EVALUASI PENERAPAN KEAMANAN INFORMASI BERDASARKAN ISO/IEC 27001 PADA “RUMAH DATAKU” PUSDATIN KEMENTERIAN KEPENDUDUKAN DAN PEMBANGUNAN KELUARGA/BKKBN

Riani Putri Utami, . (2026) EVALUASI PENERAPAN KEAMANAN INFORMASI BERDASARKAN ISO/IEC 27001 PADA “RUMAH DATAKU” PUSDATIN KEMENTERIAN KEPENDUDUKAN DAN PEMBANGUNAN KELUARGA/BKKBN. Skripsi thesis, Universitas Pembangunan Nasional Veteran Jakarta.

[img] Text
ABSTRAK.pdf
Download (178kB)
[img] Text
AWAL.pdf
Download (666kB)
[img] Text
BAB 1.pdf
Restricted to Repository UPNVJ Only
Download (255kB)
[img] Text
BAB 2.pdf
Restricted to Repository UPNVJ Only
Download (416kB)
[img] Text
BAB 3.pdf
Restricted to Repository UPNVJ Only
Download (467kB)
[img] Text
BAB 4.pdf
Restricted to Repository UPNVJ Only
Download (1MB)
[img] Text
BAB 5.pdf
Download (221kB)
[img] Text
DAFTAR PUSTAKA.pdf
Download (211kB)
[img] Text
DAFTAR RIWAYAT HIDUP.pdf
Restricted to Repository staff only
Download (132kB)
[img] Text
LAMPIRAN.pdf
Restricted to Repository UPNVJ Only
Download (1MB)
[img] Text
HASIL PLAGIARISME.pdf
Restricted to Repository staff only
Download (19MB)
[img] Text
ARTIKEL KI.pdf
Restricted to Repository staff only
Download (631kB)

Abstract

This study aims to identify the implementation of information security, analyze its level of compliance with the ISO/IEC 27001:2022 standard, identify implementation gaps, and develop improvement recommendations for the Rumah DataKu Information System managed by the Center for Data and Information Technology (Pusdatin) of BKKBN. This research employed a qualitative descriptive method using the Plan-Do-Check-Act (PDCA) approach. Data were collected through observation, interviews, literature review, documentation, and a checklist based on ISO/IEC 27001:2022 Annex A, which consists of 93 information security controls covering Organizational Controls (A.5), People Controls (A.6), Physical Controls (A.7), and Technological Controls (A.8). Data analysis was conducted by measuring the level of control compliance, assessing the maturity level, and performing a gap analysis between the current condition and the expected condition based on the ISO/IEC 27001:2022 standard. The results show that, out of the 93 controls evaluated, 53.76% were compliant, 38.71% were not compliant, and 7.53% were not implemented. The maturity level assessment indicates that Annex A.5 (Organizational Controls) achieved a score of 54% and was categorized as Repeatable but Intuitive, Annex A.6 (People Controls) achieved 75% and was categorized as Managed and Measurable, Annex A.7 (Physical Controls) achieved 72% and was categorized as Defined Process, while Annex A.8 (Technological Controls) achieved 73.52% and was categorized as Managed and Measurable. The gap analysis revealed that several information security controls still have implementation gaps, particularly in information security governance, information asset management, information security incident management, access control, endpoint security, secure development, and security testing. These controls have not yet achieved the expected maturity level and still require improvements in documentation, formal procedures, monitoring, and continuous evaluation mechanisms. Based on the evaluation results, improvement recommendations were developed focusing on the establishment of information security policies and standard operating procedures (SOPs), strengthening information asset management, enhancing information security incident handling mechanisms, improving access control management, implementing secure development practices, and conducting periodic security testing. This study concludes that the implementation of information security within the Rumah DataKu Information System has been carried out reasonably well; however, improvements are still required in several priority controls to enhance the maturity level of information security and achieve better alignment with the ISO/IEC 27001:2022 standard.

Item Type: Thesis (Skripsi)
Additional Information: [No.Panggil: 2210512068] [Pembimbing 1: Kraugusteeliana] [Pembimbing 2: I Wayan Widi Pradnyana] [Penguji 1: Tjahjanto] [Penguji 2: Bambang Triwahyono]
Uncontrolled Keywords: ISO/IEC 27001:2022, information security, maturity level, gap analysis, PDCA, Rumah DataKu.
Subjects: T Technology > T Technology (General)
Divisions: Fakultas Ilmu Komputer > Program Studi Sistem Informasi (S1)
Depositing User: RIANI PUTRI UTAMI
Date Deposited: 08 Sep 2026 03:20
Last Modified: 08 Sep 2026 03:20
URI: http://repository.upnvj.ac.id/id/eprint/51008

Actions (login required)

View Item View Item