Regresar

Assessing Information Security on Academic Educational Institution in Indonesia

Abstract:

Information systems are essential for every organization to access its information. However, these systems need to be secure in terms of confidentiality, integrity, and availability of the information. Securing the information systems is the concern of the ISMS adopted by the organization. Information systems of the universities are critical systems due to the rapid growth demand of students enrolling in universities. This paper contribute, an evaluation of the information security level at the Indonesian Academic Education Institution a case study targeting the University of Mercu Buana (UMB). The case study focuses on analysing the risks from two different perspectives (organizational and technical risks) by applying vulnerabilities assessment and penetration testing, finally organized into a risk assessment plan. Since the case study, an ISO/IEC 27001: 2005 ISMS has been developed in order to eliminate the risks that …