Penilaian Risiko Aset Informasi dengan Metode OCTAVE Allegro: Studi Kasus ICT Fakultas Ilmu Komputer Universitas Sriwijaya

Authors

  • Aulia Zulfia Universitas Sriwijaya
  • Endang Lestari Ruskan Universitas Sriwijaya
  • Pacu Putra Universitas Sriwijaya

DOI:

https://doi.org/10.33633/joins.v6i1.4088

Abstract

Informasi yang merupakan aset berharga bagi organisasi sangat penting dikelola risikonya agar dapat mempertahankan kelangsungan bisnis. ICT Fakultas Ilmu Komputer Universitas Sriwijaya (Fasilkom Unsri) memiliki aset informasi yang harus dilindungi terhadap ancaman baik dari pihak luar maupun dalam. Namun, sayangnya ICT Fasilkom Unsri belum pernah melakukan penilaian risiko dan belum memiliki prosedur secara formal/tertulis mengenai mitigasi risiko. Oleh karena itu, ICT Fasilkom Unsri belum mengetahui tindakan apa yang tepat untuk mengurangi risiko yang akan terjadi. Metode OCTAVE Allegro digunakan untuk membantu organisasi mengidentifikasi, menganalisis, dan mengambil tindakan mitigasi. Berdasarkan hasil penelitian, 5 dari 7 aset informasi yang dikelola oleh ICT Fasilkom Unsri dianggap sebagai aset yang kritikal. Setelah diidentifikasi dan dianalisis, ditemukan 73 risiko keamanan informasi Tindakan yang dapat diambil antara lain, 61 risiko dimitigasi/ditunda, 3 risiko ditunda/diterima, dan 3 risiko diterima. Dengan mengetahui penilaian risiko dari tiap-tiap aset informasi, ICT Fasilkom Unsri dapat membuat keputusan dalam pengurangan risiko secara tepat sesuai dengan kemungkinan-kemungkinan risiko yang akan terjad

References

J. S. Suroso, M. A. Fakhrozi, J. S. Suroso, and M. A. Fakhrozi, “Assessment Of Information System Risk Management with Octave Assessment Of Information Risk Management with Octave Allegro At

System Education,” Procedia Comput. Sci., vol. 135, pp. 202–213, 2018.

M. Moyo, “Information Security Risk Management in Small-Scale Organisations : A Case Study of Secondary Schools’ Computerised Information Systems,” University of South Africa, 2014.

B. M. Dioubate, N. N. A. Molok, S. Talib, and A. O. M. Tap, “Risk assessment model for organizational information security,” ARPN J. Eng. Appl. Sci., vol. 10, no. 23, pp. 17607–17613, 2015.

J. Webb, A. Ahmad, S. B. Maynard, and G. Shanks, “A Situation Awareness Model for Information Security Risk Management,” Comput. Secur., vol. 44, pp. 1–15, Jul. 2014.

M. Talabis and J. Martin, Information Security Risk Assessment Toolkit. Elsevier, 2013.

R. A. Caralli, J. F. Stevens, L. R. Young, and W. R. Wilson,

“Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process,” May 2007.

S. I. Hasibuan, T. F. Kusumasari, and R. Fauzi, “Analisis Risiko Keamanan Informasi dengan Metode Octave Allegro pada PT. Tirta Investama,” e-Proceeding Eng., vol. 6, no. 2, pp. 7899–7907, 2019.

W. Sardjono and M. I. Cholik, “Information Systems Risk Analysis Using Octave Allegro Method Based at Deutsche Bank,” Proc. 2018 Int. Conf. Inf. Manag. Technol. ICIMTech 2018, no. September, pp. 38–42, 2018.

D. A. Jakaria and J. T. Informatika, “Manajemen Risiko Sistem Informasi Akademik pada Perguruan Tinggi Menggunakan Metoda Octave Allegro,” pp. 37–42, 2013.

Rosini, M. Rachmaniah, and B. Mustafa, “Penilaian Risiko Kerawanan

Informasi Dengan Menggunakan Metode Octave Allegro,” J. Pustak. Indones., vol. 14, no. 1, 2016.

N. L. Kuntari, Y. H. Chrisnanto, and A. I. Hadiana, “Manajemen Risiko Sistem Informasi di Universitas Jenderal Achmad Yani Menggunakan Metoda OCTAVE Allegro,” Semnati, 2018.

R. A. Caralli, J. F. Stevens, L. R. Young, and W. R. Wilson, “Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process,” Pittsburgh, Pennsylvania, 2007.

Downloads

Published

2021-05-31

How to Cite

[1]
A. Zulfia, E. L. Ruskan, and P. Putra, “Penilaian Risiko Aset Informasi dengan Metode OCTAVE Allegro: Studi Kasus ICT Fakultas Ilmu Komputer Universitas Sriwijaya”, Journal of Information System, vol. 6, no. 1, pp. 40–47, May 2021.

Issue

Vol. 6 No. 1 (2021): Edisi Mei 2021

Section

Articles

License

Authors who publish with JOINS (Journal of Information System) agree to the following terms:

  1. Authors retain copyright and grant JOINS the right of first publication. The work is simultaneously licensed under a Creative Commons Attribution 4.0 International License (CC BY 4.0), which allows others to share and adapt the work, provided they give appropriate credit to the authors and the initial publication in this journal, provide a link to the license, and indicate if changes were made.
  2. Authors may enter into separate, additional contractual arrangements for the non-exclusive distribution of the published version of the work (e.g., posting it to an institutional repository or publishing it in a book), with an acknowledgement of its initial publication in JOINS.
  3. Authors warrant that the manuscript is original, has not been published elsewhere, is not under review by another journal, and does not infringe the rights of any third party. Material from other sources must be properly cited, and permission obtained where required.
  4. Authors may post a preprint of the manuscript, but must inform the editor at the time of submission so that the double-blind review process can be handled appropriately.