Sugianto, Anindya Dwi Lestari (2019) Penilaian dan Kontrol Risiko terhadap Infrastruktur dan Keamanan Informasi Berdasarkan Standar ISO/IEC 27001:2013 (Studi Kasus: Direktorat Pengembangan Teknologi dan Sistem Informasi (DPTSI) ITS). Other thesis, Institut Teknologi Sepuluh Nopember.
![[thumbnail of 05211540000136-Undergraduate_Thesis.pdf]](http://repository.its.ac.id/style/images/fileicons/text.png) |
Text
05211540000136-Undergraduate_Thesis.pdf Restricted to Repository staff only Download (3MB) | Request a copy |
Abstract
Direktorat Pengembangan Teknologi dan Sistem Informasi (DPTSI) Institut Teknologi Sepuluh Nopember (ITS) Surabaya merupakan direktorat yang memiliki fungsi menangani seluruh aktivitas yang berhubungan dengan SI/TI di ruang lingkup ITS. Risiko yang muncul dalam organisasi di bidang SI/TI terutama pada ruang lingkup infrastruktur dan keamanan informasi, seperti adanya kerusakan aset, pencurian data, layanan tidak bisa diakses, dsb. Tindakan penanganan risiko terkait ruang lingkup infrastruktur dan keamanan informasi di DPTSI ITS belum diterapkan dengan baik sehingga dapat mengakibatkan terganggunya proses bisnis. Sehingga untuk memenuhi kebutuhan terkait ruang lingkup infrastruktur dan keamanan informasi diperlukan adanya standar agar dapat meminimalkan risiko yang ada. Standar yang digunakan dalam penelitian ini adalah standar ISO/IEC 27001:2013 digunakan sebagai kerangka kerja dalam proses identifikasi dan penilaian risiko terkait ruang lingkup infrastruktur dan keamanan informasi yang dibuat berdasarkan hasil wawancara dan justifikasi dari pihak DPTSI ITS. Adapun standar ISO/IEC 27002:2013 digunakan sebagai standar penyusunan kontrol dari hasil penilaian risiko terkait ruang lingkup infrastruktur dan keamanan informasi. Hasil yang diharapkan dalam penelitian ini berupa dokumen penilaian beserta penyusunan kontrol risiko yang sesuai dengan kebutuhan terkait ruang lingkup infrastruktur dan keamanan informasi DPTSI ITS dengan menggunakan standar ISO/IEC 27001:2013 dan ISO/IEC 27002:2013.
=============================================================================================================================
Direktorat Pengembangan Teknologi dan Sistem Informasi (DPTSI) Institut Teknologi Sepuluh Nopember (ITS) Surabaya is a directorate with the function of handling all activities related to IS / IT in the scope of ITS. Risks that arise in organizations in the IS / IT sectors are mainly in the scope of infrastructure and information security, such as asset damage, data theft, inaccessible services, etc. Measures for handling risks related to the scope of infrastructure and information security in the ITS DPTSI have not been implemented properly so that it can lead to disruption of business processes. So that to meet the needs related to the scope of infrastructure and information security required standard in order to minimize the risks that exist. The standard used in this study is ISO / IEC 27001: 2013 standard used as a framework in the identification and assessment of risks related to the scope of infrastructure and information security made based on the results of interviews and justifications from DPTSI ITS. As for ISO / IEC 27002: 2013 standards used as a standard for preparing control from the results of risk assessments related to the scope of infrastructure and information security. The results expected in this study are in the form of assessment documents along with the preparation of risk controls that are in accordance with the needs related to the scope of infrastructure and information security of the DPTSI ITS using the ISO / IEC 27001: 2013 and ISO / IEC 27002: 2013 standards.
| Item Type: | Thesis (Other) |
|---|---|
| Uncontrolled Keywords: | Kata Kunci: Identifikasi Risiko, Penilaian Risiko, Kontrol Risiko, ISO/IEC 27001:2013, ISO/IEC 27002:2013 |
| Subjects: | T Technology > T Technology (General) T Technology > T Technology (General) > T174.5 Technology--Risk assessment. T Technology > T Technology (General) > T58.6 Management information systems |
| Divisions: | Faculty of Information and Communication Technology > Information Systems > 57201-(S1) Undergraduate Thesis |
| Depositing User: | Anindya Dwi Lestari Sugianto |
| Date Deposited: | 24 Jul 2026 00:31 |
| Last Modified: | 24 Jul 2026 00:31 |
| URI: | http://repository.its.ac.id/id/eprint/65528 |
Actions (login required)
 |
View Item |