Evaluasi Tingkat Kesiapan Keamanan Informasi Pada Lembaga Pendidikan Menggunakan Indeks Kami 4.0
DOI:
https://doi.org/10.12928/mf.v1i2.1001Abstract
Evaluasi keamanan sistem informasi sangat diperlukan bagi sebuah organisasi, instansi, maupun perusahaan guna mencegah kebocoran data ataupun kerusakan sistem informasi. Penelitian ini dilakukan di sektor pendidikan pada lembaga UPTD XYZ di bawah kuasa Dinas Pendidikan Provinsi Daerah Istimewa Yogyakarta. Evaluasi kematangan dan tata kelola keamanan informasi diterapkan berdasarkan standar ISO/IEC 27001:2017 dengan menggunakan indeks keamanan informasi KAMI versi 4.0. Metode pengumpulan data dilakukan dengan cara observasi langsung dan interview terhadap penanggungjawab sistem informasi. Hasil yang didapatkan dari evaluasi untuk kebutuhan sistem elektronik sebesar 20, sedangkan tingkat kelengkapan informasi mendapatkan skor 245. Dari hasil tersebut dapat disimpulkan bahwa tingkat keamanan informasi masih sangat rendah dan diperlukan perbaikan sistem keamanan informasi dengan bekerja sama dengan pengembang keamanan informasi dari pihak ketiga.
Information system security evaluation is indispensable for an organization, agency, or company to prevent data leakage or damage to information systems. This research was conducted in the education sector at the UPTD XYZ institution under the authority of the Yogyakarta Provincial Education Office. Information security maturity and governance evaluation is implemented based on ISO / IEC 27001: 2017 standard by using the WE information security index version 4.0. The data collection method is done by direct observation and interviews with the person in charge of the information system. The results obtained from the evaluation for electronic system requirements were 20, while the level of completeness of information got a score of 245. From these results it can be concluded that the level of information security is still very low and it is necessary to improve information security systems in collaboration with information security developers from third parties.
References
E. Supristiowadi and Y. G. Sucahyo, “Manajemen Resiko Keamanan Informasi pada Sistem Aplikasi Keuangan Tingkat Instansi (SAKTI) Kementerian Keuangan,” Indones. Treas. Rev. J. Perbendaharaan Keuang. Negara Dan Kebijak. Publik, vol. 3, no. 1, pp. 23–33, 2018, doi : 10.33105/itrev.v3i1.20.
D. D. Prasetyowati, I. Gamayanto, S. Wibowo, and Suharnawi, “Evaluasi Manajemen Keamanan Informasi Menggunakan Indeks KAMI Berdasarkan ISO/IEC 27001 : 2013 pada Politeknik Ilmu Pelayaran Semarang,” J. Inf. Syst., vol. 4, no. 1, pp. 65–75, 2019.
R. Hidayat, M. Suyanto, and A. Sunyoto, “JURNAL INFORMATIKA DAN TEKNOLOGI INFORMASI PROGRAM STUDI TEKNIK INFORMATIKA – FAKULTAS TEKNIK - UNIVERSITAS JANABADRA,” J. Inf. Interaktif, vol. 3, no. 1, pp. 27–34, 2018.
BSSN, “Indeks KAMI,” 2018. https://bssn.go.id/indeks-kami/.
B. S. Darmawan and A. Tarigan, “INFORMASI MENGGUNAKAN INDEKS KEAMANAN INFORMASI,” METIK J., vol. 2, no. 1, pp. 53–64, 2018.
A. A. Putra, O. D. Nurhayati, and I. P. Windasari, “Perencanaan dan Implementasi Information Security Management System Menggunakan Framework ISO/IEC 20071,” J. Teknol. Dan Sist. Komput., vol. 4, no. 1, p. 60, 2016, doi : 10.14710/jtsiskom.4.1.2016.60-66.
B. Mahersmi, F. Muqtadiroh, and B. Hidayanto, “Analisis Resiko Keamanan Informasi Dengan Menggunakan Metode Octave Dan Kontrol Iso 27001,” no. November, 2016.
I. Santosa and D. Kuswanto, “Analisa Manajemen Resiko Keamanan Informasi pada Kantor Pelayanan Pajak Pratama XYZ,” Rekayasa, vol. 9, no. 2, p. 108, 2016, doi: 10.21107/rekayasa.v9i2.3347.
BSSN, “Indeks KAMI Versi 4.” 2019.
F. A. Basyarahil, H. M. Astuti, and B. C. Hidayanto, “Evaluasi Manajemen Keamanan Informasi Menggunakan Indeks Keamanan Informasi (KAMI) Berdasarkan ISO/IEC 27001:2013 pada Direktorat Pengembangan Teknologi dan Sistem Informasi (DPTSI) ITS Surabaya,” J. Tek. ITS, vol. 6, no. 1, pp. 116–121, 2017, doi: 10.12962/j23373539.v6i1.21211.
Downloads
Published
Issue
Section
License
Copyright (c) 2019 Pramudhita Ferdiansyah, Subektiningsih Subektiningsih, Rini Indrayani
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Start from 2019 issues, authors who publish with JURNAL MOBILE AND FORENSICS agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License (CC BY-SA 4.0) that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work.
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Mobile and Forensics (MF)