TY - GEN
T1 - Assessment of Information Security Management System
T2 - 3rd International Conference on Computer and Informatics Engineering, IC2IE 2020
AU - Wijayanti, Fitri
AU - Sensuse, Dana Indra
AU - Putera, Arief Anthadi
AU - Syahrizal, Andy
N1 - Publisher Copyright:
© 2020 IEEE.
Copyright:
Copyright 2020 Elsevier B.V., All rights reserved.
PY - 2020/9/15
Y1 - 2020/9/15
N2 - The DRC of the Ministry XYZ has suffered from a system breach. The DRC's problem will lead to a lack of system information security, availability, and an increasing threat to the whole system of Ministry XYZ. In 2019, the KAMI Index assessment of the Ministry XYZ stated that the level of maturity and completeness of the application of ISO 27001 standards of the XYZ Ministry were at the level of fulfillment of the basic framework. There is a gap between the assessment result and the operational problem within the DRC of Ministry XYZ due to the lack of an information security management system. Therefore, this study conducts the same KAMI Index assessment within the scope of the DRC only and aims to offer a recommendation based on ISO 27001 as the basis of the KAMI Index assessment. This study used discussion, observation, and KAMI Index assessment tools for collecting data and analyze the result. The assessment result of the DRC showed that the maturity level of the ISO 27001 standard on the DRC is on the application of the basic framework. The suggested recommendations to improve the information security management system of the DRC were mostly in the aspect of the information security framework and assets management.
AB - The DRC of the Ministry XYZ has suffered from a system breach. The DRC's problem will lead to a lack of system information security, availability, and an increasing threat to the whole system of Ministry XYZ. In 2019, the KAMI Index assessment of the Ministry XYZ stated that the level of maturity and completeness of the application of ISO 27001 standards of the XYZ Ministry were at the level of fulfillment of the basic framework. There is a gap between the assessment result and the operational problem within the DRC of Ministry XYZ due to the lack of an information security management system. Therefore, this study conducts the same KAMI Index assessment within the scope of the DRC only and aims to offer a recommendation based on ISO 27001 as the basis of the KAMI Index assessment. This study used discussion, observation, and KAMI Index assessment tools for collecting data and analyze the result. The assessment result of the DRC showed that the maturity level of the ISO 27001 standard on the DRC is on the application of the basic framework. The suggested recommendations to improve the information security management system of the DRC were mostly in the aspect of the information security framework and assets management.
KW - information security
KW - ISO 27001
KW - KAMI Index
UR - http://www.scopus.com/inward/record.url?scp=85098942859&partnerID=8YFLogxK
U2 - 10.1109/IC2IE50715.2020.9274574
DO - 10.1109/IC2IE50715.2020.9274574
M3 - Conference contribution
AN - SCOPUS:85098942859
T3 - 2020 3rd International Conference on Computer and Informatics Engineering, IC2IE 2020
SP - 393
EP - 398
BT - 2020 3rd International Conference on Computer and Informatics Engineering, IC2IE 2020
A2 - Hermawan, Indra
A2 - Rasyidin, Muhammad Yusuf Bagus
A2 - Huzaifa, Malisa
A2 - Ermis Ismail, Iklima
A2 - Muharram, Asep Taufik
A2 - Mardiyono, Anggi
A2 - Marcheeta, Noorlela
A2 - Kurniawati, Dewi
A2 - Yuly, Ade Rahma
A2 - Suhanda, Ariawan Andi
PB - Institute of Electrical and Electronics Engineers Inc.
Y2 - 15 September 2020 through 16 September 2020
ER -