CD Skripsi
Analisis Manajemen Risiko Sistem Informasi Menggunakan Iso 31000:2018 Dan Standar Pengendalian Iso/Iec 27001:2013 Pada Bpmp Provinsi Riau
The Education Quality Assurance Agency (BPMP) of Riau Province is a government institution responsible for managing government affairs in the field of education. In the era of information technology, the role of information systems is crucial in various aspects of life, including education. However, technological advancements also bring security risks and information threats that must be addressed seriously. In Riau Province, BPMP plays a key role in ensuring the quality of education by utilizing information systems such as the Si Tuah website since 2021. This study aims to analyze the information system risk management at BPMP Riau Province using the ISO 31000:2018 standard and provide recommendations on risk control and treatment in accordance with ISO/IEC 27001:2013. The information system risk management process at BPMP Riau Province involves steps of communication, consultation, risk identification, evaluation, assessment, and risk treatment strategies. This study identifies 36 potential risks categorized into three groups: natural or environmental risks, system and infrastructure risks, and internal human risks. The risk levels are divided into three categories: high, medium, and low. This study produces risk levels from the highest to the lowest that can be used as a reference and decision-making material, as well as improvements to the Si Tuah website of BPMP Riau Province.
Keywords : BPMP Riau Province, ISO 31000:2018, ISO/IEC 27001:2013, Risk Management.
Tidak tersedia versi lain