Audit Keamanan Sistem Informasi Di Dinas Xyz Provinsi Lampung Menggunakan Standar Iso/Iec 27001:2013

Abstract

Audit of Information security system in the Communication and Information department is needed to determine the extent of information system carried out. This reasearch uses the ISO/ IEC 27001: 2013. Data from this reasearch were obtained based on the result of interview, observation and questionnaire. The respondent conducted a self assessment, then the researcher observe. The results of this study indicate that the average maturity level of the respondent is at level 2 (repeatable) with a value of 2.13 and the average maturity level of the finding is level 2 (repeatable) with a value of 2.40. The difference between the respondent value and the finding value show that in the sub domain information security incident management. This difference occur due to the absence of existing SOP procedure and criteria. Overall, there is no policy in developing the system through a process of security testing.

Analysis IT Governance of Perumdam Tirta Siak using COBIT 2019 and ISO27001

“…Penelitian tersebut meneliti tentang sistem manajemen kualiatas dan tata kelola teknologi informasi. Selanjutnya Maulana [8], melakukan analisis menggunakan framework COBIT 5 dan ISO/IEC 27001 dan menunjukkan bahwa rata-rata performa dari 7 klausul sebesar 1.42 berada pada kategori Performed Informally. Penelitian tersebut menghasilkan rekomendasi berupa peraturan terhadap pemeliharaan peralatan, pencadangan informasi dan utilitas pendukung.…”

Information Technology Security Audit at the YDSF National Zakat Institution Using the ISO 27001 Framework

“…The assessment in this research uses maturity levels from level 0, namely "None," to level 5, namely "Optimized." The depiction of the results of data analysis using maturity levels for the answers to this questionnaire can be said to be good enough to be sufficient to draw appropriate conclusions and suggestions; this research was conducted at a relatively large company, namely, one of the private banks located in Indonesia [11].…”

“…Another study contains information system security audits at the xyz service in Lampung province using the ISO/IEC 27001:2013 standard. This study [11] aims to audit LAZNAS YDSF services using the 13 clauses proposed by ISO 27001. This research also carries out a Strength, Weakness, Opportunity, Threat (SWOT) analysis, which aims to find out more deeply about the systematic factors in company/related services. The assessment of the results of respondents in this study used a maturity level on a scale of 0-5.…”

“…The assessment of the results of respondents in this study used a maturity level on a scale of 0-5. The assessment of this company/department results in some aspects having weaknesses, and some aspects having more strengths; therefore, at the end of this journal, the author provides recommendations for aspects that are felt less than expectations, namely a scale of 5 [11].…”