manage and assurance ‘big data’ - wordpress.com · manage and assurance ‘big data ... •...

32
1 Manage and Assurance ‘Big Data’ Using COBIT ® 5 for Enabling Information Presented by Sarwono Sutikno, Dr.Eng.,CISA,CISSP,CISM ISACA Academic Advocate for ITB Indonesia Chapter

Upload: hakhue

Post on 11-Apr-2019

219 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

1

Manage and Assurance ‘Big Data’ Using COBIT® 5 for Enabling Information Presented by Sarwono Sutikno, Dr.Eng.,CISA,CISSP,CISM ISACA Academic Advocate for ITB

Indonesia Chapter

Page 2: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Current:

• Director of Certification – CRISC & CGEIT, ISACA Indonesia Chapter • ISACA Academic Advocate at ITB • SME for Information Security Standard for ISO at ISACA HQ • Associate Professor at School of Electrical Engineering and Informatics, Institut Teknologi Bandung • Ketua WG Layanan dan Tata Kelola TI, anggota WG Keamanan Informasi serta Anggota Panitia Teknis 35-01

Program Nasional Penetapan Standar bidang Teknologi Informasi, BSN – Kominfo. Past: • Ketua Kelompok Kerja Evaluasi TIK Nasional, Dewan TIK Nasional (2007-2008) • Plt Direktur Operasi Sistem PPATK (Indonesia Financial Transaction Reports and Analysis Center, INTRAC), April

2009 – May 2011 Professional Certification:

• Professional Engineering (PE), the Principles and Practice of Electrical Engineering, College of Engineering, the University of Texas at Austin. 2000

• IRCA Information Security Management System Lead Auditor Course, 2004 • ISACA Certified Information System Auditor (CISA). CISA Number: 0540859, 2005 • Brainbench Computer Forensic, 2006 • (ISC)2 Certified Information Systems Security Professional (CISSP), No: 118113, 2007 • ISACA Certified Information Security Manager (CISM). CISM Number: 0707414, 2007 Award:

• (ISC)2 Asia Pacific Information Security Leadership Achievements (ISLA) 2011 award in category Senior Information Security Professional. http://isc2.org/ISLA

2

Sarwono Sutikno, Dr.Eng.,CISA,CISSP,CISM

Page 3: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

What is Big Data

Big Data Refinery

Informasi

Risiko

Kontrol

Information Governance/Management Issues:

Demand Side of Information

Big Data Dimension 1: Variety of Information

Big Data Dimension 2: Velocity of Information

Big Data Dimension 3: Volume of Information

Master and Reference Data Management

End-user Computing

Disintermediation

Discussion 3

Agenda

Page 4: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

What is Big Data

4

Page 5: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Big Data Refinery and Classic Systems

5 http://hortonworks.com/blog/big-data-refinery-fuels-next-generation-data-architecture/

Page 6: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Next-Generation Data Architecture

6 http://hortonworks.com/blog/big-data-refinery-fuels-next-generation-data-architecture/

Page 7: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

7

Page 8: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance

8

Page 9: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

COBIT 5 Enabler

9

Page 10: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

10

Information

Page 11: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Flow

11

Page 12: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

COBIT 5 Information Model

12

Page 13: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

13

Page 14: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Risk

14

Page 15: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

15

Page 16: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Control categorization

16

Page 17: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance and Management Issues

17

Page 18: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Demand Side of Information

18

Page 19: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Demand Side of Information

19

Page 20: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Big Data Dimension 1: Variety of Information

20

Page 21: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Big Data Dimension 1: Variety of Information

21

Page 22: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Big Data Dimension 2: Velocity of Information

22

Page 23: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Big Data Dimension 2: Velocity of Information

23

Page 24: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Big Data Dimension 3: Volume of Information

24

Page 25: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Big Data Dimension 3: Volume of Information

25

Page 26: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Master and Reference Data Management

26

Page 27: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Master and Reference Data Management

27

Page 28: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: End-user Computing

28

Page 29: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: End-user Computing

29

Page 30: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Disintermediation

30

Page 31: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Information Governance/Management Issue: Disintermediation

31

Page 32: Manage and Assurance ‘Big Data’ - WordPress.com · Manage and Assurance ‘Big Data ... • Ketua Kelompok Kerja Evaluasi TIK Nasional, ... 2 Asia Pacific Information Security

Discussion

32