scholarly journals IMPLEMENTASI OCTAVE-S DAN STANDAR PENGENDALIAN ISO 27001:2013 PADA MANAJEMEN RISIKO SISTEM INFORMASI PERGURUAN TINGGI

Petir ◽  
2018 ◽  
Vol 11 (2) ◽  
Author(s):  
Rima Rizqi Wijayanti

In higher education, information systems become a strategic tool for the continuity of universities or institutions themselves, especially in the running business processes. The disruption of information systems in higher education will have a bad impact, especially for the continuity of business processes, information systems that initially as a tool will then turn into a threat and even become a risk if it is not properly addressed and mitigated. The problem that arises is that University of Muhammadiyah Tangerang has never conducted a system risk analysis assessment of existing information, including policies relating to information technology security. This study aims to provide information to the University of Muhammadiyah Tangerang regarding the risks, threats and weaknesses of information technology found and recommendations that can be applied to mitigate risks that can arise. This study uses the octave-s risk analysis method combined with ISO 27001: 2013 control standards. The results of this study are in the form of a final document that can be used as a guideline and help in the future development of a risk analysis assessment at UMT. The results of the evaluation obtained, it is known that risk management is in the MEDIUM position, meaning that UMT does not experience risks that can stop / damage information systems that have an impact on the cessation of teaching and learning, but risks and weaknesses in universities can have an impact on decreasing university performance immediately.

Author(s):  
Lianna Sugandi ◽  
Yohannes Kurniawan

Globalization has influenced the competition paradigm of higher education institutions in the world. The situation keeps changing, depending on the economy and information technology as the backbone of business processes in organizations. Higher education institutions should have added values to win the competition. Furthermore, the awareness of the society about the importance of formal education, particularly higher education, will make colleges/universities strategic institutions generating high quality human resources. The success of col-leges/universities is determined by service quality, which can be identified through the satisfaction of their customers, students and lecturers. To increase customer satisfaction and be able to compete in the globalization era, as well as generate greater profits, colleges/universities need to identify factors which influence information system services to increase customer satisfaction. Employing descriptive analysis, the study reveals that the purpose and service quality of information technology positively affect the teaching and learning process at colleges/universties.


Author(s):  
Andy Paul Harianja ◽  
Iwada Grawilser Talunohi

The development of the field of information technology is very rapid, therefore many companies, industries, shops and other business entities are using information systems to increase their business. Online sales information systems are used to carry out business processes such as distribution, sales, purchasing, marketing of goods or services by using communication networks and the internet. Online sales information systems can help people who do not have a place or shop to carry out their business. Students in this case, especially at the Catholic University of Santo Thomas, are an opportunity to take advantage of this facility in carrying out their business, especially if they do not have a place or shop to carry out their business. For this reason, an online sales information system was built that can be accessed through the website.


2018 ◽  
Vol 16 (1) ◽  
pp. 16
Author(s):  
Agoeng Koerniawan SA

The purpose of this study was to determine the role of academic information systems in improving the quality of higher education implementation in PGRI STKIP Bangkalan, and the extent to which the policies of implementing higher education before and after the use of information systems and how satisfaction is felt by students towards academic information systems at STKIP PGRI Bangkalan, named STKIP PGRI Bangkalan’s Siakad.The study was conducted by conducting a survey of users of the internet-based academic information system (Siakad STKIP PGRI Bangkalan), namely lecturers, students and employees with the method of observation and conducting in-depth interviews to obtain as much information as possible from all respondents/informants. The number of informants was 5 people consisting of the chairman of STKIP PGRI Bangkalan, Vice Chairman I, Head of BAAK and two students who had experience in their respective fields of work, knew deeply and had many roles in the process of using information systems.Based on the results of the study, it was shown that with the use of the information system/ STKIP PGRI Bangkalan’s Siakad which is one of the facilities for the smooth activities of the teaching and learning process, it proved to provide convenience, many benefits and benefits that greatly support the duties of serving lecturers, students and outsiders requiring. This is evidenced by the support of the support of lecturers and students, capacity, namely the ability of employees to process data and value, namely the benefits felt by lecturers, employees and students as well as outside parties in need.


