IMPLEMENTATION OF NIST 800-218 AND NIST CYBERSECURITY FRAMEWORK FOR APPLICATION CYBERSECURITY IN DISKOMINFO BANDUNG CITY

• Main Author: Fajriaturrakhmah, Aulia
• Format: Final Project
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/85122
• Institution: Institut Teknologi Bandung

Cyber security is an important aspect of application management at Diskominfo Bandung City. Cybersecurity incidents, such as web defacement, ransomware, and data leaks that have occurred in most government administration sectors can damage public trust in government services. This research aims to enable and improve application cyber security at Diskominfo Bandung City, with a case study of the SIPAKU application as an example of Bandung smart city services, through the application of two frameworks, namely NIST 800-218 for secure software development and the NIST Cybersecurity Framework for management operational risk. The methods used in this research include an evaluation of the implementation of practices recommended by NIST 800-218, as well as an analysis of solutions in implementing cybersecurity using the NIST Cybersecurity Framework. Based on the evaluation, several recommendations were developed to address the identified weaknesses, focusing on improving software security and managing operational risks. The results of this research show that the application of these two frameworks can provide good advice on application cyber security at the Bandung City Diskominfo with an average score of 4.6 on a Scale of 5 given by Bandung City Diskominfo representatives in the research results evaluation session. It is hoped that comprehensive and structured implementation will be able to increase protection against cyber threats and maintain public trust in the services provided by the Bandung City government.