Risk Identification and Analysis at the Directorate of Information Technology (IT) Universitas Andalas

Masitha, Diva Athalia (2024) Risk Identification and Analysis at the Directorate of Information Technology (IT) Universitas Andalas. Diploma thesis, Universitas Andalas.

	Text (Cover dan Abstrak) 2010932024 Masitha Diva Athalia - Cover Abstrak.pdf - Published Version Download (439kB)
	Text (BAB I Pendahuluan) 2010932024 Masitha Diva Athalia - BAB I Pendahuluan.pdf - Published Version Download (377kB)
	Text (BAB VI Penutup) 2010932024 Masitha Diva Athalia - BAB Akhir.pdf - Published Version Download (179kB)
	Text (Daftar Pustaka) 2010932024 Masitha Diva Athalia - Daftar Pustaka.pdf - Published Version Download (243kB)
	Text (Skripsi Full Text) Masitha Diva Athalia - Tugas Akhir Full Text.pdf - Published Version Restricted to Repository staff only Download (2MB) | Request a copy

Abstract

Risk is an uncertainty condition that will cause adverse events to occur which can be prevented by implementing risk management as risk management. Risk management becomes a policy as a procedure to avoid all risks that will occur and one of them, namely universities. One aspect that is very important to manage the risks that occur in universities in Indonesia, namely Information Technology (IT) because it is an integrated work system in improving academic services, so this makes risk management very important to be applied to overcome all risks. Through the above statement, it does not cover the possibility that it cannot be researched that there has been an application of risk management in Information Technology (IT) in universities in Indonesia and one of them, namely Universitas Andalas. The implementation of risk management has been implemented by Universitas Andalas with the existence of the Universitas Andalas Rector Regulation No. 13 of 2023 concerning Risk Management. However, until now the risks identified in the risk register of the Information Technology (IT) directorate of Universitas Andalas are still minimal. Therefore, research was conducted entitled "Identification and Analysis of Risks in the Information Technology (IT) directorate of Universitas Andalas" based on SNI ISO 31000 using the Failure Mode and Effect Analysis (FMEA) method to explore and identify risks that have occurred, so as to determine the right mitigation strategy in minimizing the possibility of risks that will occur in the future. Based on the results of the identification of risks that occur in the directorate of Information Technology (IT) of Universitas Andalas, 27 risks have been obtained. Prioritized risk through the calculation of the risk level obtained 2 risks, namely the website could not be accessed as a result of a virus attack (R14) and network disconnected and inaccessible by the entire UNAND environment (R18). Through the results of risk assessment prioritized based on risk events, 7 proposed risk mitigation strategies were obtained. Risk mitigation strategies are formulated for the highest risk event and are in the prevent at source region. This research is expected to help the directorate of Information Technology (IT) to minimize the potential risks that occur, so that services throughout Universitas Andalas can run smoothly.

Actions (login required)

View Item