ANALISIS MANAJEMEN RISIKO TEKNOLOGI INFORMASI PADA BAGIAN TATA USAHA MENGGUNAKAN FRAMEWORK ISO 31000 PADA MI AL-BAROKAH PAMEUNGPEUK

Abstract

The rapid growth of information technology (IT) currently demands educational institutions, including elementary schools and madrasahs, to optimize the use of digital systems to enhance the efficiency of school administration (TU) operations. However, the implementation of this technology also introduces various potential risks that can threaten data integrity and the smoothness of school administrative services. This study aims to identify IT risk threats, evaluate risk levels, and develop mitigation strategy recommendations for the Administration Department at MI Al-Barokah Pameungpeuk, Garut. The method used in this research is a descriptive qualitative approach by applying the international standard risk management framework ISO 31000:2018. Data collection was conducted through direct observation of IT assets and in-depth interviews with the school administration staff. Based on the risk assessment process, the results successfully identified critical asset components and mapped potential IT risk threats, which are classified into three levels: high risk, medium risk, and low risk, based on the multiplication matrix of likelihood and impact values. The final outcome of this research provides structured and adaptive risk treatment recommendations for the management of MI Al-Barokah to minimize daily operational technical disruptions, strengthen information data security, and improve institutional governance preparedness in the future.