ABSTRACT University of Riau has implemented a website-based library information system to facilitate library management activities. In addition to providing benefits in the form of speed and ease of access, this information system is vulnerable to the risk of crime so that high level of security is required. Therefore, it is necessary to carry out an assessment of information system security r…