ANALISIS MANAJEMEN RISIKO KEAMANAN INFORMASI BERDASARKAN KONTROL KERANGKA KERJA NIST SP 800-30 STUDI KASUS: SISTEM INFORMASI AKADEMIK (SIAK) UPI

• Main Author: Ananda Sekar Putri, - (Author)
• Format: Book
• Published: 2023-07-13.
• Subjects: Thesis; NonPeerReviewed
• Online Access: Link Metadata
• Notes: http://repository.upi.edu/97821/1/S_PSTI_1904412_Title.pdf; http://repository.upi.edu/97821/2/S_PSTI_1904412_Chapter%201.pdf; http://repository.upi.edu/97821/3/S_PSTI_1904412_Chapter%202.pdf; http://repository.upi.edu/97821/4/S_PSTI_1904412_Chapter%203.pdf; http://repository.upi.edu/97821/5/S_PSTI_1904412_Chapter%204.pdf; http://repository.upi.edu/97821/6/S_PSTI_1904412_Chapter%205.pdf; http://repository.upi.edu/97821/7/S_PSTI_1904412_Appendix.pdf
• Keywords: L Education (General); T Technology (General)

Sistem informasi menjadi salah satu bentuk teknologi yang banyak dimanfaatkan oleh berbagai bidang kehidupan. Dalam dunia pendidikan digunakan sistem informasi akademik sebagai sistem yang ditujukkan kepada civitas akademik, khususnya mahasiswa dan dosen untuk menyimpan, mengolah dan menampilkan data mengenai administrasi akademik. Melihat kebutuhan sistem informasi akademik menghimpun banyak data civitas akademik yang terlibat, maka hal tersebut memungkinkan kerentanan pada keamanan jaringan sistem informasi. Penelitian ini bertujuan untuk mengidentifikasi keamanan sistem yang diterapkan pada sistem informasi akademik. Dalam penelitian ini digunakan pendekatan kualitatif dan desain penelitian studi kasus dengan proses analisis yang dilakukan melalui observasi wawancara dan dokumentasi. Pada proses analisis digunakan metode OCTAVE (Operationally Critical Threat, Asset and Vulnerability) guna melakukan pengolahan data hasil wawancara dan observasi. Berdasarkan penelitian yang dilakukan diharapkan dapat menghasilkan manajemen risiko kepamanan sistem informasi akademik yang mengacu pada kontrol kerangka kerja keamanan informasi NIST SP 800-30. ----- Information systems are a form of technology that is widely used by various fields of life. In the world of education, an academic information system is used as a system aimed at the academic community, especially students and lecturers, to store, process and display data regarding academic administration. Seeing the need for an academic information system to collect a lot of data from the academic community involved, this allows for vulnerabilities in the security of the information system network. This study aims to identify system security that is applied to academic information systems. In this study used a qualitative approach and a case study research design with an analysis process carried out through observation, interviews and documentation. In the analysis process used the OCTAVE method (Operationally Critical Threat, Asset and Vulnerability) in order to process data from interviews and observations. Based on the research conducted, it is hoped that it will produce security risk management for academic information systems that refer to the NIST SP 800-30 information security framework controls. Keywords: Academic Information Systems, Information Security, Risk Management, NIST SP 800-30