{"id":"https://openalex.org/W2944583786","doi":"https://doi.org/10.1109/icot.2018.8705866","title":"Evaluation Of IS Risk Management Using Octave Allegro In Education Division","display_name":"Evaluation Of IS Risk Management Using Octave Allegro In Education Division","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2944583786","doi":"https://doi.org/10.1109/icot.2018.8705866","mag":"2944583786"},"language":"en","primary_location":{"id":"doi:10.1109/icot.2018.8705866","doi":"https://doi.org/10.1109/icot.2018.8705866","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icot.2018.8705866","pdf_url":null,"source":{"id":"https://openalex.org/S4306424018","display_name":"International Conference on Orange Technologies","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Conference on Orange Technologies (ICOT)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087668823","display_name":"Jarot Sembodo Suroso","orcid":"https://orcid.org/0000-0002-9416-0237","observed_orcids":["https://orcid.org/0000-0002-9416-0237"]},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Jarot S. Suroso","raw_affiliation_strings":["Information Systems Management Department, Bina Nusantara University, Jakarta, Indonesia 11480"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Systems Management Department, Bina Nusantara University, Jakarta, Indonesia 11480","institution_ids":["https://openalex.org/I166073570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063645012","display_name":"Sri Mumpuni Ngesti Rahaju","orcid":"https://orcid.org/0000-0001-6066-2696","observed_orcids":["https://orcid.org/0000-0001-6066-2696"]},"institutions":[{"id":"https://openalex.org/I4210097460","display_name":"Universitas Bung Karno","ror":"https://ror.org/00y0cnq88","country_code":"ID","type":"education","lineage":["https://openalex.org/I4210097460"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Sri Mumpuni Ngesti Rahaju","raw_affiliation_strings":["Electrical Engineering Departement, Bung Karno University, Jakarta, Indonesia 10320"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical Engineering Departement, Bung Karno University, Jakarta, Indonesia 10320","institution_ids":["https://openalex.org/I4210097460"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032266329","display_name":"K Kusnadi","orcid":"https://orcid.org/0000-0001-9708-2070","observed_orcids":["https://orcid.org/0000-0001-9708-2070"]},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Kusnadi","raw_affiliation_strings":["Information Systems Management Department, Bina Nusantara University, Jakarta, Indonesia 11480"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Systems Management Department, Bina Nusantara University, Jakarta, Indonesia 11480","institution_ids":["https://openalex.org/I166073570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3344,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.48939898,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9922000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9922000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.005499999970197678,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security-risk-management","display_name":"information security risk management","score":0.8370000123977661},{"id":"https://openalex.org/keywords/octave-allegro","display_name":"OCTAVE Allegro","score":0.8370000123977661},{"id":"https://openalex.org/keywords/iso-iec-27001","display_name":"ISO/IEC 27001","score":0.9580000042915344},{"id":"https://openalex.org/keywords/information-security-management-system","display_name":"information security management system","score":0.8840000033378601},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.7070000171661377},{"id":"https://openalex.org/keywords/risk-management-maturity","display_name":"risk management maturity","score":0.7419999837875366},{"id":"https://openalex.org/keywords/contingency-planning","display_name":"contingency planning","score":0.7080000042915344},{"id":"https://openalex.org/keywords/disaster-recovery-planning","display_name":"disaster recovery planning","score":0.9150000214576721},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"vulnerability management","score":0.9990000128746033},{"id":"https://openalex.org/keywords/risk-reduction","display_name":"risk mitigation","score":0.628000020980835},{"id":"https://openalex.org/keywords/education-division","display_name":"education division","score":0.3930000066757202}],"concepts":[{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.7422569990158081},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6432474255561829},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6361094117164612},{"id":"https://openalex.org/C95609273","wikidata":"https://www.wikidata.org/wiki/Q5975208","display_name":"IT risk management","level":3,"score":0.5587728023529053},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5570745468139648},{"id":"https://openalex.org/C81146079","wikidata":"https://www.wikidata.org/wiki/Q7336283","display_name":"Risk management information