Bureau XYZ strived to facilitate the realization of good governance through electronic government (e-government). There were various information systems that were implemented as part of this effort, one of which was the mail management information system. Bureau XYZ has implemented an Information Security Management System (ISMS) using ISO 27001:2013 standards. Nevertheless, optimization and management of information technology risks were necessary to ensure that the implementation of the software was in accordance with the capabilities and objectives of the organization. Therefore, it was necessary to measure the capability level to determine the actions that need to be taken to improve information security risk management in implementing the software. This study aimed to obtain the capability level of the mail management information system's information security risk management process, find out the gap between the actual and desired capability level and provide recommendations for improvement according to COBIT 5. This study measured the EDM03-Ensure Risk Optimization process. The assessment results showed that the EDM03 process was at Level 1 (Performed) and had a gap value of 2 from the desired capability level, Level 3 (Established). Recommendations for improvement were also included in this study to help the organization achieve the desired level based on the assessment results, list of findings, and validation of work products.

The world today has a rapidly growing human population whose daily needs are certainly increasing. Supermarket is a place to fulfill daily needs. When going to the supermarket, we have to spend a lot of time both shopping and also queuing at the cashier. This turns out to be a problem for customers because it can take up customers' time which is also experienced by one of the largest supermarkets, namely Hypermart. Not only a problem for customers, but it can also create a threat to Hypermart companies. However, with advances in technology and information systems, the world is growing to adapt to current conditions, namely by improvising. The improvisation carried out in this research is the payment transaction business process at Hypermart, namely by implementing the Self-CheckOut system by replacing the old trolley with a "Hyper Smart Cart" as an improvisation which will certainly answer all existing problems.

The expansion of the tourism industry's information system is one opportunity for growth, as a result, Bersukaria Tour was used as a case study in this study. Bersukaria is one of the MSMEs in Semarang which is engaged in tourism. Although Bersukaria already has a website, its operational procedures and interface design should yet be improved. As a result, the authors create the website to optimize business process flow and enhance visual appeal. The method used is the waterfall which involves the Bersukaria team to find out the needs of the application to be developed. Black box testing is used in the application testing process so that built-in application functionalities can be validated. If there are features that need to be improved, they can be adjusted immediately. The online ticket information system on the website is able to have a positive impact because tour participants do not need to queue and pay offline, making it easier for participants to make reservations. Additionally, participant data is kept in a database, and the website allows users to see updates to the participant quota. The findings of this study should help Bersukaria Tour in creating and improving the website system and increasing interest among local and international audiences in visiting Indonesia's tourist destinations.

No abstract

No abstract