Analisis Keamanan Sistem Informasi Perdagangan Terintegrasi Menggunakan Standar ISO 27002

Abstract

Along with the increasing volume and area of business, PT. XYZ implements an Integrated Trading Information System which is abbreviated Sipeter. Information leakage issues, data loss, system hangs, and so on can cause Sipeter security risks. If this is allowed, Sipeter is threatened with not being able to fulfill the aspects of confidentiality, integrity, and availability of data. In this study, Sipeter security analysis was carried out using the ISO 27002 standard in articles 8 to 14. Findings and evidence data were obtained through interviews and field observations to related departments. The results of this study showed that the approach of PT. XYZ's security at Sipeter is inconsistent and security controls are carried out informally. Which is indicated by Sipeter's maturity level is 1.55 or Initial level. PT. XYZ needs to be consistent in managing Sipeter security, develop information system security standards and be disciplined in documenting various incidents related to Sipeter to minimize the risk of data loss, information leakage and misuse, as well as internal chaos that is detrimental to the business continuity of PT. XYZ.