A Case Study on Risk Management Implementation in the STNKGO Application Based on the NIST Framework

Abstract

This research focuses on assessing and managing information technology risks in the STNKGO application, an online platform for payment and delivery of Vehicle Registration Certificates (STNK). Using the NIST SP 800-30 Revision 1 framework, the study systematically identifies, evaluates, and mitigates risks related to the application's operations. The assessment begins with identifying critical IT assets, including user data, vehicle registration records, transaction details, delivery information, and system software. Potential threats—such as cyberattacks, unauthorized access, and malware—are then analyzed alongside existing system vulnerabilities that could be exploited. Each risk is evaluated based on its likelihood and potential impact, allowing for classification by severity level. The study further examines current control measures and suggests enhancements, especially for mitigating high-risk scenarios involving cybersecurity threats. The findings highlight the necessity of implementing stronger data protection, enhancing system resilience, and reinforcing preventive controls. Applying the NIST SP 800-30 Revision 1 framework enables STNKGO to develop a structured and effective risk management strategy, ensuring improved security, reduced vulnerabilities, and greater continuity of services. This research contributes to the growing body of knowledge on IT risk management for digital public services, offering practical insights for enhancing the safety and reliability of online applications handling sensitive data and transactions.