Paras Nurhidayati, Achmad Fauzi, Nayla Shafiya Paramita, Renata Viranisa, Syalvina Nurhaura Putri

Evaluation of The Effectiveness of ISO\IEC 27001 Based Information Security Audits in State-Owned Telecommunications Companies (Case Study of PT Telkom Indonesia)

Introduction

Evaluation of the effectiveness of iso\iec 27001 based information security audits in state-owned telecommunications companies (case study of pt telkom indonesia). Evaluate ISO/IEC 27001 info security audits in state-owned telecom companies like PT Telkom Indonesia. Uncover audit patterns, control weaknesses, and follow-up issues.

Abstract

State-owned enterprises have critical information security in the telecommunications sector given the high intensity of strategic data exchange and the sensitivity of the public services they provide. ISO/IEC 27001 has become an international standard that can be widely adopted to ensure systematic, measurable, and sustainable information security management. The telecommunications sector faces many information security risks due to its high dependence on digital infrastructure, the volume of sensitive data, and the increasing intensity of cyber threats. These conditions require us to implement strong security governance through audits based on the international standard ISO/IEC 27001. This study aims to evaluate the effectiveness of information security audits using the ISO/IEC 27001 framework in the telecommunications sector. This study uses a qualitative descriptive method based on audit documents and assessments based on Annex A of ISO/IEC 27001. The results show recurring audit patterns from year to year, weaknesses in several key controls, and irregularities in the follow-up improvement process.

Full Text

Comments

You need to be logged in to post a comment.