Assessing an Information Security Governance Using IPPF in Multi-Finance Company

摘要

To ensure the performance of a company, at less once a year, the company use external or internal auditor to assess all assets of the company, include governance. One of company governance is information security governance. Multi-finance Company has to report to the regulator about internal audit activities. Otoritas Jasa Keuangan (OJK) is a financing companies' regulator, subject to Indonesia Law. International Professional Practices Framework (IPPF) is one of the standards for Internal Audit. This research what to list the questions Internal Auditor will ask the IT team to assess them about Information Security Governance. PT.ABC, a multi-finance company, will be used as a case study.