Designing Information Security Risk Management Policies in an E-Government System Using TOGAF Enterprise Architecture

The e-Government system provides opportunities to enhance collaboration among government agencies in carrying out governmental affairs and tasks to achieve common goals. Risk management and information security are aspects that can influence the e-Government index in a region. A local government organization is tasked with ensuring that risk management and information security are well implemented in its jurisdiction. However, until now, there has been no specific policy governing risk management within this organization. This research aims to design a risk management policy for the local government organization in the form of a Regent Regulation. The research stages include integrating standards related to risk management and information security, namely ISO 27001:2022, ISO 31000:2018, and SABSA with TOGAF Enterprise Architecture (EA) based on the integration results by The Open Group. Then, the content of the policy is determined and drafted into a Regent Regulation Draft based on the legal product formation format generally applicable in Indonesia and specifically in the region. This research results in a recommended document of the Regent Regulation Draft on Risk Management for the local government organization. This study is expected to help optimize the risk management implementation in the local government organization environment, thereby Improving the readiness of e-Government in the region.