Information Security Risk Assessment Guide for Digital Startups
- Client / Institution
- National Cyber and Crypto Agency
- Year
- 2021
- Service Domain
- Information Security
Contributing to an information security risk assessment guide for digital startups within a BSSN assistance programme with ADITIF.
In 2021, BSSN’s Directorate for Digital Economy Protection worked with the Asosiasi Digital Kreatif (ADITIF) on an information protection assistance programme for digital startups. One output of the programme was the Panduan Penilaian Risiko Keamanan Informasi (Information Security Risk Assessment Guide), which is recorded in Sadasa’s portfolio.
The guide helps early-stage companies understand risk assessment methods, develop procedures for their organisations, and put information security risk assessment into practice. It covers asset and threat identification, risk registers, likelihood and impact analysis, evaluation, and risk treatment options.
The document discusses SNI ISO/IEC 27001:2013 in the context of information security management and refers to ISO/IEC 27005 for the risk management process. Its primary audience is digital startups, although it can also serve as a reference for other electronic system operators beginning to manage information security risks.
Panduan Penilaian Risiko Keamanan Informasi
View full coverInstitution names are referenced as a factual record of completed engagements. Client proprietary materials, logos, and sensitive data remain strictly protected.