systems","level":4,"score":0.5065141916275024},{"id":"https://openalex.org/C14331377","wikidata":"https://www.wikidata.org/wiki/Q2340208","display_name":"Contingency plan","level":2,"score":0.5039984583854675},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.4581223726272583},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.4573719799518585},{"id":"https://openalex.org/C11489865","wikidata":"https://www.wikidata.org/wiki/Q944806","display_name":"Operational risk","level":3,"score":0.4554571211338043},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45063087344169617},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.43776410818099976},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4259827435016632},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4211418926715851},{"id":"https://openalex.org/C9272383","wikidata":"https://www.wikidata.org/wiki/Q5001930","display_name":"Business risks","level":2,"score":0.4172568917274475},{"id":"https://openalex.org/C2776505523","wikidata":"https://www.wikidata.org/wiki/Q4785468","display_name":"Plan (archaeology)","level":2,"score":0.4122962951660156},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.41196495294570923},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.31845223903656006},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.2262137532234192},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1733439564704895},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.17026963829994202},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.14165610074996948},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icot.2018.8705866","doi":"https://doi.org/10.1109/icot.2018.8705866","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icot.2018.8705866","pdf_url":null,"source":{"id":"https://openalex.org/S4306424018","display_name":"International Conference on Orange Technologies","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Conference on Orange Technologies (ICOT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W37575475","https://openalex.org/W155614239","https://openalex.org/W1031407253","https://openalex.org/W1508670671","https://openalex.org/W1549342539","https://openalex.org/W1551564318","https://openalex.org/W2017112621","https://openalex.org/W2104800148","https://openalex.org/W2334415293","https://openalex.org/W2339802317","https://openalex.org/W2415273479","https://openalex.org/W2597016100","https://openalex.org/W2599991954","https://openalex.org/W2605426735","https://openalex.org/W2755832023","https://openalex.org/W4234540472"],"related_works":["https://openalex.org/W2888855641","https://openalex.org/W4322746464","https://openalex.org/W2998190879","https://openalex.org/W3104376311","https://openalex.org/W155614239","https://openalex.org/W7220761263","https://openalex.org/W1602002062","https://openalex.org/W4285421545","https://openalex.org/W3110000230","https://openalex.org/W2407023290"],"abstract_inverted_index":{"Nowadays,":[0],"information":[1,19],"systems":[2,20],"is":[3,105,108,138,158,164,179],"an":[4,89],"important":[5],"point":[6],"in":[7,12,166],"supporting":[8],"business":[9,38],"strategies":[10],"including":[11],"education":[13],"division.":[14],"Critical":[15],"assets":[16,31,137],"related":[17,136],"to":[18,24,35,43,64,81,87,98],"are":[21],"very":[22],"susceptible":[23],"threats":[25,74],"that":[26,94,147],"can":[27,196],"exploit":[28],"and":[29,40,77,129,172],"damage":[30],"until":[32],"they":[33],"lead":[34,42],"disruption":[36],"of":[37,68,91,122,134,143,150,184],"processes":[39],"even":[41],"financial":[44],"losses.":[45,83],"PT.":[46],"Autocomp":[47],"Systems":[48],"Indonesia":[49],"(PASI)":[50],"has":[51,95],"implemented":[52,97],"Information":[53],"Security":[54],"Management":[55],"System":[56],"(ISMS)":[57],"based":[58],"on":[59],"ISO":[60],"/":[61],"IEC":[62],"27001":[63],"define":[65],"a":[66,176],"set":[67],"risk":[69,92,102,132,151,186,195],"management":[70,93,152],"strategies.":[71],"However,":[72],"some":[73],"still":[75],"occur":[76],"make":[78],"the":[79,101,112,116,131,135,148,156,167,182,185,189,194],"organization":[80,85,157],"get":[82],"The":[84,126,141,161],"needs":[86],"conduct":[88],"evaluation":[90],"been":[96],"determine":[99],"whether":[100],"protection":[103],"strategy":[104],"adequate.":[106],"Evaluation":[107],"done":[109],"by":[110,155],"comparing":[111],"current":[113],"condition":[114,119],"with":[115],"expected":[117],"ideal":[118],"using":[120,188],"Catalogue":[121],"Practices":[123],"from":[124,181],"OCTAVE.":[125],"gaps":[127],"found":[128,165],"then":[130],"assessment":[133,187],"carried":[139],"out.":[140],"results":[142,183],"this":[144],"study":[145],"indicate":[146],"level":[149],"maturity":[153],"obtained":[154],"89.40":[159],"%.":[160],"biggest":[162],"gap":[163],"contingency":[168],"plan/disaster":[169],"recovery":[170],"plan":[171,178],"vulnerability":[173],"management.":[174],"Then":[175],"mitigation":[177],"proposed":[180],"OCTAVE":[190],"Allegro":[191],"approach":[192],"so":[193],"be":[197],"controlled":[198],"properly.":[199]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2019-05-16T00:00:00"}