ABSTRAKPenyajian informasi atau berita yang menarik, kreatif, dan informatif merupakan salah satu modal untuk menciptakan informasi yang mudah di terima oleh pembaca salah satunya guru-guru di sekolah. Tujuan pengabdian masyrakat yang dilakukan adalah menumbuhkan rasa kreativitas dan terciptanya inovasi terutama dalam pembuatan media pembelajaran. Pelatihan penggunaan Canva yang diberikan kepada Bapak dan Ibu Guru Madrasah Ibtidaiyah (MI) Muhammadiyah Rabak, Purbalingga. Metode yang dilakukan adalah demonstasi dengan mempraktikkan secara langsung melalui Zoom Meeting. Materi yang diberikan antara lain pembuatan akun, penggunaan template yang tersedia hingga pengaturan penggunaan elemen yang ada untuk penunjang materi yang akan dibuat ke dalam slide. Hasil kegiatan pengabdian yaitu para peserta mempraktikkan langsung sesuai arahan modul pelatihan. Evaluasi kegiatan yang dilakukan yaitu pembagian kuisioner dengan beberapa indikator yaitu kemudahan penggunaan, kejelasan materi yang disampaikan, dan manfaat yang dirasakan oleh peserta. Pelatihan ini dapat menambah wawasan dan ilmu pengetahun bagi para guru khususnya dalam menambah referensi cara penyampaian bahan ajar yang menarik dan mudah diterima oleh siswa. Saran yang dapat diberikan yaitu adanya pelatihan berkelanjutan agar para guru dapat memaksimalkan ilmu yang telah disampaikan. Kata kunci: canva; desain; infografis; presentasi. ABSTRACTPresentation of information or news that is interesting, creative, and informative is one of the capitals to create information is easily accepted by readers, one of which is teachers in schools. The purpose of community service to foster a sense of creativity and create innovation, especially in the manufacture of learning media. Training on the use of Canva given to the teachers of Madrasah Ibtidaiyah (MI) Muhammadiyah Rabak, Purbalingga. The method used demonstration by practicing directly through Zoom Meetings. The materials provided include account creation, use of available templates to setting the use of existing elements to support the material to be made into slides. The results of the service activities are that the participants practice directly according to the directions of the training module. The evaluation of the activities carried out was the distribution of questionnaires with several indicators, namely ease of use, clarity of the material presented, and the benefits felt by participants. This training can add insight and knowledge for teachers, especially in adding references to how to deliver teaching materials that are interesting and easily accepted by students. Suggestions that can be given are continuous training so that teachers can maximize the knowledge that has been conveyed. Keywords: canva; design; infographic; presentation.

Information security issues commonly arise in a company and institution, including those in University. Some of the threats and attacks are unauthorized access, system user accountability, and logical and physical issues. This study reveals the obedience rate of the information security principle in Universitas Amikom Purwokerto and provides a recovery strategy. The domains being used were APO13, DSS5, and MEA3. The researcher employed a descriptive quantitative method by having documentation, interview, and administering a questionnaire to the respondents.  The respondents were 83 employees who got selected by using the purposive sampling technique. The result shows that the capability level is in level 3, known as the established process. It means that the employees have applied the current procedure, even though they have not applied information security management. The proposed refinement strategy emphasizes the security policy, classification and asset management, physics and environment security, and business continuity management. The gap can be fixed by implementing the proposed refinement strategy. Future researchers may evaluate obedience based on the identified variables by keeping the standard in mind.

Suatu organisasi memerlukan sumber daya yang memadai dan mendukung, seperti informasi yang harus dijaga serta dilindungi dari berbagai macam bencana maupun ancaman. Ancaman yang menyerang suatu sistem pun masih banyak terjadi khususnya pada sistem yang krusial. Risiko-risiko yang dapat terjadi adalah kerusakan fisik dari server maupun gangguan jaringan sehingga membutuhkan rancangan penanganan bencana menggunakan DRP. Perencanaan pemulihan risiko atau disebut sebagai Disaster Recovery Planning (DRP) merupakan mekanisme atau sebuah perencanaan yang dilakukan sebagai pemulihan dari bencana yang terjadi. Strategi Recovery Plan dibuat berdasarkan kerangka kerja NIST (National Institute of Standard and Technology) SP 800-34 terdiri dari Risk Assesment, Business Impact Analysis (BIA), Recovery Strategy, Testing, dan Plan Documentation. Hasil yang diperoleh dari penelitian ini menunjukan dokumen Disaster Recovery Plan dapat membantu memulihkan sistem informasi apabila terjadi suatu bencana berdasarkan tingkat prioritas risiko dampak yang terjadi. Urutan tingkat prioritasnya antara lain Website Student dengan nilai 100% dan masing-masing 67% untuk E-Learning; Absensi Perkuliahan; dan Smart Dosen.

The business process of an organization can’t be done properly without appropriate information management, in which information is an important asset that needs to be protected with the utmost care and concern. Information security is a way to protect information from large scale threats, thus to ensure the sustainability of the organization's operational, to reduce business risks and to increase business opportunity and return of investment. This research is conducted to measure the accountability of ISO 27001 in assisting the organization to document the information security policy. ISO/IEC 27001:2005 is a standard of information security that is widely used, openly accepted and implemented, and suitable for providing rules related to implementation and evaluation of the information security system. The assessment from ISO controls and objectives will be converted into a triangular fuzzy number to help in the analysis purpose. The fuzzy number is used to simplify the measurement. The result shows that the organization is not yet complying with the standard procedures of the Information Security Management System so it is needed to document the security policy based on the ISO 27001 framework standard.

No abstract