Manajemen Risiko Teknologi Informasi Pada Aplikasi CMS di PT. Sarana Citranusa Kabil - Batam Menggunakan ISO31000:2018
Abstract:
Purpose: The purpose of this research is to assist PT SCN in improving its ability in risk management, by minimizing the risks contained in the CMS application. In addition, it aims to provide recommendations some risk action for risks that have been identified.
Methodology/approach: Object of this research is PT Sarana Citranusa Kabil – Batam. In order to support its business activities, PT SCN uses a application, called Cash Management System (CMS). This study was conducted using method of case study research. Technique of data collection is in the form of observation. The procedures of this research follow the ISO31000:2018 standard.
Results/findings: This study found that (i) there are 20 possible risks, which can disrupt the performance of the CMS and business activities; (ii) 2 possible risks with high level; (iii) 10 possible risks with medium level; (iv) 8 possible risks with low level.
Limitations: This research focuses on risk management in the use of CMS applications. The research does not address risks outside of information technology, for example, health and safety environmental issues.
Contribution: The result of this risk analysis is a proposed action recommendation based on the impact and frequency of occurrence. Finally, PT SCN can prevent and minimize risks so that the function of the CMS application can run optimally.
Downloads
References
Angraini, A., & Pertiwi, I. D. (2017). Analisa Pengelolaan Risiko Penerapan Teknologi Informasi Menggunakan ISO 31000. Jurnal Ilmiah Rekayasa dan Manajemen Sistem Informasi, 3(2), 70-76.
anonymous. (2022). 6 manfaat otomatisasi proses bisnis. Retrieved from https://powerautomate.microsoft.com/id-id/business-process-automation-benefits/
Berliana, L. D., & Tanamaah, A. R. (2021). Analisis Risiko dengan Metode ISO 31000 pada Disperinnaker Kota Salatiga Bidang Industri. JATISI (Jurnal Teknik Informatika dan Sistem Informasi), 8(3), 1105-1118.
Elly, E., Hanes, H., & Joosten, J. (2022). ISO 31000: 2018-Based IT Infrastructure Risk Management Study (Case Study: Universitas Mikroskil). Jurnal Riset Informatika, 5(1).
Friadi, J., Yani, D. P., Zaid, M., & Sikumbang, A. (2023). Perancangan Pemodelan Unified Modeling Language Sistem Antrian Online Kunjungan Pasien Rawat Jalan pada Puskesmas. Jurnal Ilmu Siber dan Teknologi Digital, 1(2), 125-133. doi:10.35912/jisted.v1i2.2298
Johnson, L. (2019). Security controls evaluation, testing, and assessment handbook: Academic Press.
Lamarco, N. (2018). Information Technology & Its Uses in Business Management: Retrieved from smallbusiness. chron. com/: https://smallbusiness. chron. com ….
Putri, V. R., & Wijaya, A. F. (2022). Information Technology Risk Management Analysis Using ISO: 31000 at PT. XYZ. Journal of Information Systems and Informatics, 4(3), 574-588.
RUMBA, M. F., MIRSEL, R., & SABU, F. X. (2022). Risk Management Information Technology Based on ISO 31000: 2018 at Institute of Philosophy and Creative Technology, Ledalero. American Journal of Computer Science and Technology, 5(3).
Suciati, H., Simamora, A. W., Panusunan, P., & Fauzan, F. (2023). Analisa Campuran CPHMA terhadap Penambahan Variasi Aspal Penetrasi 60/70 pada Karakteristik Marshall. Jurnal Teknologi Riset Terapan, 1(2), 75-86. doi:10.35912/jatra.v1i2.2294
Vorst, C. R., Priyarsono, D. S., & Budiman, A. (2018). ISO 31000:2018 Manajemen Resiko. Jakarta.
- References
- Angraini, A., & Pertiwi, I. D. (2017). Analisa Pengelolaan Risiko Penerapan Teknologi Informasi Menggunakan ISO 31000. Jurnal Ilmiah Rekayasa dan Manajemen Sistem Informasi, 3(2), 70-76.
- anonymous. (2022). 6 manfaat otomatisasi proses bisnis. Retrieved from https://powerautomate.microsoft.com/id-id/business-process-automation-benefits/
- Berliana, L. D., & Tanamaah, A. R. (2021). Analisis Risiko dengan Metode ISO 31000 pada Disperinnaker Kota Salatiga Bidang Industri. JATISI (Jurnal Teknik Informatika dan Sistem Informasi), 8(3), 1105-1118.
- Elly, E., Hanes, H., & Joosten, J. (2022). ISO 31000: 2018-Based IT Infrastructure Risk Management Study (Case Study: Universitas Mikroskil). Jurnal Riset Informatika, 5(1).
- Friadi, J., Yani, D. P., Zaid, M., & Sikumbang, A. (2023). Perancangan Pemodelan Unified Modeling Language Sistem Antrian Online Kunjungan Pasien Rawat Jalan pada Puskesmas. Jurnal Ilmu Siber dan Teknologi Digital, 1(2), 125-133. doi:10.35912/jisted.v1i2.2298
- Johnson, L. (2019). Security controls evaluation, testing, and assessment handbook: Academic Press.
- Lamarco, N. (2018). Information Technology & Its Uses in Business Management: Retrieved from smallbusiness. chron. com/: https://smallbusiness. chron. com ….
- Putri, V. R., & Wijaya, A. F. (2022). Information Technology Risk Management Analysis Using ISO: 31000 at PT. XYZ. Journal of Information Systems and Informatics, 4(3), 574-588.
- RUMBA, M. F., MIRSEL, R., & SABU, F. X. (2022). Risk Management Information Technology Based on ISO 31000: 2018 at Institute of Philosophy and Creative Technology, Ledalero. American Journal of Computer Science and Technology, 5(3).
- Suciati, H., Simamora, A. W., Panusunan, P., & Fauzan, F. (2023). Analisa Campuran CPHMA terhadap Penambahan Variasi Aspal Penetrasi 60/70 pada Karakteristik Marshall. Jurnal Teknologi Riset Terapan, 1(2), 75-86. doi:10.35912/jatra.v1i2.2294
- Vorst, C. R., Priyarsono, D. S., & Budiman, A. (2018). ISO 31000:2018 Manajemen Resiko. Jakarta.
