Analisa Efektivitas Metode Octave Allegro dan Fmea Dalam Penilaian Risiko Aset Informasi Pada Institusi Pendidikan Tinggi
DOI:
https://doi.org/10.30865/jurikom.v10i2.5950Keywords:
University, Information Assets, Risk Assessment, Octave Allegro, FMEAAbstract
The current rapid development of technology allows all tertiary institutions to utilize information systems to support their operations, such as the Surabaya ABC Institute of Technology. Through the Central Information System Unit (PSI), the ABC Surabaya Institute of Technology can develop and manage ICT (Information and Communication Technology) so that it can easily manage various kinds of data and information. However, it should be noted that currently digital information is an important asset that needs to be protected from various kinds of adverse risks. But unfortunately the application of information asset risk management at the Surabaya ABC Institute of Technology has not been implemented properly. From these problems, the researcher aims to find out the process of managing the security of information assets in tertiary institutions through a risk assessment of the information assets they have. To achieve this goal the research method used refers to the Octave Allegro framework and the FMEA method is used to assess the risk of information assets. The results of this study indicate that the ABC Institute of Technology has 11 important assets which are divided into 5 categories, namely: Data, Hardware, Network, Software, People. Of the eleven assets, six of them have a high level of risk. From these findings it can be concluded that universities also need to manage information security. These results also indicate that the method used by researchers is very helpful in determining the risk of the value of information assets owned by the ABC Surabaya Institute of Technology. So that the combination of the Octave Allegro method with the FMEA method is very effective in helping organizations carry out information security management.
References
R. J. Gagas, I. Syah, and F. Febryanto, “ANALISIS, EVALUASI, DAN MITIGASI RISIKO ASET TEKNOLOGI INFORMASI MENGGUNAKAN FRAMEWORK OCTAVE DAN FMEA (STUDI KASUS: UNIT PENGELOLA TEKNIS TEKNOLOGI INFORMASI DAN KOMUNIKASI UNIVERSITAS XYZ),†JKI, vol. 9, no. 2, pp. 121–133, Dec. 2021, doi: 10.31294/jki.v9i2.11368.
R. R. Wijayanti, “IMPLEMENTASI OCTAVE-S DAN STANDAR PENGENDALIAN ISO 27001:2013 PADA MANAJEMEN RISIKO SISTEM INFORMASI PERGURUAN TINGGI,†petir, vol. 11, no. 2, Sep. 2018, doi: 10.33322/petir.v11i2.351.
J. S. Suroso and M. A. Fakhrozi, “Assessment of Information System Risk Management with Octave Allegro at Education Institution,†Procedia Computer Science, vol. 135, pp. 202–213, 2018, doi: 10.1016/j.procs.2018.08.167.
Raihan Ramadhintia A, “Analisis Manajemen Risiko Aplikasi Ujian Online dengan Metode OCTAVE Allegro pada lembaga pendidikan,†j.sist.teknol.inf., vol. 6, no. 2, pp. 62–73, Sep. 2021, doi: 10.32528/justindo.v6i2.4546.
P. Ramjanati, F. K. Wijaya, and M. S. Muarie, “Penilaian Risiko Keamanan Informasi Menggunakan Octave Allegro: Studi Kasus pada Perguruan Tinggi,†JUSIFO: J. Sistem Inf., vol. 7, no. 1, pp. 10–20, Jun. 2021, doi: 10.19109/jusifo.v7i1.5870.
E. B. Wagiu, R. Siregar, and R. Maulany, “Information System Security Risk Management Analysis in Universitas Advent Indonesia Using Octave Allegro Method,†isc, vol. 7, no. 1, pp. 1741–1750, Dec. 2019, doi: 10.35974/isc.v7i1.1387.
A. Safar, “Deteksi Penilaian Resiko Pada e-Learning SMK Bina Prestasi AMI Balikpapan Dengan Metode Octave Allegro,†j-sim : Jurnal Sistem Informasi, vol. 2, no. 2, pp. 69–77, Oct. 2019.
R. R. Saputra, E. Setiawan, and A. Ambarwati, “Manajemen Risiko Teknologi Informasi Menggunakan Metode OCTAVE Allegro pada PT. Hakiki Donarta Surabaya,†Jurnal Sains, Teknologi dan Industri, vol. 17, no. 1, pp. 1–10, Dec. 2019, doi: http://dx.doi.org/10.24014/sitekin.v16i2.7457.
M. Pyka and Ś. Sobieski, “Implementation of the OCTAVE Methodology in Security Risk Management Process for Business Resources,†in Internet - Technical Developments and Applications 2, A. Kapczyński, E. Tkacz, and M. Rostanski, Eds., in Advances in Intelligent and Soft Computing, vol. 118. Berlin, Heidelberg: Springer Berlin Heidelberg, 2012, pp. 235–252. doi: 10.1007/978-3-642-25355-3_21.
A. H. Putri and Y. Kusumawati, “Strategi Mitigasi Risiko Aset Kritis Teknologi Informasi Menggunakan Metode Octave Dan FMEA,†tc, vol. 16, no. 4, pp. 367–377, Jul. 2017, doi: 10.33633/tc.v16i4.1484.
M. A. Khan, “Efficacy of OCTAVE Risk Assessment Methodology in Information Systems Organizations,†IJCATR, vol. 6, no. 6, pp. 242–244, Jun. 2017, doi: 10.7753/IJCATR0606.1001.
