Risk-assessment based academic information System security policy using octave Allegro and ISO 27002

Protection for information assets is essential in safeguarding information security due to the threats on confidentiality, integrity, and availability in storing and using these assets. The Langlangbuana University requires protection on its information asset, its Academic Information System (AIS), which mostly manages confidential information for academic purposes. This study aims to conduct a risk-assessment on the AIS asset using the OCTAVE Allegro framework, as well as on the security control applications using the clauses of ISO 27002. As a result, the policies recommended by this study could be useful for the university's future improvements.