Indonesia Conference Directory

To find out how far the company in anticipating and reducing information technology risks that will occur, it is necessary to evaluate information technology risk management. The method used in evaluating information technology risk management is the Domain Risk Governance (RG) contained in the Risk IT Framework. The evaluation process using this framework and domain is that it can measure the maturity level of the company in carrying out information technology risk management. The results of this research is a companies know maturity level in implementing IT risk management at level 2 (repeatable) and level 3 (defined), know the GAP between current maturity level with target maturity level and can improve the current maturity level to achieve the desired target using the recommendations given. So the company can compete with its competitors in providing services, ensure that IT risk management activities are aligned with the companys goals, reduce losses in the process of IT implementation, integrating IT risk strategies with business strategy risk decisions, and ensuring that decisions are made in accordance with company objectives based on opportunities and consequences that have been made.