EVALUASI KOMPARATIF KEAMANAN INFORMASI PDNS 2024 BERDASARKAN ISO/IEC 27001:2022 DAN NIST CSF 2.0
Abstract
Serangan ransomware terhadap Pusat Data Nasional Sementara (PDNS) tahun 2024 mengungkap kelemahan kritis pada keamanan infrastruktur digital pemerintah Indonesia. Penelitian ini bertujuan menganalisis kelemahan keamanan informasi pada kasus serangan ransomware PDNS menggunakan ISO/IEC 27001:2022 dan NIST Cybersecurity Framework (CSF) 2.0 melalui pendekatan Systematic Literature Review (SLR). Sebanyak 24 artikel jurnal ilmiah, laporan keamanan siber, publikasi resmi pemerintah, dan standar keamanan informasi internasional dikaji menggunakan protokol PRISMA. Analisis difokuskan pada identifikasi kesenjangan keamanan pada aspek organisasi, teknologi, dan operasional sistem yang terdampak. Hasil penelitian menunjukkan bahwa serangan terjadi akibat lemahnya pengelolaan akses, patch management, segmentasi jaringan, pemantauan real-time, dan kesiapan respons insiden. ISO/IEC 27001:2022 efektif mengidentifikasi kelemahan tata kelola keamanan informasi, sedangkan NIST CSF 2.0 memberikan analisis operasional terkait kemampuan deteksi, respons, dan pemulihan insiden. Integrasi kedua framework menghasilkan pendekatan keamanan siber yang lebih komprehensif melalui penerapan keamanan berlapis, pemantauan berkelanjutan, dan pengelolaan respons insiden yang terstruktur. Hasil penelitian ini diharapkan dapat menjadi referensi dalam meningkatkan ketahanan siber infrastruktur digital pemerintah.
Downloads
References
] R. F. Setiawan, "Analisis Sentimen Isu Ancaman Siber Menggunakan Algoritma Multi-layer Perceptron," Jurnal Informatika dan Teknik Elektro Terapan (JITET), vol. 13, no. 3, pp. 1296–1302, Jul. 2025.
J. L. Salas-Riega, Y. Riega-Viru, M. Ninaquispe-Soto, and J. M. Salas-Riega, "Cybersecurity and the NIST framework," International Journal of Advanced Computer Science and Applications (IJACSA), vol. 16, no. 6, 2025.
Nurbojatmiko, M. S. Khatami, N. M. Asnadi, and R. Anisyah, "ISO 27001 as information security solution in Society 5.0 era: Systematic literature review," Sinkron: Jurnal dan Penelitian Teknik Informatika, vol. 9, no. 1, 2025.
BSSN, Laporan insiden keamanan siber PDNS 2024. Badan Siber dan Sandi Negara, 2024.
F. C. Arumdiya and C. Rudianto, "Implementasi ISO 27001:2022 dalam manajemen risiko keamanan informasi," Jurnal PETISI, vol. 6, no. 2, 2025.
A. Apriany and A. Wibowo, "Analysis of the implementation of ISO 27001:2022 and KAMI Index in enhancing the information security management system in consulting firms," Indonesian Journal of Computing and Cybernetics Systems (IJCCS), vol. 18, no. 4, pp. 417–428, 2024.
F. A. A. Setyoso, R. Mulyana, and R. A. Nugraha, "Utilizing ISO 27001:2022 in information security design for SME digital transformation," Ranah Research, vol. 6, no. 6, 2024.
A. Marotta and S. Madnick, "Analyzing and categorizing emerging cybersecurity regulations," ACM Computing Surveys, vol. 58, no. 2, 2025.
T. Sishuba and E. I. Edoun, "Cyber security standards for applying the defense-in-depth approach for industrial control systems," AIP Conference Proceedings, vol. 3416, 2026.
D. Ribeiro, V. Fonte, L. F. Ramos, and J. M. Silva, "Assessing the information security posture of online public services worldwide," Government Information Quarterly, vol. 42, 2025.
E. Liyanto, "Analisis penerapan sistem manajemen keamanan informasi pada website official STT NF dengan SNI ISO/IEC 27001:2022," Sekolah Tinggi Teknologi Terpadu Nurul Fikri, 2024.
A. Muzakky, "Perancangan sistem manajemen keamanan informasi menggunakan framework ISO/IEC 27001:2022 pada sistem informasi peminjaman ruangan kampus," STT Terpadu Nurul Fikri, 2024.
MITRE, "ATT&CK framework: Tactics, techniques and procedures for ransomware attacks," The MITRE Corporation, 2024. [Online]. Available: https://attack.mitre.org
Sangfor, "Brain Cipher ransomware: Technical analysis and mitigation strategies," Sangfor Technologies Security Blog, 2024.
M. Salam, K. A. A. Bakar, A. T. A. Ghani, and A. H. M. Aman, "Cybersecurity in higher education institutions digitalisation," SAGE Open, pp. 1–14, 2026.
D. Primacs, "Technical forensics report: Brain Cipher ransomware attack on Indonesian PDNS," Security Research Publication, 2024.
Lockheed Martin, "Cyber kill chain framework: Advanced threat analysis," Lockheed Martin Corporation, 2025.
Kumparan Tech, "Begini cara Brain Cipher ransomware sandera data korban," Kumparan, Jun. 30, 2024. [Online]. Available: https://kumparan.com
CSIRT Magelang Kota, "Analisis teknis serangan ransomware Brain Cipher pada PDNS," CSIRT Kota Magelang Technical Report, 2024.
Antara News, "Menkominfo jelaskan kronologi serangan siber PDNS 2," Antara News, Jun. 26, 2024. [Online]. Available: https://www.antaranews.com
ASIS International, Incident response and business continuity management standards. ASIS International Publications, 2024.
RRI, "Update pemulihan PDNS pasca serangan ransomware," Radio Republik Indonesia News, 2024.
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
