Risk Management in Data Centers Using ISO 31000:2018 Case Study: XYZ Agency

Abstract

Data Center as the operational center of the entire application system and central data communication network system is required to fulfill all operational Information & Communication Technology (ICT) activities. The increase in the number of applications and ICT services at XYZ agency is causing problems at the existing Data Center. One of the problems is the emergence of disruptions/incidents of ICT applications and services. Recurring incidents cause problems that often require a long turnaround time and comprehensive root cause analysis (RCA) so that these incidents do not recur. With the existing problems in the Data Center, the XYZ agency will undertake a Data Center development project in which there are prerequisites for overcoming existing problems. In this Data Center development project activity, the risk management stage is needed as a process to identify the risks to be faced, risk control, and strategies for the existing risk mitigation process. ISO 31000: 2018 is used in the preparation of risk management in this Data Center.