Information Technology Risk Measurement: Octave-S Method

Abstract

The purpose of this research are to identify the risk of IT in the company and make some recommendation to solve any risk happened in the company, and also to give the reference in measure the risk of IT in the company. Research Method used are book studies, field studies, and analysis techniques. Book studies by collecting the information from books and journal. Then, for field studies, it done by interview, and observation to the company. Analysis techniques done by qualitative approach and using the Octave-S (Operational Threat Asset and Vulnerability Evaluation) – S as the method to measure the risk of IT in the company. The result of this research will be a description of Information Technology in the company and give any risk happened in IT and mitigation activity through the risk in the company. Conclusion of the research are looking for three critical areas, such the awareness and security training, security strategy, security management, and disaster recovery.Index Terms - Risk Management, Information Technology, Octave-S method

Penentuan Strategi Mitigasi Risiko Kritis Aset IS/IT Perkara Berdasarkan ISO/IEC 27002:2013

“…Metode atau kerangka kerja tersebut digunakan untuk mengelola risiko kemanan informasi yang mana mendefinisikan suatu metode evaluasi secara menyeluruh yang memungkinkan organisasi untuk melakukan identifikasi aset informasi yang penting bagi perusahaan. Metode OCTAVE memiliki beberapa fase, diantaranya [10], [11] ditunjang dengan pengelolaan teknologi informasi yang memadai supaya teknologi informasi mampu menyukseskan perusahaan dalam mencapai tujuan bisnisnya [13], [14]. Oleh sebab itu, perlunya inovasi, perbaikan dan perkembangan yang dapat membuat sebuah proses menjadi lebih efektif dan efisien serta dapat menekan tingkat risiko [15].…”

Perfecting A Video Game with Game Metrics

“…Information technology has provided us opportunity to learn and access information easily [16]. IT becomes an important role in here [17]. The growth of information technology as tools for helping and making people easy to use must be accompanied by wanting to make fun and happy when they contact the information technology itself [ 18,19].…”