Information Security Evaluation: Case Study PT. Bahtera Bahari shipyard

Abstract

PT. Bahtera Bahari Shipyard is a shipyard company that has implemented ISO 9001; 14001, and 45001 establishes an organized is quality, environment, occupational health and safety. However, as the company relies more on digital operations and must strengthen data protection require the company to establish a more structured information security management approach. Internal audit results indicate that information security remains outside a dedicated system framework. The present research seeks to evaluate organization readiness, identify information security gaps within the existing system, as well as to recommend ISO/IEC 27001:2022 as the Information Security Management System (ISMS). is expected to strengthen the protection of information assets, enhance Standard risk management and control, and integrate information security into the company's existing management systems.