Alya, Zahradita Sironi (2025) INTEGRASI FRAMEWORK COBIT 2019 DAN STANDAR ISO/IEC 27001:2022 DALAM AUDIT KEAMANAN SISTEM DAN JARINGAN (STUDI KASUS: UPT TIK UNIVERSITAS X). FAKULTAS TEKNIK, UNIVERSITAS LAMPUNG.
|
File PDF
ABSTRAK - Alya Zahradita.pdf Download (451Kb) | Preview |
|
![[img]](http://digilib.unila.ac.id/style/images/fileicons/text.png) |
File PDF
Skripsi Tanpa Lampiran (scan ttd) - Alya Zahradita.pdf Restricted to Hanya staf Download (3864Kb) | Minta salinan |
|
|
File PDF
Skripsi Tanpa Pembahasan & Lampiran (scan ttd) - Alya Zahradita.pdf Download (2175Kb) | Preview |
Abstrak (Berisi Bastraknya saja, Judul dan Nama Tidak Boleh di Masukan)
Keamanan sistem dan jaringan menjadi aspek krusial bagi Universitas X dalam menghadapi ancaman siber yang terus meningkat, terutama setelah terjadinya insiden peretasan terhadap situs universitas dan Virtual Class. Oleh karena itu, perlu dilakukan audit terhadap UPT TIK selaku pengelola teknologi informasi di lingkungan universitas dengan tujuan mengevaluasi tingkat kapabilitas, menganalisis kesenjangan, memastikan efektivitas kontrol keamanan, serta memberikan rekomendasi perbaikan guna mendukung perlindungan infrastruktur TI. Penelitian ini dilakukan dengan mengintegrasikan framework COBIT 2019 dan standar ISO/IEC 27001:2022. Objektif audit COBIT 2019 dipilih berdasarkan Design Factors dengan prioritas ≥75 atau level 4 sebagai target yang ingin dicapai. Objektif COBIT 2019 yang digunakan mencakup APO13 (Managed Security), DSS02 (Managed Service Requests and Incidents), dan DSS05 (Managed Security Services). Berdasarkan hasil integrasi, diperoleh 17 kontrol ISO/IEC 27001:2022 yang relevan dengan proses pada ketiga objektif tersebut. Hasil penelitian menunjukkan bahwa objektif APO13 berada pada capability level 1 dengan gap sebesar 3, DSS02 telah mencapai target capability level yaitu level 4, sedangkan DSS05 berada pada capability level 3 dengan gap sebesar 1. Dari 17 kontrol ISO/IEC 27001:2022 yang dianalisis, terdapat lima kontrol yang belum diterapkan oleh UPT TIK, yaitu: A.5.1 – Kebijakan Keamanan Informasi, A.5.24 – Perencanaan dan Persiapan Manajemen Kejadian Keamanan Informasi, A.5.28 – Pengumpulan Bukti, A.5.29 – Keamanan Informasi Selama Gangguan, dan A.7.2 – Entri Fisik. Rekomendasi yang diberikan meliputi adopsi standar ISO/IEC 27001:2022, penyusunan kebijakan dan Standar Operasional Prosedur (SOP) terkait keamanan informasi, perekrutan Sumber Daya Manusia (SDM), serta pembentukan tim Computer Security Incident Response Team (CSIRT). Kata kunci: Audit TI, Keamanan Sistem dan Jaringan, ISO 27001, COBIT 2019, Teknologi Informasi dan Komunikasi. System and network security is a crucial aspect for University X in the face of increasing cyber threats, especially after the hacking incident of the university website and Virtual Class. Therefore, it is necessary to conduct an audit of UPT TIK as the manager of information technology in the university environment with the aim of evaluating the level of capability, analyzing gaps, ensuring the effectiveness of security controls, and providing recommendations for improvements to support the protection of IT infrastructure. This research was conducted by integrating the COBIT 2019 framework and the ISO/IEC 27001: 2022 standard. COBIT 2019 audit objectives are selected based on Design Factors with a priority of ≥75 or level 4 as the target to be achieved. The COBIT 2019 objectives used include APO13 (Managed Security), DSS02 (Managed Service Requests and Incidents), and DSS05 (Managed Security Services). Based on the integration results, 17 ISO/IEC 27001:2022 controls are obtained that are relevant to the processes in the three objectives. The results showed that objective APO13 is at capability level 1 with a gap of 3, DSS02 has reached the target capability level of level 4, while DSS05 is at capability level 3 with a gap of 1. Of the 17 ISO/IEC 27001: 2022 controls analyzed, there are five controls that have not been implemented by UPT TIK, namely: A.5.1 - Information Security Policy, A.5.24 - Information Security Event Management Planning and Preparation, A.5.28 - Evidence Collection, A.5.29 - Information Security During Disruptions, and A.7.2 - Physical Entry. Recommendations include adopting the ISO/IEC 27001:2022 standard, developing policies and Standard Operating Procedures (SOP) related to information security, recruiting Human Resources (HR), and forming a Computer Security Incident Response Team (CSIRT). Keywords: IT Audit, System and Network Security, ISO 27001, COBIT 2019, Information and Communication Technology.
| Jenis Karya Akhir: | Skripsi |
|---|---|
| Subyek: | 600 Teknologi (ilmu terapan) > 620 Ilmu teknik dan ilmu yang berkaitan |
| Program Studi: | FAKULTAS TEKNIK (FT) > Prodi S1-Teknik Informatika |
| Pengguna Deposit: | UPT . Siswanti |
| Date Deposited: | 31 Oct 2025 03:10 |
| Terakhir diubah: | 31 Oct 2025 03:10 |
| URI: | http://digilib.unila.ac.id/id/eprint/92486 |
Actions (login required)
 |
Lihat Karya Akhir |
