Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance

Sigit Prasetyo; Yudho Giri Sucahyo

doi:10.1109/ICACSIS.2014.7065875

Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance

Sigit Prasetyo, Yudho Giri Sucahyo

Department of Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

4 Citations (Scopus)

Abstract

Ministry of Finance in particular the Directorate General of State Asset (DJKN) is one organization that is tasked to undertake the management of state asset and improved services to stakeholders using information technology as a supporting element. To realize the value database of state asset into a credible executive information intact, timely, accurate and can be used for decision making process for the leadership of the Ministry of Finance then needed an information security risk management plan to the main information systems that support business processes DJKN. This research aimed to develop an information security risk management plan for DJKN particularly to applications that support key business processes that called state assets module applications using the framework of ISO 27005 and ISO 27002 for risk reduction management. The results obtained from this research is the information security risk management plan that contains the document mitigation risk, control recommendations to reduce risk and acceptance of risk which contains risk management decisions also the person in charge of mitigation risk.

Original language	English
Title of host publication	Proceedings - ICACSIS 2014
Subtitle of host publication	2014 International Conference on Advanced Computer Science and Information Systems
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	96-101
Number of pages	6
ISBN (Electronic)	9781479980758
DOIs	https://doi.org/10.1109/ICACSIS.2014.7065875
Publication status	Published - 23 Mar 2014
Event	2014 International Conference on Advanced Computer Science and Information Systems, ICACSIS 2014 - Jakarta, Indonesia Duration: 18 Oct 2014 → 19 Oct 2014

Publication series

Name	Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems

Conference

Conference	2014 International Conference on Advanced Computer Science and Information Systems, ICACSIS 2014
Country/Territory	Indonesia
City	Jakarta
Period	18/10/14 → 19/10/14

Keywords

ISO 27002
ISO 27005
Information Security
Risk Management

Access to Document

10.1109/ICACSIS.2014.7065875

Cite this

Prasetyo, S., & Sucahyo, Y. G. (2014). Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance. In Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems (pp. 96-101). Article 7065875 (Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICACSIS.2014.7065875

Prasetyo, Sigit ; Sucahyo, Yudho Giri. / Information security risk management planning : A case study at application module of state asset directorate general of state asset ministry of finance. Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems. Institute of Electrical and Electronics Engineers Inc., 2014. pp. 96-101 (Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems).

@inproceedings{fd0f9a6d1aaf4235bbf809f137deed37,

title = "Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance",

abstract = "Ministry of Finance in particular the Directorate General of State Asset (DJKN) is one organization that is tasked to undertake the management of state asset and improved services to stakeholders using information technology as a supporting element. To realize the value database of state asset into a credible executive information intact, timely, accurate and can be used for decision making process for the leadership of the Ministry of Finance then needed an information security risk management plan to the main information systems that support business processes DJKN. This research aimed to develop an information security risk management plan for DJKN particularly to applications that support key business processes that called state assets module applications using the framework of ISO 27005 and ISO 27002 for risk reduction management. The results obtained from this research is the information security risk management plan that contains the document mitigation risk, control recommendations to reduce risk and acceptance of risk which contains risk management decisions also the person in charge of mitigation risk.",

keywords = "ISO 27002, ISO 27005, Information Security, Risk Management",

author = "Sigit Prasetyo and Sucahyo, {Yudho Giri}",

note = "Publisher Copyright: {\textcopyright} 2014 IEEE.; 2014 International Conference on Advanced Computer Science and Information Systems, ICACSIS 2014 ; Conference date: 18-10-2014 Through 19-10-2014",

year = "2014",

month = mar,

day = "23",

doi = "10.1109/ICACSIS.2014.7065875",

language = "English",

series = "Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "96--101",

booktitle = "Proceedings - ICACSIS 2014",

address = "United States",

}

Prasetyo, S & Sucahyo, YG 2014, Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance. in Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems., 7065875, Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems, Institute of Electrical and Electronics Engineers Inc., pp. 96-101, 2014 International Conference on Advanced Computer Science and Information Systems, ICACSIS 2014, Jakarta, Indonesia, 18/10/14. https://doi.org/10.1109/ICACSIS.2014.7065875

Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance. / Prasetyo, Sigit; Sucahyo, Yudho Giri.
Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems. Institute of Electrical and Electronics Engineers Inc., 2014. p. 96-101 7065875 (Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Information security risk management planning

T2 - 2014 International Conference on Advanced Computer Science and Information Systems, ICACSIS 2014

AU - Prasetyo, Sigit

AU - Sucahyo, Yudho Giri

PY - 2014/3/23

Y1 - 2014/3/23

N2 - Ministry of Finance in particular the Directorate General of State Asset (DJKN) is one organization that is tasked to undertake the management of state asset and improved services to stakeholders using information technology as a supporting element. To realize the value database of state asset into a credible executive information intact, timely, accurate and can be used for decision making process for the leadership of the Ministry of Finance then needed an information security risk management plan to the main information systems that support business processes DJKN. This research aimed to develop an information security risk management plan for DJKN particularly to applications that support key business processes that called state assets module applications using the framework of ISO 27005 and ISO 27002 for risk reduction management. The results obtained from this research is the information security risk management plan that contains the document mitigation risk, control recommendations to reduce risk and acceptance of risk which contains risk management decisions also the person in charge of mitigation risk.

AB - Ministry of Finance in particular the Directorate General of State Asset (DJKN) is one organization that is tasked to undertake the management of state asset and improved services to stakeholders using information technology as a supporting element. To realize the value database of state asset into a credible executive information intact, timely, accurate and can be used for decision making process for the leadership of the Ministry of Finance then needed an information security risk management plan to the main information systems that support business processes DJKN. This research aimed to develop an information security risk management plan for DJKN particularly to applications that support key business processes that called state assets module applications using the framework of ISO 27005 and ISO 27002 for risk reduction management. The results obtained from this research is the information security risk management plan that contains the document mitigation risk, control recommendations to reduce risk and acceptance of risk which contains risk management decisions also the person in charge of mitigation risk.

KW - ISO 27002

KW - ISO 27005

KW - Information Security

KW - Risk Management

UR - http://www.scopus.com/inward/record.url?scp=84946691751&partnerID=8YFLogxK

U2 - 10.1109/ICACSIS.2014.7065875

DO - 10.1109/ICACSIS.2014.7065875

M3 - Conference contribution

AN - SCOPUS:84946691751

T3 - Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems

SP - 96

EP - 101

BT - Proceedings - ICACSIS 2014

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 18 October 2014 through 19 October 2014

ER -

Prasetyo S, Sucahyo YG. Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance. In Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems. Institute of Electrical and Electronics Engineers Inc. 2014. p. 96-101. 7065875. (Proceedings - ICACSIS 2014: 2014 International Conference on Advanced Computer Science and Information Systems). doi: 10.1109/ICACSIS.2014.7065875

Information security risk management planning: A case study at application module of state asset directorate general of state asset ministry of finance

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this