Analisa Risiko Kelangsungan Bisnis, Pengawasan dan Evaluasi Teknologi Informasi di PT ABC

Abstract

PT ABC is a company engaged in the production of reinforced
concrete. In carrying out its business processes, the company is
using the server, network, software, hardware, PC software. With
the disruption of one of these systems, the data processing will be
annoyed at having to manually process data and perform the
input to the database after the system can run normally again.
Looking at the situation and condition of PT ABC, did not rule out
the occurrence of risks such as damage to data integrity and
continuity disruption of business processes.
In this thesis conducted a risk analysis of the IT continuity and
monitoring of PT ABC. Risk analysis using the framework of ISO
31000, for process analysis and its use COBIT 4.1 control
practices, and use risk rating methodology (OWASP) for
calculating the value of risk. There are 7 risks found from analysis. One risk that has high
severity is the company did not have those who has responsibility
to monitor irregularities. Two medium risks are the company did
not have business continuity plan, and also a framework to build
that plan. Four risks with low severity are the company did not
have an offsite backup, did not have a priority plan, no training
for employees to upgrade analysis skills, and never update IT
continuity plan.