Risk Management of Outdoor Equipment Rental Information System Using NIST SP 800-30 Framework at PT. XYZ

Abstract

The implementation of an information system in a company has benefits as well as threats that can have a negative impact if appropriate risk handling is not carried out. This research will conduct risk management of the information system of an outdoor activity service rental company using the NIST SP 800-30 framework. The goal is to identify risks that may arise in the company and provide appropriate actions for each of these risks. The results of risk management show the threats faced by the company, such as natural disasters, physical security and cyber security with most of these risks being high-level risks. The final result is in the form of providing recommendations that can be done by the company to minimize the resulting impact and the chances of these risks occurring. Thus, the company's business activities and activities can run well.