Analisis Manajemen Resiko Teknologi Informasi Pt.eterindo Nusa Graha Menggunakan Framework Iso31000:2018
Year: 2025
Type: article
Abstract: The use of information technology in companies is a crucial element to support business process effectiveness and efficiency. However, it also presents various challenges and risks that need to be managed properly. Risk management is key to protecting company value, optimizing strategies, and securing assets. PT. Eterindo Nusa Graha, as an industrial company relying on information technology, faces risks related to data, software, hardware assets, as well as threats from natural, system, infrastructure, and human resources. To address these issues, the company implements the ISO 31000:2018 framework, known for its flexibility and structured approach in identifying, assessing, and managing risks. Analysis results show that out of 16 identified risks, 5 are categorized as low, 10 as medium, and 1 as high. This indicates that most risks are still controllable, although effective mitigation strategies are needed, especially for high-category risks. The implementation of ISO 31000:2018 at PT. Eterindo Nusa Graha has helped the company protect critical assets, build stakeholder trust, and ensure smooth business processes. Thus, the company has demonstrated good risk management capabilities, although it still needs to focus more on high risks to minimize potential impacts.
DOI: 10.51903/5kz2ts20
Institution: Universitas Muhammadiyah Gresik
Language: English
Subfield: Management Information Systems
Domain: Social Sciences
Open Access status: diamond
OpenAlex ID: W4408416658