Making Academic Security Management System Planning Document Based on ISO 27001: 2013 for Improving Information Security at AAK University Dynamics

Abstract

Dinamika University is an educational institution engaged in information technology. One of the misión of undika is to create profesional, superior and competent human resource. To support the mission, Undika has a supporting unit in the administration field, namely the Academic Administration Secction and the Student Affairs Section (AAK). The solution that has been carried out by the AAK section in handling information security is related to 3 (three) basic prociples of information security namely Confidentiality, Integrity and Availability is still limited to wholeness and confidentiality which can only be meet the management and technical sides, the support provided is to compile documents related to information security control and the creation of Standard Operational Procedure (SOP) documents which include policy documents, work instructions and work records. The results of this study are risk management documents and the preparation of objective controls and security controls used to support the preparation of SOP documents based on technical categories consisting of 5 policy documents, 5 SOP, 5 work instructions, and 11 work records. Management consist of 1 policy document, 1 SOP, 1 work instruction and 1 work record. Operational 1 policy document, 1 SOP, 1 work instruction, and 3 work records