Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia

Hadi Prabowo; Muhammad Rifki Shihab; Rizal Fathoni Aji

doi:10.1109/IWBIS.2018.8471716

Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia

Hadi Prabowo, Muhammad Rifki Shihab, Rizal Fathoni Aji

Department of Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Citation (Scopus)

Abstract

Information security is considered as an important facet of IT management in the energy industry, which ranks as the top five targets of cyber-attacks around the world, including in Indonesia. In this case-study action research, we unrevealed the way an organization in the oil and gas industry improve its information security management up to par to that of ISO 27001:2013. Data was gathered by means of a series of FGDs in which the researchers were actively involved as a team member. This research clarified the steps undertook, from the generation of risk registers, its mitigation, and the development of SOA. Furthermore, a gap analysis of the organization's current condition compared with the standards of ISO 27001:2013 was analyzed. Finally, a set of recommendations was offered to improve the organization's information security management in order to meet to standards of ISO27001:2013.

Original language	English
Title of host publication	2018 International Workshop on Big Data and Information Security, IWBIS 2018
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	159-163
Number of pages	5
ISBN (Electronic)	9781538655252
DOIs	https://doi.org/10.1109/IWBIS.2018.8471716
Publication status	Published - 24 Sept 2018
Event	2018 International Workshop on Big Data and Information Security, IWBIS 2018 - Balai Kartini, Jakarta, Indonesia Duration: 12 May 2018 → 13 May 2018

Publication series

Name	2018 International Workshop on Big Data and Information Security, IWBIS 2018

Conference

Conference	2018 International Workshop on Big Data and Information Security, IWBIS 2018
Country/Territory	Indonesia
City	Balai Kartini, Jakarta
Period	12/05/18 → 13/05/18

Keywords

Energy
ISO 27001
Information security
Information security management
Oil and Gas

Access to Document

10.1109/IWBIS.2018.8471716

Cite this

Prabowo, H., Shihab, M. R., & Aji, R. F. (2018). Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia. In 2018 International Workshop on Big Data and Information Security, IWBIS 2018 (pp. 159-163). Article 8471716 (2018 International Workshop on Big Data and Information Security, IWBIS 2018). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/IWBIS.2018.8471716

Prabowo, Hadi ; Shihab, Muhammad Rifki ; Aji, Rizal Fathoni. / Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia. 2018 International Workshop on Big Data and Information Security, IWBIS 2018. Institute of Electrical and Electronics Engineers Inc., 2018. pp. 159-163 (2018 International Workshop on Big Data and Information Security, IWBIS 2018).

@inproceedings{39d91870a0434771b043d1971df970b3,

title = "Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia",

abstract = "Information security is considered as an important facet of IT management in the energy industry, which ranks as the top five targets of cyber-attacks around the world, including in Indonesia. In this case-study action research, we unrevealed the way an organization in the oil and gas industry improve its information security management up to par to that of ISO 27001:2013. Data was gathered by means of a series of FGDs in which the researchers were actively involved as a team member. This research clarified the steps undertook, from the generation of risk registers, its mitigation, and the development of SOA. Furthermore, a gap analysis of the organization's current condition compared with the standards of ISO 27001:2013 was analyzed. Finally, a set of recommendations was offered to improve the organization's information security management in order to meet to standards of ISO27001:2013.",

keywords = "Energy, ISO 27001, Information security, Information security management, Oil and Gas",

author = "Hadi Prabowo and Shihab, {Muhammad Rifki} and Aji, {Rizal Fathoni}",

note = "Publisher Copyright: {\textcopyright} 2018 IEEE.; 2018 International Workshop on Big Data and Information Security, IWBIS 2018 ; Conference date: 12-05-2018 Through 13-05-2018",

year = "2018",

month = sep,

day = "24",

doi = "10.1109/IWBIS.2018.8471716",

language = "English",

series = "2018 International Workshop on Big Data and Information Security, IWBIS 2018",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "159--163",

booktitle = "2018 International Workshop on Big Data and Information Security, IWBIS 2018",

address = "United States",

}

Prabowo, H, Shihab, MR & Aji, RF 2018, Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia. in 2018 International Workshop on Big Data and Information Security, IWBIS 2018., 8471716, 2018 International Workshop on Big Data and Information Security, IWBIS 2018, Institute of Electrical and Electronics Engineers Inc., pp. 159-163, 2018 International Workshop on Big Data and Information Security, IWBIS 2018, Balai Kartini, Jakarta, Indonesia, 12/05/18. https://doi.org/10.1109/IWBIS.2018.8471716

Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia. / Prabowo, Hadi; Shihab, Muhammad Rifki ; Aji, Rizal Fathoni.
2018 International Workshop on Big Data and Information Security, IWBIS 2018. Institute of Electrical and Electronics Engineers Inc., 2018. p. 159-163 8471716 (2018 International Workshop on Big Data and Information Security, IWBIS 2018).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia

AU - Prabowo, Hadi

AU - Shihab, Muhammad Rifki

AU - Aji, Rizal Fathoni

PY - 2018/9/24

Y1 - 2018/9/24

N2 - Information security is considered as an important facet of IT management in the energy industry, which ranks as the top five targets of cyber-attacks around the world, including in Indonesia. In this case-study action research, we unrevealed the way an organization in the oil and gas industry improve its information security management up to par to that of ISO 27001:2013. Data was gathered by means of a series of FGDs in which the researchers were actively involved as a team member. This research clarified the steps undertook, from the generation of risk registers, its mitigation, and the development of SOA. Furthermore, a gap analysis of the organization's current condition compared with the standards of ISO 27001:2013 was analyzed. Finally, a set of recommendations was offered to improve the organization's information security management in order to meet to standards of ISO27001:2013.

AB - Information security is considered as an important facet of IT management in the energy industry, which ranks as the top five targets of cyber-attacks around the world, including in Indonesia. In this case-study action research, we unrevealed the way an organization in the oil and gas industry improve its information security management up to par to that of ISO 27001:2013. Data was gathered by means of a series of FGDs in which the researchers were actively involved as a team member. This research clarified the steps undertook, from the generation of risk registers, its mitigation, and the development of SOA. Furthermore, a gap analysis of the organization's current condition compared with the standards of ISO 27001:2013 was analyzed. Finally, a set of recommendations was offered to improve the organization's information security management in order to meet to standards of ISO27001:2013.

KW - Energy

KW - ISO 27001

KW - Information security

KW - Information security management

KW - Oil and Gas

UR - http://www.scopus.com/inward/record.url?scp=85055556099&partnerID=8YFLogxK

U2 - 10.1109/IWBIS.2018.8471716

DO - 10.1109/IWBIS.2018.8471716

M3 - Conference contribution

AN - SCOPUS:85055556099

T3 - 2018 International Workshop on Big Data and Information Security, IWBIS 2018

SP - 159

EP - 163

BT - 2018 International Workshop on Big Data and Information Security, IWBIS 2018

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2018 International Workshop on Big Data and Information Security, IWBIS 2018

Y2 - 12 May 2018 through 13 May 2018

ER -

Prabowo H, Shihab MR , Aji RF. Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia. In 2018 International Workshop on Big Data and Information Security, IWBIS 2018. Institute of Electrical and Electronics Engineers Inc. 2018. p. 159-163. 8471716. (2018 International Workshop on Big Data and Information Security, IWBIS 2018). doi: 10.1109/IWBIS.2018.8471716

Practical Implementation of Information Security Management in the Energy Sector Insights from An Oil and Gas Organization in Indonesia

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this