Tinjauan Kesiapan Terhadap Implementasi Business Continuity Management Systems (BCMS) Berbasis ISO 22301 dan ISO 27001 (Studi Kasus: PT. JPK)
DOI:
https://doi.org/10.30872/jim.v13i2.902Keywords:
Teknologi Informasi, Sistem Informasi, ISO 22301, ISO 27001Abstract
Dengan berkembangnya teknologi dan matangnya setiap orang dalam menggunakan TIK, maka muncul sebuah tuntutan dari setiap orang yang menggunakan layanan perusahaan mengenai keharusan memiliki Business Continuity Management Systems (BCMS) dalam penyediaan layanan maupun ketersediaan produknya. Oleh sebab itu, diperlukan sebuah solusi agar para pengguna TIK (pegawai dan pelanggan) dapat terus menggunakan layanan yang diberikan oleh perusahaan. Hal ini melatar belakangi menejemen PT. JPK menerapkan BMCS. Dengan penerapan tersebut maka, tujuan dari penelitian ini yaitu guna mengukur kondisi dan kesiapan saat ini PT. JPK terhadap BCMS berbasis ISO 22301 dengan pendekatan control objective mengenai Information Security Aspects of Business Continuity Management dari ISO 27001, lalu melakukan strategi pememenuhan gap dan mempunyai Strandard Operating Procedure (SOP) hingga bisa digunakan perusahaan untuk sertifikasi ISO 22301. Langkah dimulai dari Studi literatur yang terkait dengan BCMS, sejarah maupun proses bisnis di PT. JPK. Selanjutnya melakukan review dokumen terkait proses bisnis di PT. JPK dan memetakan gap yang terjadi dengan assessment yang sudah dibuat. Pengumpulan data didapat melalui kuesioner dan wawancara kepada responden untuk mengetahui komitmen dari top management. Lalu melalukan gap analysis dan melakukan strategi pemenuhan gap. Hasil dari penelitian ini dari 83 pertanyaan kuesioner, hanya 51,81% yang comply dan sisanya 48,19% bisa comply dengan catatan. Mendapat dukungan dari top management untuk implementasi BCMS, PT. JPK siap melakukan perbaikan implementasi, dokumentasi maupun prosedur.References
Evaluation Consulting and BSI Management System America. (2010). How to Deploy BS 25999 (Second Edi).
Boehmer, W. (2009). Survivability and Business Continuity Management System According BS 25999. Hochschlulstr: Germany : IEEE.
Estall, H. (2012). Business Continuity Management Systems: Implementation and Certification to ISO 22301, BCS The Chartered Institute for IT, United Kingdom ISO 22301:2012 Business continuity management systems – Requirements (2012) ISO. Geneva: Swiss.
Jogiyanto, H. M. (2005). Analisa dan Desain Sistem Informasi: Pendekatan Terstruktur Teori dan Praktik Aplikasi Bisnis. Yogyakarta: ANDI.
Justanieah, M. (2009). Information Security Management System an ISO 27001 Introduction. Jeddah: ISACA.
Laudon, K. C., & Jane, P. L. (2012). Management System: Managing the Digital Firm Twelfth Edition. New Jersey: Prentice Hall.
McFarlan, F., & McKenney, J. (1983). Corporate Information Management: The Issues Facing Senior Manager. Irwin, USA.
O’Brein, & Marakas. (2010). Management System Information. New York: McGraw Hill.
Snedaker, S. (2007). Business Continuity & Disaster Recovery for IT Professionals. Burlington: Syngress.
St-Germain, Aliu, R., Lachapelle, E., & Dewez, E. (2012). Whitepaper – ISO 22301 Societal Security Business Continuity Management Systems. Professional Evaluation and Certification Board (PECB).
Standard, I. (2012). Organization for Standardization (ISO/FDIS) 22301:2012 Societal Security – Business Continuity Management Systems – Requirements. Geneva.
Standard, I. (2013). Organization for Standardization (ISO/IEC) 27001:2013 Information technology - Security techniques - Information security management systems – Requirements. Geneva.
Zainuddin, W., & Samopa, F. (2017). Kajian Kesiapan Implementasi Bisnis Continuity Management System (BCMS) Berbasis ISO 22301 (Studi Kasus: PT. XYZ). Informatika Mulawarman : Jurnal Ilmiah Ilmu Komputer1, 12(2), 82–87.
Downloads
Additional Files
Published
Issue
Section
License
Copyright Transfer StatementThe copyright of this article is transferred to Informatika Mulawarman : Jurnal Ilmiah Ilmu Komputer and when the article is accepted for publication. the authors transfer all and all rights into and to paper including but not limited to all copyrights in the Informatika Mulawarman. The author represents and warrants that the original is the original and that he/she is the author of this paper unless the material is clearly identified as the original source, with notification of the permission of the copyright owner if necessary. The author states that he has the authority and authority to make and carry out this task.
The author states that:
- This paper has not been published in the same form elsewhere.
- This will not be submitted elsewhere for publication prior to acceptance/rejection by this Journal.
A Copyright permission is obtained for material published elsewhere and who require permission for this reproduction. Furthermore, I / We hereby transfer the unlimited publication rights of the above paper to Informatika Mulawarman : Jurnal Ilmiah Ilmu Komputer. Copyright transfer includes exclusive rights to reproduce and distribute articles, including reprints, translations, photographic reproductions, microforms, electronic forms (offline, online), or other similar reproductions.
The author's mark is appropriate for and accepts responsibility for releasing this material on behalf of any and all coauthor. This Agreement shall be signed by at least one author who has obtained the consent of the co-author (s) if applicable. After the submission of this agreement is signed by the author concerned, the amendment of the author or in the order of the author listed shall not be accepted.
Rights / Terms and Conditions Saved
- The author keeps all proprietary rights in every process, procedure, or article creation described in Work.
- The author may reproduce or permit others to reproduce the work or derivative works for the author's personal use or for the use of the company, provided that the source and the Informatika Mulawarman copyright notice are indicated, the copy is not used in any way implying the Journal of Informatika Mulawarman (JIM) approval of the product or service from any company, and the copy itself is not offered for sale.
- Although authors are permitted to reuse all or part of the Works in other works, this does not include granting third-party requests to reprint, republish, or other types of reuse.

Informatika Mulawarman by http://e-journals.unmul.ac.id/index.php/JIM/index is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
under the CC BY-SA license, authors and other users are able to reprint, distribute or use the material for commercial purposes so long as they give attribution to the journal Informatika Mulawarman and license the republished material under the same license.