TA Audit Keamanan Sistem Informasi Manajemen Aset Berdasarkan Standar ISO 27002 (Studi Kasus: PT. Varia Usaha Beton)
Daftar Isi:
- PT. Varia Concrete Enterprises is a subsidiary of PT. Cement crunch (Persero) Tbk. PT. Varia Enterprises Concrete has many assets include information assets, software assets, physical assets and services. Overall asset has managed by an application called VIS (Varia Concrete Enterprises Information System). VIS applications owned by PT. Varia Concrete Enterprises has been operating online using a server at headquarters. To find out how information security is in progress at the company, it is necessary to audit the security of information systems at PT. Concrete Enterprises Varia. The standard used is ISO 27002:2005, was chosen because it is a flexible standard is developed depending on the needs of the organization, the organization's objectives, security requirements, existing business processes, number of employees and the size of the organizational structure as well as a focus on information security management system. From the implementation of information systems audit, the resulting value Maturity Level 3123, which are included in the defined categories. The study also produced recommendations for improvement of information systems processes such as standardization and documentation of existing procedures, increase management efforts in the use of standards and standardized processes existing information systems. Recommendations can be used to enhance the security of information on PT. Varia Concrete Enterprises as well as being a reference to obtain the ISMS standard ISO 27002:2005 certification.