Analisis Manajemen Risiko Berbasis ISO 31000 pada Aspek Operasional Teknologi Informasi PT. Schlumberger Geophysics Nusantara

Yogi Kamal; Andi Al-Ghifari Al-Ghifari; M Afdhal H; Fajar

Authors

Yogi Kamal Universitas Muslim Indonesia
Andi Al-Ghifari Al-Ghifari Universitas Muslim Indonesia
M Afdhal H Universitas Muslim Indonesia
Fajar Universitas Muslim Indonesia

Keywords:

Manajemen Resiko, ISO 31000, Teknologi Informasi, Risiko Operasional

Abstract

PT. Schlumberger Geophysics Nusantara is a leading multinational company in integrated technology and services for the oil and gas industry, located at Wisma Mulia Suite 45th Floor, South Jakarta. The company relies on the cloud-based DELFI platform to manage all its operational activities. High dependence on information technology (IT) systems creates various operational risks that require systematic management. This study analyzes IT operational risk management using the ISO 31000:2009 framework through a qualitative descriptive approach. Data was collected through structured interviews with the Project Manager and Account Manager of the Digital & Integration Division. Risk assessment uses a likelihood × impact matrix on a 1–5 scale. The study identified 14 IT operational risks: 11 risks (78.57%) at High level (score ≥15) and 3 risks (21.43%) at Moderate level. The highest risks include DELFI system downtime, cyber attacks, and data breaches. ISO 31000 proved effective in providing a structured overview of risk levels and handling priorities to support the sustainability of the company's IT operations

References

R.R. Moeller, Brink’s Modern Internal Auditing: A Common Body of Knowledge, 8th ed. Hoboken: Wiley, 2016.

I. Grey, S. Manson, dan L. Crawford, The Audit Process: Principles, Practice and Cases, 6th ed. Cengage Learning, 2015.

N.M. Sirait dan A. Susanty, “Analisis risiko operasional berdasarkan pendekatan Enterprise Risk Management (ERM) pada CV Mitra Dunia Palletindo,” Industrial Engineering Online Journal, vol. 5, no. 4, 2016.

International Organization for Standardization, ISO 31000:2009 Risk Management — Principles and Guidelines. Geneva: ISO, 2009.

G.P. Manuputty, A. Abdul Azis, dan N.A. Nur Pratami, “Analisis manajemen risiko berbasis ISO 31000 pada aspek operasional teknologi informasi PT. Schlumberger Geophysics Nusantara,” E-Prosiding Akuntansi Universitas Trilogi, 2022. https://trilogi.ac.id/journal/ks/index.php/EPAKT/article/view/1171

S.A. Atmojo dan A.D. Manuputty, “Analisis manajemen risiko teknologi informasi menggunakan ISO 31000 pada aplikasi AHO Office,” Jurnal Teknologi Informasi dan Ilmu Komputer, vol. 7, no. 3, hal. 546–558, 2020.

S.D. Kuncoro, R.A. Ghaisan, M.U. Zaky, dan A. Wulansari, “Manajemen risiko pada teknologi informasi: Studi kasus pada perusahaan jasa,” Prosiding Seminar Nasional Informatika, vol. 1, hal. 313–323, 2023.

A.A. Herlambang, A.A. Gani, dan D.D. Alvianto, “Pendekatan ISO 31000:2018 dalam manajemen risiko teknologi informasi pada Tracer Study Universitas Sebelas April,” Jurnal Teknologi Informasi dan Komunikasi, hal. 5651–5660, 2024.

Jericho dan E. Haryani, “Penerapan ISO 31000:2018 dalam manajemen risiko teknologi informasi pada sistem penerbitan PT. X,” Jurnal Informasi, Sains dan Teknologi (ISAINTEK), vol. 7, no. 2, 2024. https://isaintek.polinef.ac.id/index.php/isaintek/article/view/269

A.M. Siregar et al., “Standarisasi manajemen risiko ISO 31000: Tantangan dan strategi implementasi pada PT. Telkom Indonesia,” JERKIN: Jurnal Ekonomi, Riset, Kajian dan Inovasi, 2025. https://jerkin.org/index.php/jerkin/article/view/1564

N. Safaat H, “Manajemen risiko teknologi informasi menggunakan framework ISO 31000 studi kasus sistem infrastruktur TI Telkom Indonesia,” SITEKIN: Jurnal Sains, Teknologi dan Industri, vol. 12, no. 2, 2015.

B. Prasetyo, A. Salsabila, dan W.E.Y. Retnani, “IT risk management analysis based on ISO 31000 and Bow Tie Analysis in higher education institution,” Indonesian Journal of Information Systems, vol. 7, no. 1, hal. 84–96, 2024. https://doi.org/10.24002/ijis.v7i1.9673

Iswajuni, A. Manasikana, dan S. Soetedjo, “The effect of enterprise risk management on firm value in manufacturing companies listed on Indonesian Stock Exchange,” Asian Journal of Accounting Research, vol. 3, no. 2, hal. 224–236, 2018.

H.A.M. Hani, D.R.I. Indah, dan P.E.S. Putri, “Analisis manajemen risiko pada teknologi informasi PT. Pos Indonesia menggunakan ISO 31000,” Indonesian Journal of Computer Science, vol. 12, no. 6, hal. 3957–3974, 2023. https://doi.org/10.33022/ijcs.v12i6.3504

S.D. Mulyati, R.A. Kuncoro, dan A. Wulansari, “Optimalisasi manajemen risiko teknologi informasi menggunakan framework ISO 31000 di era digital,” JISAMAR, vol. 9, no. 1, 2025. https://journal.stmikjayakarta.ac.id/index.php/jisamar/article/view/1690