Integrated implementation of service and information security management system

Abstract

In the government agency IT implementation, information technology service and security factors are very important aspect to be considered. International Standardization Organization has published ISO20000 standard as a standard for information technology services management and ISO27001 standard for information security management system. This research described the design of IT service and information security management in State Polytechnic of Lampung (Polinela). Research was started by performing an overview of the organization, determining evaluation scope, designing and evaluating tools, and composing recommendations for improvement. Evaluation results done by expert judgment show that the created tools and recommendations were applicable to the organization. This research provided output as a assessment result about current service and security management system and some recommendations for Polinela to focus on attainment of outputs and needs of organizational goals through identification of required services.