STUDI KASUS PERUSAHAAN FINANCIAL TECHNOLOGY MIKRO DI INDONESIA Purwanto, A Roni-22/1007/0061/TSD/03 Primary Author Dr. Bambang PDP, SE., Ak., S.Kom., MMSI Primary Author mixed material bibliography Yogyakarta UNIVERSITAS TEKNOLOGI DIGITAL INDONESIA (UTDI) 2026 monographic id Indonesia

Text Skripsi

011 MTI 2026 Maturity assessment of Zero Trust Architecture (ZTA) in practice still relies predominantly on self-assessment questionnaires, whose results depend on respondent perception, cannot be replicated by others, and cannot be re-run automatically as infrastructure changes. Modern cloud infrastructure, however, is typically managed as declarative code, so compliance evidence already exists in machine-readable form but has not been used as an assessment basis. This research evaluates ZTA maturity on the IT infrastructure of a micro financial technology company in Indonesia, focusing on its payment service. The research was conducted as a descriptive-evaluative case study with instrument development. Assessment criteria were derived from the CISA Zero Trust Maturity Model v2, with NIST SP 800-207 as the conceptual model, and each criterion was mapped to an indicator verifiable from Infrastructure-as-Code artefacts and the payment service source code. The instrument is software that extracts indicators automatically and deterministically; the study involved no interviews or surveys. Maturity varies across pillars, from Traditional in Identity, Networks, Data and Governance to Optimal in Automation and Orchestration. Devices and Visibility and Analytics could not be assessed for lack of artefacts, giving 44.0% coverage (11 of 25 functions). Gaps are static service-account credentials, direct individual access, and absent egress management; output is identical across repeated runs, and 10 of 12 testable criteria resist threshold shifts. This research contributes methodologically an artefact-derived maturity assessment method, an alternative to questionnaires that is reproducible and free of rater bias, and practically a reusable instrument with a concrete improvement roadmap for the case-study organisation. Keywords: automated assessment, fintech case study, Infrastructure as Code, security maturity, Zero Trust Architecture IMPLEMENTASI DAN EVALUASI ZERO TRUST ARCHITECTURE NONE Perpustakaan Universitas Teknologi Digital Indonesia Katalog Online Perpustakaan Universitas Teknologi Digital Indonesia 011 PUR I R1 PUR0011MTI2026 RAK REFERENSI TESIS MTI 011 PUR I R1 18615 2026-10-21 12:41:31 2026-10-26 08:15:28 machine generated