Designing Information Security Governance Recommendations and Roadmap Using COBIT 2019 Framework and ISO 27001:2013 (Case Study Ditreskrimsus Polda XYZ)

Yasin, Muhammad; Arman, Arry Akhmad; Edward, Ian Joseph Matheus; Shalannanda, Wervyan

doi:10.1109/tssa51342.2020.9310875

Cited by 21 publications

(15 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…This standard was created to meet the needs of implementing, establishing, monitoring, operating, maintaining, reviewing, and improving security management systems [4]. The determination of the ISMS policy is based on a risk management approach, which begins with an understanding of the business environment and an evaluation of resources and processes to identify possible information security risks [11,12]. ISO 27001 was chosen in this research because giving recommendations on controlling information security risks.…”

Section: Sd-wanmentioning

confidence: 99%

A Security Framework for Secure Host-to-Host Environments

Sianturi

Ramli

2022

J. RESTI (Rekayasa Sist. Teknol. Inf.)

View full text Add to dashboard Cite

Data security is an infrastructure designed to protect and secure data from unauthorized access, data manipulation, malfunction, destruction, and inappropriate data disclosure. Currently, organizations widely use data transfer to validate and verify data using different media particularly in host-to-host connections. This research focuses on data exchanged (end-to-end communication) using Multi Protocol Label Switching (MPLS), metro ethernet, and Software Defined Wide Area Network (SD-WAN) network architecture with third parties. This research aims to develop a design and analysis framework for verifying data transferred from one host to another in ABC organization by applicable security standards that are appropriate and follow its needs to help the organization. Furthermore, the analysis result is used as materials for drafting a cybersecurity framework through the three standards ISO/EIC 27001:2013, NIST SP800-161, and ITU-T X.805. The methodology used in this study is the comparative analysis of three frameworks, requirement analysis, and content analysis to develop a framework. The framework proposed of eight security dimensions, five threats, and providing mitigation is expected to enhance the security system of data exchange on host-to-host connections in ABC organization.

show abstract

Section: Sd-wanmentioning

confidence: 99%

A Security Framework for Secure Host-to-Host Environments

Sianturi

Ramli

2022

J. RESTI (Rekayasa Sist. Teknol. Inf.)

View full text Add to dashboard Cite

show abstract

“…The next stage is to determine the selected domain in the COBIT 2019 framework according to the scope of needs. This stage is the most important stage of all COBIT 2019processes [15] [16].…”

Section: A Research Flowmentioning

confidence: 99%

Utilization of the COBIT 2019 framework to identify the level of governance in internet services

Fernandez¹,

Imanullah

Fathoni³

et al. 2022

J.INFOTEL

View full text Add to dashboard Cite

Information and communication technology services at the University of Muhammadiyah Bengkulu are IT services that support IT needs in all sectors. Of all the IT services that have been implemented at this institution, there is one very crucial service, namely the internet connection service, where this internet connection service is needed by all existing information technology access. In managing this internet connection, a standardized feasibility calculation has not been carried out which results in it not being in accordance with the institutional business needs. Information technology governance is a process that is able to manage investment decisions related to Information Technology within the company in order to achieve the company's current and future needs. To achieve standardized governance, this research uses the COBIT 2019 framework which is the latest version of the development results from COBIT 5. The purpose of this study is to identify the extent to which the value of existing processes for internet connection services is currently and the value of the process achievement that refers to the standard. COBIT 2019 by calculating the maturity level value which represents the level of performance on internet connection services. From the results of the 2019 COBIT Design, LTIK Muhammadiyah Bengkulu University, it is known that those who score above 80 or must reach Capability Level 4 are APO13, BAI10, DSS02, DSS03 and DSS04, for a value of 100 there is APO12.

show abstract

“…IT Governance guarantees that the effectiveness and efficiency of increasing the Organization's business operations through ITrelated structures are measured by the Organization's strategic goals (Aprilia et al, 2019). IT Governance includes best practices and procedures for planning, managing, executing, and monitoring performance to ensure that IT effectively supports organizational goals (Yasin et al, 2020).…”

Section: Introductionmentioning

confidence: 99%

Implementation of Information Technology Governance in Man 1 Medan Using the Cobit 5 Framework

Harahap

Ikhwan

2023

SinkrOn

View full text Add to dashboard Cite

In response to the rising usage of information technology, organizations should implement an information technology plan aligned with company goals. Similarly, in education, information technology is used for business purposes. The purpose of this research is to look into the implementation of information technology governance utilizing the COBIT 5 framework. This study was carried out at MAN 1 MEDAN. The survey technique collects data through the distribution of questionnaires to information technology managers and key users in various businesses. Descriptive research discovered that the state of governance and information technology implementation at MAN 1 MEDAN was at level 3 on a scale of 0 to 5. This demonstrated that institutional behaviors had been adequately recorded and internalized. This study aims to contribute to research on the use of information technology governance, particularly for educational institutions and information technology managers, as input material in the management of information technology resources in other institutions. These associated problems are essential considerations for parents or students when selecting a Medan MAN 1 school with a high degree of IT facilities.

show abstract

Designing Information Security Governance Recommendations and Roadmap Using COBIT 2019 Framework and ISO 27001:2013 (Case Study Ditreskrimsus Polda XYZ)

Cited by 21 publications

References 4 publications

A Security Framework for Secure Host-to-Host Environments

A Security Framework for Secure Host-to-Host Environments

Utilization of the COBIT 2019 framework to identify the level of governance in internet services

Implementation of Information Technology Governance in Man 1 Medan Using the Cobit 5 Framework

Contact Info

Product

Resources

About