RECOMMENDATIONS FOR IMPROVING USER DATA GOVERNANCE FOR XYZ WORK APPLICATION AT PT XYZ BASED ON ISO/IEC 27701::2019

• Main Author: Junardi Chua, Tania
• Format: Final Project
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/84078
• Institution: Institut Teknologi Bandung

Based on the survey results from the Indonesian Internet Service Providers Association conducted in early 2024, the threat of personal data theft is predicted to increase by more than 13% compared to the previous year. This fact underscores that personal data security must be a top priority for every company, as personal data is a crucial future resource. PT XYZ is a company focused on human resource management. Since its establishment, PT XYZ has collected and processed personal data from over 150,000 users of its application. However, the company's data privacy governance still has many shortcomings in terms of policies, human resources, and technology usage that need to be addressed. By using the ISO/IEC 27701:2019 standard, a conformity assessment process will be conducted to identify the deficiencies in the company's data privacy governance so that it can be aligned with the principles of the Personal Data Protection Act in Indonesia. Subsequently, the COBIT framework will be utilized to develop improvement solutions for data privacy governance. Finally, the completion of the final project will conclude with an analysis of the proposed project results to implement improvements in data privacy governance, as well as an evaluation process by obtaining assessments from several stakeholders at PT XYZ and industry experts in the field of data security. The recommended improvements received an average score of 4.4 from the six assessors. This indicates that the recommendations have met the expectations set by PT XYZ and are in accordance with the ISO/IEC 27701:2019 standard.