Penilaian Pengamanan Teknologi Pada Sistem Pembelajaran Elektronik Menggunakan Indeks Keamanan Informasi Di Politeknik Negeri Batam

Abstract

As an electronic learning system organizer State Polytechnic of Batam (Polibatam) must arrange secured electronic learning system. Ministry of Communication and Information of Indonesia expects the organizations which arrange electronic system can perform SNI ISO 27001 certification related to information security. Information security condition on organizations which will perform on certifiation is expected on maturity level at III+ (Directorate of Information Security Team, 2011). On the other hand, there is a gap between expected conditon and actual condition. Information security index (KAMI) is a tool to assess the implementation of information security that has been done. This research is assessed related to technology component because of high dependency of organization on technology. The purpose of research is to identify how far the security of technology at State Polytechnic of Batam by using information security index. Based on research, electronic learning system that is organized by State Polytechnic of Batam is low categorized. The total percentage is 65 or 54,17% out of maximum percentage. Therefore, the maturity level of technology security is on maturity level II which means the maturity level of technology security is under the expected maturity level for minimum readiness certification on III+. It is caused the position of State Polyetechnic of Batam is on a organizational development stage. Moreover, the focus of organization is related on operational, not strategic.

Assessment and Mitigation of Information Security Policy in Budgeting System using KAMI Index 4.1

“…The Ministry of Communication and Information Technology of the Republic of Indonesia has issued regulation number 4 of 2016 concerning Information Security Management Systems (ISMS) [4]. As a form of implementation of the applicable law, the Ministry of Communication and Information (Kemkominfo) of the Republic of Indonesia expects organizations that operate electronic systems to carry out SNI ISO 27001 certification related to information security [5]. Several assessment tools can be used regarding information security in institutions, for example, by using ISO 27001:2013 [6], COBIT [7], a combination of COBIT 4.1, ITIL v.3, and ISO 27001 [8].…”