Information Security Risk Assessment Using Situational Awareness Frameworks and Application Tools

This paper describes the development of situational awareness models and applications to assess cybersecurity risks based on Annex ISO 27001:2013. The risk assessment method used is direct testing method, namely audit, exercise penetration testing. this study classified into three levels, high, medium low. A high-risk value an unacceptable value. Meanwhile, low values can be categorized as acceptable values. results a network security case with performance index indicators percentage compliance 27001:2013 annex controls level findings test methods showed that audit was 38.29% moderate level. While tabletop are 75% levels. On other hand, 16.66%, Test or corrective actions taken through application. Finally, have been verified prove there increase in cyber resilience security.