AUDIT SISTEM INFORMASI DALAM MENGUKUR KEPATUHAN ISO 27002

Abstract

- This study aims to evaluate the level of compliance of PT Jaya Sawit Langkat (PT JSL) with the ISO 27002 standard in the context of information security. In today's digital era, companies face serious threats to data confidentiality, integrity, and availability. Although the importance of information security is recognized, many companies, including PT JSL, often overlook its implementation. The research methods used include literature studies, observations, and interviews using employees to understand existing security practices and the challenges faced. The audit results show that the maturity level of information security control implementation at PT JSL is in the medium category with an average score of 2.49. This indicates that although the company has started implementing controls in accordance with ISO 27002, there are still many areas that need improvement. Key recommendations include increased training for employees on information security and the implementation of periodic audits to identify and fix weaknesses in existing security systems. With these measures, it is hoped that PT JSL can increase data security and customer trust.