ASYGAF, Yussrizal and Nugraheni, Dinar Mutiara Kusumo and Nurhayati, Oky Dwi (2026) ANALISA PERANCANGAN KEAMANAN DATA SISTEM INFORMASI PESANTREN SESUAI STANDAR ISO/IEC 27001:2022 DAN FRAMEWORK TOGAF. Masters thesis, UNIVERSITAS DIPONEGORO.

	Text cover aja.pdf Download (228kB)
	Text Cover Lengkap.pdf Restricted to Repository staff only Download (1MB)
	Text BAB I.pdf Download (404kB)
	Text BAB II.pdf Download (1MB)
	Text BAB III.pdf Restricted to Repository staff only Download (500kB)
	Text BAB IV.pdf Restricted to Repository staff only Download (1MB)
	Text BAB V.pdf Restricted to Repository staff only Download (399kB)
	Text Daftar Pustaka.pdf Download (386kB)
	Text Lampiran.pdf Restricted to Repository staff only Download (3MB)

Abstract

Transformasi digital di lingkungan pesantren tergolong masih sedikit terhadap fokus perlindungan aset informasi dan privasi data santri dalam lingkup tata kelola yang cenderung reaktif pada ancaman keamanan informasi. Sistem informasi yang belum terhubung satu sama lain juga menyebabkan data menjadi tidak rapi dan rancu. Berangkat dari masalah tersebut, penelitian ini bertujuan untuk mengidentifikasi celah keamanan, menganalisis risikonya, serta merumuskan rekomendasi perbaikan yang sesuai. Pendekatan metodologi yang digunakan mensinergikan standar internasional ISO/IEC 27001:2022 sebagai instrumen audit ke dalam kerangka kerja TOGAF ADM yang dibatasi hingga Phase D guna merancang arsitektur teknologi yang kokoh. Hasil penelitian ini mewujudkan sebuah blueprint arsitektur keamanan informasi yang mengintegrasikan kontrol teknis seperti enkripsi database, prosedur pencadangan otomatis, serta implementasi Role-Based Access Control (RBAC). Serta terciptanya ekosistem digital yang tepercaya dan tidak hanya menjamin integritas data, tetapi juga memperkuat kredibilitas institusi melalui penerapan Manajemen Risiko dan strategi keamanan informasi.
Kata Kunci : Manajemen Risiko, Keamanan Informasi

Digital transformation within Islamic boarding schools (pesantren) still pays limited attention to the protection of information assets and student data privacy, operating under a governance structure that tends to be reactive to information security threats. Furthermore, disconnected information systems lead to disorganized and ambiguous data. Addressing these issues, this study aims to identify security gaps, analyze corresponding risks, and formulate appropriate improvement recommendations. The methodological approach synergizes the international standard ISO/IEC 27001:2022 as an audit instrument into the TOGAF ADM framework, which is limited to Phase D to design a robust technology architecture. The results of this research deliver an information security architecture blueprint that integrates technical controls, such as database encryption, automated backup procedures, and the implementation of Role-Based Access Control (RBAC). Ultimately, this study facilitates the creation of a trusted digital ecosystem that not only ensures data integrity but also strengthens institutional credibility through the application of risk management and information security strategies.
Keywords: Information Security; Risk Management

Actions (login required)

View Item