 DAN STANDAR PENGENDALIAN ISO 27001 (STUDI KASUS: PT. JASAMARGA TOLLROAD OPERATOR)

WANGI, DIVIATI SHINTA (2023) PENERAPAN MANAJEMEN RISIKO ASET IT PADA PERUSAHAAN MENGGUNAKAN ISO 31000 DAN STANDAR PENGENDALIAN ISO 27001 (STUDI KASUS: PT. JASAMARGA TOLLROAD OPERATOR). S1 thesis, Universitas Mercu Buana Bekasi.

Preview	Text 41819210030 - Diviati Shinta Wangi - 01 Cover.pdf Download (220kB) | Preview
Preview	Text 41819210030 - Diviati Shinta Wangi - 02 Abstrak.pdf Download (90kB) | Preview
	Text 41819210030 - Diviati Shinta Wangi - 03 BAB 1.pdf Restricted to Registered users only Download (137kB)
	Text 41819210030 - Diviati Shinta Wangi - 04 BAB 2.pdf Restricted to Registered users only Download (280kB)
	Text 41819210030 - Diviati Shinta Wangi - 05 BAB 3.pdf Restricted to Registered users only Download (239kB)
	Text 41819210030 - Diviati Shinta Wangi - 06 BAB 4.pdf Restricted to Registered users only Download (472kB)
	Text 41819210030 - Diviati Shinta Wangi - 07 BAB 5.pdf Restricted to Registered users only Download (113kB)
	Text 41819210030 - Diviati Shinta Wangi - 08 Daftar Pustaka.pdf Restricted to Registered users only Download (179kB)
	Text 41819210030 - Diviati Shinta Wangi - 09 Lampiran.pdf Restricted to Registered users only Download (1MB)

Abstract

Dalam penerapan teknologi informasi memerlukan perencanaan yang strategis agar penerapannya dapat selaras dengan tujuannya. Jika tidak sesuai dalam penerapannya, maka hal ini lah yang menimbulkan risiko. Risiko yang timbul akibat ketidaksesuaian penerapannya ini akan berakibat proses bisnis yang berjalan tidak optimal, kemudian timbul kerugian finansial, dan berbagai hal lain yang dapat merugikan perusahaan. Untuk menangani hal tersebut setiap organisasi atau perusahaan harus memiliki risk management dalam divisinya. Tujuan dari penelitian ini untuk mengetahui sejauh mana tingkat keamanan aset IT dan pengendalian dari dampak risiko yang dimiliki oleh PT Jasamarga Tollroad Operation. Metode yang digunakan adalah ISO 31000 untuk mengidentifikasi risiko serta dampaknya pada aset IT dan standar pengendalian keamanan menggunakan ISO 27001 sebagai bahan acuan pada perlakuan risiko. Dari Hasil penelitian yang dilakukan dapat ditarik kesimpulan bahwa ada 4 kemungkinan resiko yang memiliki risk level high yaitu diantaranya kesalahan pegawai (human eror), aplikasi server, database server dan email server terkena virus, kerusakan hardware, dan koneksi jaringan terputus. Kemudian ditemukan 13 kemungkinan resiko yang memiliki risk level medium dan yang terakhir ditemukan 5 kemungkinan resiko yang memiliki risk level low. Kata kunci: Risk management, ISO 31000, ISO 27001, Aset IT, Analisis Risiko In the era of increasingly rapid technological development, companies strive to keep up with the updated technology. With the existence of information technology, the productivity of an organization or company will increase. The goal is that the application of information technology can produce good value for the company. In the application of information technology requires strategic planning so that its application can be aligned with its goals. If it is not suitable in its application, then this is what poses a risk. The risks arising from the discrepancy in its application will result in business processes that run not optimally, then financial losses arise, and various other things that can harm the company. To handle this, every organization or company must have risk management in its division. The purpose of this study is to determine the extent to which the security level of IT assets and the control over the impact of risks owned by PT Jasamarga Tollroad Operation. The method used is ISO 31000 to identify risks and their impact on IT assets and security control standards use ISO 27001 as a reference for risk treatment. From the results of the research conducted, it can be concluded that there are 4 possible risks that have a high level of risk, namely employee error (human error), application server, database server and email server exposed to viruses, hardware damage, and network connections being lost. Then found 13 possible risks that have a medium risk level and finally found 5 possible risks that have a low risk level. Keywords: Risk management, ISO 31000, ISO 27001, Assets IT, Risk Analyst

Actions (login required)

View Item