Pengukuran Manajemen Risiko Teknologi Informasi dengan Metode Octtave-S
DOI:
https://doi.org/10.21512/comtech.v5i2.2336Keywords:
OCTAVE-S method, risks, information technologyAbstract
The purpose of this paper is to measure risks to identify company's assets and analyze risks, and to do strategic planning of security protection and minimize risk. Research used case study by reading materials dealing with the OCTAVE-S method. Observation was done directly to the relating parties through an interview, as well as using a questionnaire based on the OCTAVE-S method. The result obtained from this research is risk management of information technology in order to minimize the risks. Based on the findings obtained, it is expected company can identify potential risks and mitigate them efficiently and effectively.
Plum Analytics
References
Alberts, C., Dorofee, A., Stevens, J., & Woody, C. (2005). OCTAVE-S Implementation Guide, Version 1.0. Pittsburgh: Carnegie Mellon Software Engineering Institute.
Bojanc, R. & Jerman–Blazic, B. (2008). An economic modelling approach to information security risk management. International Journal of Information Management, 28(5), 413–422.
Gondodiyoto, S. (2007). Audit Sistem Informasi + Pendekatan COBIT. Edisi Revisi. Jakarta: Mitra Wacana Media.
Jordan, E. & Silcock, L. (2005). Beating IT Risks. England: John Wiley and Sons.
Liu, S., Kuhn, R., & Rossman, H. (2009). Understanding insecure IT: Practical risk assessment. IT Professional, 11(3), 57–59.
OCTAVE-S Implementation Guide. (2005). Volume 10: Example Scenario. Version 1.0.
Downloads
Published
Issue
Section
License
Authors who publish with this journal agree to the following terms:
a. Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License - Share Alike that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
b. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial publication in this journal.
c. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work.
USER RIGHTS
All articles published Open Access will be immediately and permanently free for everyone to read and download. We are continuously working with our author communities to select the best choice of license options, currently being defined for this journal as follows:
