Information System Security Risk Management Analysis in Universitas Advent Indonesia Using Octave Allegro Method

Abstract

Universitas Advent Indonesia is one of the many universities that use information technologyto support their business processes in the hope that information technology will providesignificant benefits. The use of information technology in supporting a business can not beseparated from the risks that might be faced. for that, good management of informationtechnology will be the key to how much risk will be faced. In this case, the researcher willconduct an analysis of information system risk management at the Universitas AdventIndonesia. The method used by researchers is OCTAVE ALLEGRO. OCTAVE ALLEGROis a method that is often used to carry out analysis in the field of risk management and riskassessment. The purpose of this study was to identify risks that could potentially threatenbusiness processes at Universitas Advent Indonesia by first identifying the impact of the area,determining the scale of priorities etc. The results of the study using OCTAVE Allegro is arisk reduction approach for each area of concern of each UNAI critical information assetnamely student financial information, lecturer financial information, student scoreinformation, student transcript information, and class attendance data. UNAI makes writtenrules regarding responsibilities in maintaining information security and sanctions for violatorsand do socialize about the rule well gradually to Universitas Advent Indonesia employees.Re-evaluate information security by using OCTAVE Allegro method periodically, forexample, once every 2 years.