2017 ◽  
Vol 3 (2) ◽  
pp. 197-205
Author(s):  
Nanda Luthan

The need for information systems is a very important requirement for running business processes. As the development of technology is very necessary when an information technology really supports the information systems required form. Kano method can be used to determine the need for patient information systems. With the process of the Kano method used is based on the need for information systems. because the method aims to mengatagorikan canoe will need attribute information systems. ignorance of the service attributes can cause a negative for the company services. It therefore requires an information system that can meet the needs of patient information so users of patient information is needed to support the company's performance


Author(s):  
Vincenzo Morabito ◽  
Gianluigi Viscusi

Continuity could be and should be strategic for the business competitive advantage. Besides natural disaster, from blackout to tsunami, businesses face in daily activities critical challenges in IT management for assuring business continuity; for example, business continuity management results must be strategic, because of the infrastructural, organizational, and information systems changes that are required to assure compliance with regulatory norms (see, e.g., the impact of Basel II norms in financial sector), or must have and maintain a time-to-market advantage (disasters can facilitate competitors in a first mover perspective). Nevertheless, business continuity is at present often synonymous with risk management at the IT level, disaster recovery at the hardware level, or in the best case?at the data management level?with data quality management. These perspectives fail to unveil the strategic value of IT business continuity as a framework assuring alignment of strategy, organization, and systems, allowing a competitive advantage in a dynamic competitive environment. Moreover, even when business continuity, under these perspectives, has become one of the most important issues in IT management, there still appears to be some discrepancy as to the formal definitions of what precisely constitutes a disaster, and there are difficulties in assessing the size of claims in the crises and disaster areas. Taking these issues into account, we propose: (a) an analysis of the different facets of the concept of business continuity, and (b) an integrated framework for strategic management of IT business continuity. To these ends, we move from the finance sector?a sector in which the development of information technology (IT) and information systems (IS) have had a key impact upon competitiveness. Indeed, banking industry IT and IS are considered “production,” not “support” technologies. The evolution of IT and IS has challenged the traditional ways of conducting business within the finance sector. These changes have largely represented improvements to business processes and efficiency but are not without their flaws, in as much as business disruption can occur due to IT and IS sources. The greater complexity of new IT and IS operating environments requires that organizations continually reassess how best they may face changes and exploit these later for organizational advantage. As such, IT and IS have supported massive changes in the ways in which business is conducted with consumers at the retail level. Innovations in direct banking would have been unthinkable without appropriate IS, and merger and acquisition (M&A) initiatives represent the ideal domain to show what value can lead strategic management of IT business continuity. Taking these issues into account, we point out the relevance of continuity for maintaining customers, and time-to-market in complex and evolutionary competitive environments. Due the relevance of IT to maintain a valueadded continuity, our contribution aims to clarify the concept of IT business continuity, providing a framework, exploiting the different facets that it encompasses, and showing the strategic implications to the field of IS&T.


Author(s):  
Joseph Ezale Cobbinah

Higher educational institutions are widening participation through the introduction of new programs, using different approaches to deliver learning so that many people can have access to education. With the growing number of students in our higher educational institutions, coupled with learners who are working and by virtue of their job commitments cannot do traditional face-to-face education, using information technology (IT) to support lessons in higher education institutions has become very laudable. The introduction and use of technology have brought changes in the way we teach and support students in our higher education institutions. This, therefore, calls for effective IT leaders who will be able to motivate, inspire, and meet the learning needs of the diverse students in our institutions while improving teaching and learning. The IT leaders should not only be individuals who can only lead the change crusade but should be able to manage the change process.


2014 ◽  
Vol 4 (4) ◽  
pp. 59
Author(s):  
Ilse Baumgartner

Since more than a decade, all kinds of businesses and organisations are intensively exploring enterprise-level information systems to better integrate their business processes, information flows and people. Consequently, the industry demands for technically skilled, but also “business-savvy” IT professionals are permanently growing. To meet this need, more and more computing education programs try to incorporate enterprise-level information systems into their curricula. While there is some computing education research done to investigate the need for this new type of IT-business professional and to analyse general implications for higher education, only very few research works or practice papers exist which report on concrete attempts to design and deliver higher education computing courses which intensively use enterprise-level systems. In this paper, the author reports on a series of experiences made within the Bachelor of Science (Information Systems Management) degree program offered by the School of Information Systems (SIS) at the Singapore Management University (SMU). The primary focus of this paper is put on establishing a working set of best practices for the design of an effective structure of the face-to-face teaching sessions for courses which use enterprise-level systems and applications in their curricula. While this paper is principally based on education experiences made within the frame of an Information Systems program, the best practices presented in this paper are equally applicable to any other computing education field or even to the engineering education in general.


