Risk Analysis of the Information System of the Riau Provincial Plantation Agency Website using ISO 31000

Ustara Dwi Fernanda, Mega wati, Nesdi Evrilyan Rozanda, Febi Nur Salisah

Abstract


The website of the Riau Provincial Plantation Agency plays a vital role in supporting public information and administrative services. However, the use of information technology also introduces various risks that may disrupt system operations. This study aims to analyze information technology risks associated with the website using the ISO 31000:2018 risk management framework. A qualitative descriptive approach was employed, utilizing interviews, observations, and documentation. The risk management process was conducted through the stages of risk identification, analysis, evaluation, treatment, as well as monitoring and review. The findings identified nine main risks. Eight of them were categorized as medium-level risks, including lightning, fire, human error, data corruption, server downtime, hardware damage, overheating, and power outages. One risk—software updates—was classified as low-level. This study is limited to information technology risks identified internally, based on primary data collected from the website management team. The findings provide risk mitigation recommendations that can serve as guidelines to enhance the security and continuity of the information system within the Riau Provincial Plantation Agency.

Keywords


ISO 31000; risk management; information system; government website; risk analysis

Full Text:

PDF

References


A. Novia Rilyani, Y. A. Firdaus W ST, dan D. S. Dwi Jatmiko, “Analisis Risiko Teknologi Informasi Berbasis Risk Management menggunakan ISO 31000 (Studi Kasus : i-Gracias Telkom University) Information Technology Risk Analysis Based On Risk Management using Iso 31000 (Case Study : i-Gracias Telkom University),”

L. E. Hutagalung, “Analisa Manajemen Risiko Sistem Informasi Manajemen Rumah Sakit (SIMRS) pada Rumah Sakit XYZ menggunakan Iso 31000,” 2022.

Irma Rahayu, David Setiadi, dan Dwi Yuniarto, “Manajemen Risiko Keamanan Aset Teknologi Informasi di DISKOMINFOSANDITIK Kabupaten Sumedang menggunakan ISO 31000:2018,” Jurnal Teknik Mesin, Industri, Elektro dan Informatika, Vol. 4, No. 1, hlm. 255–264, Feb 2025, doi: 10.55606/jtmei.v4i1.4819.

F. G. Punusingon dan M. N. N Sitokdana, “Analisis Manajemen Resiko Aplikasi Simfoni pada Dinas PPA di Kab. Minahasa Tenggara menggunakan iso 31000,” 2022.

M. Miftakhatun, “Analisis Manajemen Risiko Teknologi Informasi pada Website Ecofo menggunakan ISO 31000,” Journal of Computer Science and Engineering (JCSE), Vol. 1, No. 2, hlm. 128–146, Agu 2020, doi: 10.36596/jcse.v1i2.76.

J. Rabbani Sajda, Y. Amrozi, M. Khusnu Milad, dan S. Artikel, “Analisis Manajemen Risiko pada UMKM Toko Robani menggunakan ISO 31000 INFO ARTIKEL,” Vol. 3, No. 2, hlm. 256–262, 2024, doi: 10.70247/jumistik.v3i2.110.

S. Khansa Fadiyah, I. Sistem Informasi, F. Sains dan Teknologi, U. Islam Negeri Sunan Ampel Jl Ahmad Yani No, J. Wonosari, dan K. Wonocolo, “Analisis Manajemen Risiko Teknologi Informasi menggunakan Iso 31000 Pada PT XYZ,” 2025.

F. Zalnya Putri dan Iriani, “Analisis Manajemen Risiko berbasis Iso 31000 untuk mengelola Risiko Operasional di Bidang X pada Perusahaan Dinas XYZ,” 2024.

R. R. Kurniawan dan F. Z. Santoso, “Analisis Manajemen Risiko di Perusahaan Konsultan Politik: Studi Kasus pada Perusahaan XYZ,” 2024.

M. Fajrul, A. T. Wahyono, E. Kaharuddin, A. N. Vernando, A. Entrepreneurship, dan T. Bangsa, “Pendekatan Sistematis Manajemen Risiko terhadap Keberlanjutan UMKM di Kota Semarang dengan berbasis ISO 31000:2018,” Jurnal Penelitian Ilmu-Ilmu Sosial, Vol. 2, No. 6, 2025, doi: 10.5281/zenodo.14807762.

B. P. Jurnal, D. Publikasi, A. P. Aisyah, dan L. Dahlia, “Jurnal Akuntansi dan Manajemen (JAM) Enterprise Risk Management Berdasarkan ISO 31000 dalam Pengukuran Risiko Operasional pada Klinik Spesialis Esti,” BPJP) Sekolah Tinggi Ilmu Ekonomi Indonesia Jakarta, Vol. 19, No. 02, 2022, doi: 10.36406/jam.v19i01.483.

Muhammad Ramdhany Alamsyah|Dwi Rolliaawati, “Analisis Manajemen Risiko Sistem Informasi Pelayanan Perlindungan Perempuan dan Anak DP3APPKB Surabaya dengan ISO 31000:2018,” 2025.

N. N. Setyaningrum dan E. Maria, “Penerapan Iso 31000:2018 Untuk Manajemen Risiko pada Sistem Informasi Sekolah Terpadu,” 2024.

M. Syaifudin Yusuf, C. A. Swastyastu, L. Syahadianti, R. Nur, dan T. Shanty, “Analisa Manajemen Risiko E-Learning Universitas Dr. Soetomo Surabaya menggunakan Framework ISO 31000,” 2024.

R. Dwi, P. Suhanda, dan D. Pratami, “International Journal Of Innovation In Enterprise System Raci Matrix Design for Managing Stakeholders in Project Case Study of PT. XYZ,” 2021. [Daring]. Tersedia pada: https://ijies.sie.telkomuniversity.ac.id/index.php/IJIES/index




DOI: https://doi.org/10.32520/stmsi.v14i4.5368

Article Metrics

Abstract view : 86 times
PDF - 28 times

Refbacks

  • There are currently no refbacks.


Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.