@thesis{thesis, author={Simarmata Faskawaty}, title ={ANALISIS RISIKO SISTEM INFORMASI TERPADU XAVERIUS (SIDUX) MENGGUNAKAN NIST SP 800-30 REVISION 1 (Studi Kasus: Yayasan Xaverius Palembang)}, year={2022}, url={http://eprints.ukmc.ac.id/8673/}, abstract={The Xaverius Integrated Information System (SIDUX) is a website-based system owned by the Xaverius Palembang Foundation, which is useful for collecting, storing, processing, and distributing personal information and matters relating to finance. This information system is managed directly by the Implementing Information and Communication Technology Sector (PBTIK) and used by 2 other executors, namely the Executor for the Finance Sector and the Implementer for the Human Resources Sector at the Xaverius Foundation Palembang. In the implementation of this system, it turned out that some initial known risks were found, such as the occurrence of network breaches from external parties, as well as during journal closing activities, inputs that did not have access permissions caused the financial statements to become unbalanced. Potential risks were also found, such as the vulnerability of the network security system due to the absence of a firewall. Therefore, to find other risks, an analysis was carried out on the system using NIST SP 800-30 Revision 1 on the information security side. From the results of the analysis carried out, 23 sources of threats or risks were found from the results of interviews with 7 research respondents who had been determined.} }