INFORMATION PRODUCTION PHASE RISK ASSESSMENT FORMULATION USING THREAT SCENARIO MODEL AND EXTENDED RISK MATRIX APPROACH

• Main Author: WIHARNI (NIM: 23516030), FITASARI
• Format: Theses
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/27361
• Institution: Institut Teknologi Bandung

<p align="justify"> Information is an important strategic asset for an organization. However, information quality problem arise when data and information does not fit to the specific purpose of a particular task. Information quality problem due to inefficiency of information management including information production and delivery can cause harm to the organization and even can lead to serious disasters. Risk management has an important role in protecting information assets from negative risks. A comprehensive and systematic model has been developed by providing completed stages and mathematical models to calculate the total impact of information quality. Then the model was further developed by adding determining dimensions of information quality stage before problem identification, but only limited to the dimensions of accuracy and timeliness. In both models, performing identification of existing controls is important. However, the model has not explicitly involved and provides a method for estimate the probability of control effectiveness in determining risk. Given the involvement of control effectiveness, the risk matrix technique in previous model needs to be reconsidered in order to construct the ideal matrix. <br /> <br /> In this study, researcher will develop information production risk assessment formulation and risk matrix modification. The development of models and formulations completed with different views through it refers to threat scenario model that has provided a completed controls catalogue and control effectiveness calculation. This research develops recoverability dimension with ERMA technique to considering involved control effectiveness. In addition, this study adding information quality stage to get existing and target information quality. Based on assessment result, propose formulation will calculate financial impact depends on decreased quality or technical impact. The implementation results showed that the ranking accuracy rate by adding new dimensions increased about 7.14% and decreased the risk ties from 1.67 to 0.33. <p align="justify">