THE IMPLEMENTATION OF RISK MANAGEMENT USING ISO 31000:2009 AT PT SURYA ENERGI INDOTAMA

• Main Author: Gde Nyoman Aditya Wibisana, I
• Format: Theses
• Language: Indonesia
• Subjects: Manajemen umum
• Online Access: https://digilib.itb.ac.id/gdl/view/50224
• Institution: Institut Teknologi Bandung

One of the renewable energy sources whose development is quite rapid in the world, including Indonesia, is solar energy. In early 2019, there was an increase of 50% but the increase was still relatively small. PT. Surya Energi Indotama is one company that focuses on developing renewable energy, namely solar energy. Until now, PT. SEI has carried out marketing and sales activities for goods and or services according to the capabilities and core business produced by the company to existing consumers. PT.SEI revenue generated always increases every year from 2016-2019. The company realizes that in carrying out its business, there are risks that have not yet been assessed to cause the achievement of revenue not being reached to the maximum even if not assessed the risks can cause the company to become bankrupt. Therefore, the company plans to conduct a risk assessment so that risks that can affect its business can be anticipated by mitigating these risks. The concept used is the adoption of a risk management process issued by ISO 31000: 2009 which contains the scope, definitions, principles, framework, and also the risk management process. External analysis includes social, regulatory, environment, technology, and stakeholder identification to analyze industry condition. Internal analysis uses analysis of resources, capabilities, and business processes. From external and internal analysis, companies can find out the company's conditions that can be used to identify risks that might occur. The risk identification process is carried out from various sources including, external and internal analysis, interviews and brainstorming with experts, and others research. Next is to conduct a risk analysis using AHP. AHP is carried out using Expert Choice by calculating level 1 to level 3 and then looking for the weight of each, then after the risk evaluation results are obtained by making a risk mapping of these risks. The final step is risk mitigation by making a classification based on 4 mitigations, in general the mitigation is Accept, Avoid, Reduce, and Transfer. Based on the results of the risk analysis, there are 25 risk factors from 5 different types of risk, namely Legal, Business, Operation, Technology, and Financial risks. There is one risk that classified as extreme levels, 10 risks are classified as high risk, 12 risks are classified as medium risk, and two risks are classified as low risk. Of the 25 risk factors, the risks created by further mitigation plans are 11 risks. A mitigation plan is made to implement the strategy by review contract, discuss the strategies used regarding price and opportunity cost, training, periodic controlling, make a schedule and document properly, and making SOP.