Pengembangan Prototipe Aplikasi Manajemen Risiko Berbasis ISO 31000

Abstract

Abstrak: Penerapan Manajemen Risiko dalam analisis keputusan dan sistem pengendalian dapat meningkatkan kinerja operasional dan nilai kompetitif dari organisasi. Semakin meningkatnya kompleksitas pekerjaan, kompleksitas risiko, sumber risiko yang saling berkaitan satu sama lain, serta semakin berkembangnya teknik pengidentifikasian risiko dan teknologi informasi melatarbelakangi banyak organisasi untuk menerapkan manajemen risiko. Pada penelitian ini dilakukan analisis dan pengembangan prototipe aplikasi manajemen risiko. Tujuan dari penelitian ini adalah membuat rancangan dan prototipe manajemen risiko yang dapat digunakan sebagai kertas kerja oleh Risk Owner dan Risk Officer dalam melakukan identifikasi, analisis, dan pembuatan rencana penanganan atas potensi risiko yang ada di departemennya. Penelitian dilakukan dalam tujuh tahapan, yaitu studi literatur, telaah dokumen dan proses bisnis saat ini, wawancara dan Focus Group Discussion bersama stakeholder, perancangan kebutuhan sistem manajemen risiko, pengembangan prototipe aplikasi, Focus Group Discussion untuk pengujian hasil pengembangan bersama stakeholder, dan penarikan kesimpulan. Hasil yang diperoleh dari penelitian ini adalah rancangan kebutuhan sistem manajemen risiko berupa atribut, kriteria dampak, kriteria kemungkinan, nilai keefektifan kontrol saat ini, skor efektifitas kontrol saat ini, serta tingkat dan perlakuan risiko, dan dan prototipe aplikasi manajemen risiko telah selesai dibuat dan dievaluasi. Pada penelitian ini juga telah mengidentifikasi lima proses utama sistem manajemen risiko, yaitu penentuan sasaran dan target kerja departemen, identifikasi risiko, analisis risiko, mitigasi risiko, dan monitoring risiko. Abstract: The application of Risk Management in decision analysis and control systems can improve operational performance and competitive value of the organization. The increasing complexity of the work, the complexity of risk, the sources of risk are interrelated with one another, and the development of risk identification techniques and information technology is the background of many organizations for implementing risk management. In this research, the analysis and development of prototypes of risk management applications were carried out. The purpose of this study is to design and create prototype risk management that can be used as a worksheet by the Risk Owner and Risk Officer in identifying, analyzing, and making plans for handling potential risks in the department. The research was conducted in seven stages, namely the study of literature, study of documents and current business processes, interviews and Focus Group Discussions with stakeholders, the design of risk management system requirements, the development of application prototypes, Focus Group Discussions for testing the results of development with stakeholders, and drawing conclusions. The results obtained from this study are the design of risk management system requirements in the form of attributes, impact criteria, likelihood criteria, the value of the current effectiveness of the control, the effectiveness score of the current control, and the level and risk treatment. The prototype of the risk management application has been completed and evaluated. In this study, five main processes of the risk management system have been identified, namely the determination of departmental targets and work targets, risk identification, risk analysis, risk mitigation, and risk monitoring.