2017 ◽  
Vol 13 (4) ◽  
pp. 33-49 ◽  
Author(s):  
Fernando Moreira ◽  
Maria João Ferreira

Teaching Requirements Engineering and, in particular modelling and specification requirements, at the higher education institutions is an “arduous” task according to the literature. In this way, it is proposed an approach that aims to contribute for filling this gap. So, in the context of a degree in Informatics, and following the guidelines of the Information Systems courses provided by ACM/AIS, we explore the Modeling and Specification (MS) of requirements using Unified Modelling Language (UML) integrated into the TLP (TLP-MS) activity of the BML Context Oriented (BML-CO) model. These activities (modelling and specification of requirements) are supported by the use of the Lucidchart tool in a collaborative environment.


1997 ◽  
Vol 28 (2) ◽  
pp. 135-157 ◽  
Author(s):  
David C. Rich ◽  
Andrew J. Pitman ◽  
Maree Gosper ◽  
Carol Jacobson

JURNAL PETIK ◽  
2020 ◽  
Vol 6 (1) ◽  
pp. 51-63
Author(s):  
Purnomo Sidiq ◽  
Yopy Nugraha ◽  
Irdham Denny ◽  
Demmy Dharma Bhakti

Abstrac - PT. XYZ is a company engaged in the manufacture of sweet soy sauce, with a segment of middle class consumers, focusing on the market share of the housewives, restaurants and traders of the wheel circumference. SI/TI in the PT .XYZ at this time not integrated in the utilization of information technology by better, of course, the very necessary development of information systems with the approach of the Architecture of the Enterprise (EA) with enterprise system manufacturing for business architecture, information architecture, application architecture and technology architecture, with method Architecture Enterprise Planning (EAP) approach framework Zachman.With planning Architecture Enterprise Planning (EAP) described in the modeling business according to the organization identified 25 business function 7 business processes, schemes of information technology are connected, the architecture of the data on the candidate data entities 41 entities, the data base tersentralisasikan accessed by all organizational units in PT. XYZ, the architecture of the application identification on candidate 41 applications, technology architecture 30 network infrastructure technology supporting business, with the aim that the process of business connected overall so that stacholder easy to plan the development of a system. Keywords - Information Systems Architecture, EAP, Information Systems, Manufacturing  Abstrak - PT. XYZ merupakan perusahaan yang bergerak dalam pembuatan kecap manis, dengan segmen konsumen menengah kebawah, berfokus pada pangsa pasar para ibu rumah tangga, rumah makan dan pedagang roda keliling. SI/TI di PT .XYZ pada saat ini belum terintergrasi pada pemanfaatan teknologi informasi dengan baik, tentunya sangat diperlukan pengembangan sistem informasi dengan pendekatan Architecture Enterprise (EA) dengan sistem enterprise manufaktur secara arsitektur bisnis, arsitektur informasi, arsitektur aplikasi dan arsitektur teknologi, dengan metode Architecture Enterprise Planning (EAP) pada pendekatan framework Zachman.Dengan perencanaan Architecture Enterprise Planning (EAP) dijabarkan dalam suatu pemodelan bisnis yang sesuai organisasi mengidentifikasi 25 fungsi bisnis dan 7 proses bisnis, skema teknologi informasi yang terkoneksi, arsitektur data pada kandidat entitas data 41 entitas, basis data yang tersentralisasikan diakses oleh semua unit organisasi di PT. XYZ, arsitektur aplikasi melakukan identifikasi pada kandidat 41 aplikasi, arsitektur teknologi 30 infrastruktur jaringan teknologi pendukung bisnis, dengan tujuan agar proses binis terkoneksi secara keseluruhan sehingga stacholder mudah merencanakan pengembangan sebuah sistem.   Kata Kunci – Sistem Informasi Arsitektur, EAP, Sistem Informasi Manufaktur


Sign in / Sign up

Export Citation Format

Share Document