Audit Keamanan Sistem Informasi Euclid Menggunakan Framework Cobit 5 pada PT. XYZ

Abstract

PT. XYZ is a private company engaged in the planting and processing of oil palm fruit. Currently PT. XYZ has implemented a technology called the EuClid system which functions to assist the data collection process and reports for each staff. However, in its implementation, there are still several problems, such as missing submission reports, providers who often experience network interruptions, and data hacking or leaks that have occurred. For this reason, it is necessary to carry out a security audit of EuClids information system at PT. XYZ in order to measure, guarantee, and find the root of the problem also makes recommendations on the information system used. This study uses the COBIT 5 Framework with the DSS05 (Manage Security Service) domain to measure the EuClid Information System Capability Level. The results of achieving the value of each level in the DSS05 domain process are level 1 (performed process) of 62.5%, level 2 (Manage Process) of 65.36%, level 3 (Established Process) of 63.02%, level 4 (Predictable Process) is 62.6%, and level 5 (Optimizing Process) is 59.63%. Achievement at each level is in the range of 50%-85%, so that the ranking in the ISO/IEC 15501-2-2003 standard is Largely Achieved. Of the average achievements, no one has crossed the gap value of 85.01%. This means that the existing information security service process has not been fully reached at level 1, so that the target level is currently still at level 1.