Implementasi Pendekatan Kerangka Kerja NIST 800-34 dalam Perancangan Disaster Recovery Plan pada Sistem Informasi Akademik Universitas Muhammadiyah Sukabumi
DOI:
https://doi.org/10.30872/jim.v15i2.3724Keywords:
Disaster Recovery Plan (DRP), NIST 800-34, Sistem Informasi AkademikAbstract
Disaster Recovery Plan (DRP) merupakan upaya keberlanjutan sebuah sistem atau proses bisnis ketika menghadapi sebuah ancaman. Objek penelitian ini adalah Sistem Informasi Akademik Universitas Muhammadiyah Sukabumi yang bertujuan untuk merancang Disaster Recovery Plan (DRP) dengan pendekatan kerangka kerja NIST 800-34. Tahapan penelitian dimulai dengan penetapan permasalahan yang akan diteliti; Pengumpulan data melalui observasi, wawancara dan studi lapangan; Identifikasi dan penilaian aset terdiri dari 4 aspek yakni Data, Perangkat Keras, Perangkat Lunak, dan Jaringan; Risk Assessment yang melihat potensi ancaman yang terjadi berdasarkan penilaian Likelihood, Restoration dan Predictability, diklasifikasikan menjadi 9 ancaman yakni Banjir, Petir/Badai, Gempa Bumi, Kebakaran, Gangguan Server, Gangguan Listrik, Serangan Hacker / Cybercrime, Kesalahan Manusia (Human Error) dan Serangan Virus, Malware, Worm; tahapan berikutnya Business Impact Analysis dengan melihat dampak yang terjadi pada SIAK UMMI dilihat dari ancaman. Dari tahapan ini dihasilkan sub sistem yang memiliki dampak terbesar adalah Sistem Keuangan Mahasiswa dengan nilai persentasi 99%, sedangkan sub sistem yang memiliki nilai terendah adalah Sistem Pembimbingan Akademik dengan nilai dampak persentasi 62%. Hasil akhir dari penelitian ini berupa dokumen Disaster Recovery Plan (DRP) yang memuat 9 kategory Strategy recovery terhadap potensi ancaman yang terjadi pada SIAK UMMI.
References
Siagian, S.H.T., & Effiyaldi. (2018). Analisis dan Perancangan Sistem Informasi Akademik pada STIKES Jambi. Jurnal Manajemen Sistem Informasi. Vol 3 (4)
Asriyanik. 2016. Penilaian Keamanan Sistem Informasi Akademik Universitas Muhammadiyah Sukabumi dengan Menggunakan ISO 27001. Jurnal SANTIKA: Jurnal Ilmiah Sains dan Teknologi. Vol 6 (2)
Indrajit, P. R. E. (2014). Konsep dan Strategi Keamanan Informasi di Dunia Cyber. Yogyakarta: Graha Ilmu.
Budiarto, R. (2017). Manajemen Risiko Keamanan Sistem Informasi. Journal of Computer Engineering System and Science. Vol 2 (2). pp. 48–58.
Yakub. (2012). Pengantar Sistem Informasi. Yogyakarta: Graha Ilmu.
Rifai, Z., Maydina, A., Kurniawan A. A. (2018). Rancangan Dokumen Disaster Recovery Plan pada IS / IT di Dinas XYZ. CESS (Journal of Computer Engineering System and Science). Vol 3 (2).
Agung, M. Z. (2019). Perancangan Disaster Recovery Plan Sistem Informasi Akademik dengan Pendekatan Kerangka Kerja NIST 800-34. JTERA (Jurnal Teknologi Rekayasa). Vol 4 (2).
Yulhendri. (2016). Penerapan Business Continuity Plan/ Disaster Recovery Plan pada BUMN dalam Rangka Sustainability: Studi Kasus pada PT. X Wilayah Jakarta Raya. Jurnal Ilmu Komputer. Vol 12 (1).
Isa, I. G. T. (2017). Kansei Engineering Approach in Software Interface Design. Jurnal of Science Innovare, 1(1), 22-26.
Swanson, M., et all. (2010). Contingency Planning Guide for Federal Information System. USA: National Institute of Standards and Technology NIST. In Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, version 1.0, Retrieved From https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.01162020.pdf. [Accessed: 20 April 2020]
Wicaksono, S. R. (2010). Disaster Recovery Planning. Jakarta: Seribu Bintang.
Muhaemin. (2018). Mengembangkan Business Continuity Planning (BCP) dengan Pendekatan Kuantitatif Studi Kasus: Siak – Ditjen Adminduk Kemendagri. Jurnal Sistem Informasi, Teknologi Informatika dan Komputer. Vol 9 (1)
Cyber Defense Academy. (2013). IT Risk Management. Jakarta : Diklat Teknis Kementerian Sekretariat Negara.
Downloads
Additional Files
Published
Issue
Section
License
Copyright Transfer StatementThe copyright of this article is transferred to Informatika Mulawarman : Jurnal Ilmiah Ilmu Komputer and when the article is accepted for publication. the authors transfer all and all rights into and to paper including but not limited to all copyrights in the Informatika Mulawarman. The author represents and warrants that the original is the original and that he/she is the author of this paper unless the material is clearly identified as the original source, with notification of the permission of the copyright owner if necessary. The author states that he has the authority and authority to make and carry out this task.
The author states that:
- This paper has not been published in the same form elsewhere.
- This will not be submitted elsewhere for publication prior to acceptance/rejection by this Journal.
A Copyright permission is obtained for material published elsewhere and who require permission for this reproduction. Furthermore, I / We hereby transfer the unlimited publication rights of the above paper to Informatika Mulawarman : Jurnal Ilmiah Ilmu Komputer. Copyright transfer includes exclusive rights to reproduce and distribute articles, including reprints, translations, photographic reproductions, microforms, electronic forms (offline, online), or other similar reproductions.
The author's mark is appropriate for and accepts responsibility for releasing this material on behalf of any and all coauthor. This Agreement shall be signed by at least one author who has obtained the consent of the co-author (s) if applicable. After the submission of this agreement is signed by the author concerned, the amendment of the author or in the order of the author listed shall not be accepted.
Rights / Terms and Conditions Saved
- The author keeps all proprietary rights in every process, procedure, or article creation described in Work.
- The author may reproduce or permit others to reproduce the work or derivative works for the author's personal use or for the use of the company, provided that the source and the Informatika Mulawarman copyright notice are indicated, the copy is not used in any way implying the Journal of Informatika Mulawarman (JIM) approval of the product or service from any company, and the copy itself is not offered for sale.
- Although authors are permitted to reuse all or part of the Works in other works, this does not include granting third-party requests to reprint, republish, or other types of reuse.
Informatika Mulawarman by http://e-journals.unmul.ac.id/index.php/JIM/index is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
under the CC BY-SA license, authors and other users are able to reprint, distribute or use the material for commercial purposes so long as they give attribution to the journal Informatika Mulawarman and license the republished material under the same license.
