International Journal of Computer Applications |
Foundation of Computer Science (FCS), NY, USA |
Volume 183 - Number 23 |
Year of Publication: 2021 |
Authors: Citra Dika Saputra, Imam Riadi |
10.5120/ijca2021921602 |
Citra Dika Saputra, Imam Riadi . Analysis of Risk Assessment on Integrated Information System using COBIT 5 Framework. International Journal of Computer Applications. 183, 23 ( Sep 2021), 38-45. DOI=10.5120/ijca2021921602
The Integrated Service Management Information System is dedicated to providing the best service in terms of population administration and licensing services to the community. The Integrated Service SIM can be accessed through the Jogja Smart Service (JSS) application or http://jss.jogjakota.go.id. Integrated Services allow for risks that can interfere with information assets and organizational goals. This study uses the COBIT 5 framework which aims to analyze risk assessment so that organizations can choose a mitigation approach to risks that may occur and provide recommendations. The risk management assessment in this study uses the COBIT 5 process domain framework EDM03 (Ensure Risk Optimization) and APO12 (Risk Management). This study aims to determine the level of IT risk management capability using the COBIT 5 Process Assessment Model (PAM) methodology which consists of the Initiation, Planning the Assessment, Briefing, Data Collection, Data Validation, Process Attribute Level and Reporting the Result stages. Calculation of the questionnaire using the Likert Scale method. The result of the research is that the Capability level value in the EDM03 domain is at level 2 with a capability value of 1.63, at this level the Integrated Service SIM has implemented the Managed Process. EDM03 has a Gap value of 1 level, this is the basis for making recommendations. While in the APO12 domain it is at level 1 with a capability value of 1.42 at this level Integrated Service SIM has implemented Performed Process. APO12 has a Gap value of 1 level, this is the basis for making recommendations. This research was carried out well in accordance with the expected research objectives.