S. Alfarisi and N. Surantha, “Risk assessment in fleet management system using OCTAVE allegro,†Bulletin EEI, vol. 11, no. 1, pp. 530–540, Feb. 2022, doi: 10.11591/eei.v11i1.3241.
J. Hom, B. Anong, K. B. Rii, L. K. Choi, and K. Zelina, “The Octave Allegro Method in Risk Management Assessment of Educational Institutions,†att, vol. 2, no. 2, pp. 167–179, Sep. 2020, doi: 10.34306/att.v2i2.103.
A. Arista, L. N. Kusumawati, and F. Radiansyah, “APPLICATION OF INFORMATION SYSTEMS RISK MANAGEMENT IN PTX,†International Journal of Civil Engineering and Technology (IJCIET), vol. 10, no. 03, pp. 1289–1299, Mar. 2019.
A. Suherman and B. J. Cahyana, “Pengendalian Kualitas Dengan Metode Failure Mode Effect And Analysis (FMEA) Dan Pendekatan Kaizen untuk Mengurangi Jumlah Kecacatan dan Penyebabnya,†SEMNASTEK Fakultas Teknik Universitas Muhammadiyah Jakarta, pp. 1–9, Oct. 2019.
I. Jevon and J. Rahardjo, “Penerapan Manajemen Risiko menggunakan Metode FMEA pada Proyek Penggalian Sumur Bor oleh CV. Tirto Kencana,†Jurnal Titra, vol. 9, no. 2, pp. 471–478, Jul. 2021.
Surya Andiyanto, Agung Sutrisno, and Charles Punuhsingon, “PENERAPAN METODE FMEA (FAILURE MODE AND EFFECT ANALYSIS) UNTUK KUANTIFIKASI DAN PENCEGAHAN RESIKO AKIBAT TERJADINYA LEAN WASTE,†Jurnal Online Poros Teknik Mesin, vol. 6, no. 1, pp. 45–57, Jan. 2017.
N. P. R. Sumarsono and S. Saptadi, “METODE FAILURE MODE AND EFFECT ANALYSIS (FMEA) DAN BOW TIE ANALYSIS UNTUK MENGETAHUI RISIKO PADA PROGRAM PESAWAT N219 (STUDI KASUS PT. DIRGANTARA INDONESIA),†Industrial Engineering Online Journal, vol. 8, no. 3, pp. 1–7, Jul. 2019.
I. B. Suryaningrat, W. Febriyanti, and W. Amilia, “IDENTIFIKASI RISIKO PADA OKRA MENGGUNAKAN FAILURE MODE AND EFFECT ANALYSIS (FMEA) DI PT. MITRATANI DUA TUJUH DI KABUPATEN JEMBER,†J-AGT, vol. 13, no. 01, p. 25, Jun. 2019, doi: 10.19184/j-agt.v13i01.8265.
R. A. Tristian and A. Wibowo, “Implementing IT Risk in ITSM Tools using Octave Allegro Method Based at ITSMProject,†IJRTE, vol. 8, no. 6, pp. 111–117, Mar. 2020, doi: 10.35940/ijrte.E6766.038620.
Rosini, M. Rachmaniah, and B. Mustafa, “PENILAIAN RISIKO KERAWANAN INFORMASI DENGAN MENGGUNAKAN METODE OCTAVE ALLEGRO,†Jurnal Pustakawan Indonesia, vol. 14, no. 1, pp. 14–22, Mar. 2016, doi: https://doi.org/10.29244/jpi.14.1.%25p.
E. Anggraini and I. Riadi, “Analysis of Risk Assessment on Electronic Services using OCTAVE Allegro Framework,†IJCA, vol. 183, no. 5, pp. 26–32, May 2021, doi: 10.5120/ijca2021921273.
Muh. Sukri and I. Riadi, “Risk Management Analysison Administration System using OCTAVE Allegro Framework,†IJCA, vol. 174, no. 17, pp. 5–11, Feb. 2021, doi: 10.5120/ijca2021920981.
V. Gerardo and A. N. Fajar, “Academic IS Risk Management using OCTAVE Allegro in Educational Institution,†Journal-ISI, vol. 4, no. 3, pp. 687–708, Sep. 2022, doi: 10.51519/journalisi.v4i3.319.
S. R. Wicaksono, C. L. D. Rizka, and G. A. Immanuel, “Risk Assessment Menggunakan Pendekatan Octave Allegro (Studi Kasus: Schoology.com),†Jurnal ICT : Information Communication & Technology, vol. 18, no. 2, pp. 123–129, Dec. 2019, doi: 10.36054/jict-ikmi.v18i2.42.
R. A. Caralli, J. F. Stevens, L. R. Young, and W. R. Wilson, “Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process:,†Defense Technical Information Center, Fort Belvoir, VA, May 2007. doi: 10.21236/ADA470450.
B. L. Mahersmi, “ANALISIS RISIKO DENGAN MENGGUNAKAN METODE OCTAVE DAN KONTROL ISO 27001 PADA DINAS PERHUBUNGAN KOMUNIKASI DAN INFORMATIKA KABUPATEN TULUNGAGUNG,†Institut Teknologi Sepuluh Nopember, Surabaya, Indonesia, 2016. [Online]. Available: https://repository.its.ac.id/71532/1/5212100066-undergraduate-theses.pdf
