MANAJEMEN RISIKO SISTEM INFORMASI MENGGUNAKAN METODE OCTAVE ALLEGRO (Studi Kasus : Rumah Sakit Islam Purwokerto)

SIMRS is a communication information technology system that processes and integrates the entire flow of hospital service processes in the form of a network of coordination, reporting and administrative procedures to obtain information precisely and accurately. In carrying out its business processes, Purwokerto Islamic Hospital has 2 SIMRS applications that operate for 24 hours, namely the SIMRS Registration Module and the SIMRS IGD Module. In both applications there are several obstacles such as network failure due to security damage from the Internet Service Provider (ISP) which causes the network and components not functioning on the wireless device due to lightning, as well as human errors such as input errors and accidental deletion of data, so that it very detrimental to agencies especially if the data is needed, slow or unstable network speeds, and computers often hang, lag, and not responding. Purwokerto Islamic Hospital also has never conducted an information system risk management analysis. This information system risk management analysis uses the Octave Allegro method which focuses on the security of information assets. This study aims to assess risk and make recommendations for mitigation actions that need to be taken against the risk of information assets of the SIMRS Registration Module and the IGD Module. The results of this study are the results of the mitigation action plan for threat scenario 1 obtained 5 mitigation actions from 3 containers. For threat scenario 2 we get 10 mitigation actions from 5 containers. For threat scenario 3, we get 4 mitigation actions from 2 containers. For threat scenario 4 we get 3 mitigation actions from 2 containers. For threat scenario 5 we get 11 mitigation actions from 4 containers.