International Journal of Computer Applications |
Foundation of Computer Science (FCS), NY, USA |
Volume 185 - Number 11 |
Year of Publication: 2023 |
Authors: Nadia Cahya Kartika, Imam Riadi |
![]() |
Nadia Cahya Kartika, Imam Riadi . Analysis of Risk Management on DAPODIK System Services using OCTAVE Allegro Framework. International Journal of Computer Applications. 185, 11 ( May 2023), 37-44. DOI=10.5120/ijca2023922759
Dapodik is a comprehensive national-scale data collection system that is the main source of national education data for national education planning programs. As a result, schools must actively participate in DAPODIK activities to collect data. This study discusses risk management analysis in the DAPODIK system at SD Negeri Karangtalun 03 Cilacap with a qualitative approach using the OCTAVE Allegro method to reduce the occurrence of risks in the DAPODIC system. The OCTAVE Allegro method focuses on information assets owned by an organization or company in the contex t of how they are used, their storage, movement, processing, how threats, vulnerabilities, and disruptions occur in those assets. The OCTAVE Allegro method is divided into eight steps, namely building risk measurement criteria; developing information asset profiles; identifying containers of information assets; identifying areas of concern (problem areas) in technical, physical, and people container aspects; identifying threat scenarios; identify risks; analyze risks; Choose mitigation and control approaches that are adjusted to the results of the calculation of the relative risk score. Based on the results of testing on the DAPODIK system at SD Negeri Karangtalun 03 Cilacap, 4 mitigate approaches, 2 defers, and 2 accept. The relatively high-risk value is found in the Physical Container (PhC) with a total risk value of 29, due to a natural disaster that causes DAPODIK system services to stop. The risk value is relatively low in the Technical Container (TC) with a total risk value of 15, due to internet connectivity disruptions so DAPODIK system services are interrupted or temporarily stopped.