EVALUASI DAN PENGEMBANGAN LAYANAN SISTEM INFORMASI PPID DINAS KESEHATAN PROVINSI JAWA TIMUR DENGAN MENGGUNAKAN STANDAR DAN TEKNIS KEMANAN SISTEM PEMERINTAHAN BERBASIS ELEKTRONIK (SPBE)
DOI:
https://doi.org/10.59407/jrsit.v1i3.454Keywords:
information system, Development, website-based application security standards, Prototype, penetrationAbstract
The Indonesian government's steadfast commitment to increasing efficiency and transparency is clearly visible in the Republic of Indonesia Presidential Decree Number 95 of 2018 concerning Electronic-Based Government Systems (SPBE). In line with this commitment, this research focuses on evaluating and improving Information System Services from PPID Information Services at the East Java Health Office, adopting SPBE security standards. The main goal is to use the Prototyping method and follow the guidelines provided by the SPBE Technical Standards and Security Procedures, implemented through the Laravel framework. The research process begins with problem analysis using observation and interview techniques. The literature review provides important insights for the development of PPID information systems. Service evaluation is carried out to produce recommendations for improvement. The implementation phase combines the Prototyping method with indicators derived from SPBE technical standards and security procedures. System testing, including the application of the Penetration Testing method, identified 9 vulnerabilities in the website, with 2 at the medium risk level and 7 at the low risk level. While progress in complying with security standards is satisfactory, recommendations for continued development of OWASP ZAP are critical. The main objective is to make a positive contribution to the effectiveness, integration, sustainability, efficiency, accountability, interoperability and security of PPID Information System Services at the East Java Health Office. This effort is in line with the principles of transparency and efficiency in governance.
References
Peraturan Presiden RI, “Peraturan Presiden Nomor 95 Tahun 2018 tentang Sistem Pemerintahan Berbasis Elektronik,” Menteri Huk. Dan Hak Asasi Mns. Republik Indones., p. 110, 2018.
PERATURAN PERUNDANG-UNDANGAN KEMENTERIAN HUKUM DAN HAK ASASI MANUSIA REPUBLIK INDONESIA, “Peraturan BSSN Nomor 4,” Pedoman Manaj. Keamanan Inf. Sist. Pemerintah. Berbas. Elektron. Dan Standar Tek. Dan Prosedur Keamanan Sist. Pemerintah. Berbas. Elektron., 2021.
A. Kurniawan, M. Chabibi, and R. S. Dewi, “Pengembangan Sistem Informasi Pelayanan Desa Berbasis Web Dengan Metode Prototyping Pada Desa Leran,” JURIKOM (Jurnal Ris. Komputer), vol. 7, no. 1, p. 114, 2020, doi: 10.30865/jurikom.v7i1.1863.
E. Kaban, K. Candra Brata, and A. Hendra Brata, “Evaluasi Usability Menggunakan Metode System Usability Scale (SUS) Dan Discovery Prototyping Pada Aplikasi PLN Mobile (Studi Kasus PT. PLN),” J. Pengemb. Teknol. Inf. dan Ilmu Komput., vol. 4, no. 10, pp. 3281–3290, 2020, [Online]. Available: http://j-ptiik.ub.ac.id
Y. A. Prasetyo and N. Ambarsari, “Pengembangan Web E-Commerce Bojana Sari Menggunakan Metode Prototype,” e-Proceeding Eng., vol. 2, no. 1, pp. 1042–1056, 2015.
M. Agustine Bacsafra and D. Mustika Kusumawardani, “Pengembangan Sistem Informasi Badan Pusat Statistik Kabupaten Kuningan Berbasis Android Dengan Metode Prototype,” J. Sains Komput. Inform. (J-SAKTI, vol. 6, no. 1, pp. 379–390, 2022.
S. Hidayatulloh and D. Saptadiaji, “Penetration Testing pada Website Universitas ARS Menggunakan Open Web Application Security Project (OWASP),” J. Algoritm., vol. 18, no. 1, pp. 77–86, 2021, doi: 10.33364/algoritma/v.18-1.827.
M. D. Al Vriano, “Pengujian Keamanan Web Juice Shop Dengan Metode Pentesting Berbasis Owasp Top 10,” J. Multidisiplin Saintek, vol. 1, no. 06, pp. 81–90, 2023.
Reza. Aditama; Edi. Negara, “Pemindai Kerentanan Terhadap Website Jago Masak Dengan Metode Pengujian Penetrasi OWASP ZAP,” J. Mantik, vol. 6, no. 3, pp. 3406–3412, 2022.
Y. A. Pohan, “Meningkatkan Keamanan Webserver Aplikasi Pelaporan Pajak Daerah Menggunakan Metode Penetration Testing Execution Standar,” J. Sistim Inf. dan Teknol., vol. 3, pp. 1–6, 2021, doi: 10.37034/jsisfotek.v3i1.36.
