Evaluation of Academic Information System Security (AIS Portal) Using the COBIT 5 Framework on APO12 and DSS05 Domains

Abstract

The research aims to evaluate the security of the Academic Information System (Portal SIA) at the State Islamic University of North Sumatra (UINSU) using the COBIT 5 framework, specifically the APO12 (Manage Risk)   and DSS05 (Manage Security Service) sub-domains. The Portal SIA is a critical system used to manage academic data for students, lecturers, and academic staff at UINSU. The main problem investigated is the evaluation of the security level of the academic information system at UINSU, considering the high dependence on the Portal SIA, making system security a crucial issue. The solution offered in this research is to assess and analyze the capability level of the academic information system security based on the sub-domains of the COBIT 5 framework. The research findings indicate that the capability level of the academic information system security at UINSU in the APO12 sub-domain is at level 3 (Established Process), and in the DSS05 sub-domain, it is at level 4 (Predictable Process). This means that the security processes of the academic information system have been defined and standardized, and they are already being operated according to their functions and duties. However, there are still some areas that need to be improved to achieve a higher maturity level. Improvement recommendations are formulated to enhance the maturity level of the academic information system security at UINSU.