Detail Cantuman Kembali
IMPLEMENTASI DAN EVALUASI ZERO TRUST ARCHITECTURE PADA INFRASTRUKTUR TEKNOLOGI INFORMASI: STUDI KASUS PERUSAHAAN FINANCIAL TECHNOLOGY MIKRO DI INDONESIA
- Bagikan:
Maturity assessment of Zero Trust Architecture (ZTA) in practice still relies
predominantly on self-assessment questionnaires, whose results depend on
respondent perception, cannot be replicated by others, and cannot be re-run
automatically as infrastructure changes. Modern cloud infrastructure, however, is
typically managed as declarative code, so compliance evidence already exists in
machine-readable form but has not been used as an assessment basis. This research
evaluates ZTA maturity on the IT infrastructure of a micro financial technology
company in Indonesia, focusing on its payment service.
The research was conducted as a descriptive-evaluative case study with
instrument development. Assessment criteria were derived from the CISA Zero
Trust Maturity Model v2, with NIST SP 800-207 as the conceptual model, and each
criterion was mapped to an indicator verifiable from Infrastructure-as-Code
artefacts and the payment service source code. The instrument is software that
extracts indicators automatically and deterministically; the study involved no
interviews or surveys.
Maturity varies across pillars, from Traditional in Identity, Networks, Data
and Governance to Optimal in Automation and Orchestration. Devices and
Visibility and Analytics could not be assessed for lack of artefacts, giving 44.0%
coverage (11 of 25 functions). Gaps are static service-account credentials, direct
individual access, and absent egress management; output is identical across
repeated runs, and 10 of 12 testable criteria resist threshold shifts.
This research contributes methodologically an artefact-derived maturity
assessment method, an alternative to questionnaires that is reproducible and free of
rater bias, and practically a reusable instrument with a concrete improvement
roadmap for the case-study organisation.
Keywords: automated assessment, fintech case study, Infrastructure as Code,
security maturity, Zero Trust Architecture
Purwanto, A Roni-22/1007/0061/TSD/03 - Personal Name
Dr. Bambang PDP, SE., Ak., S.Kom., MMSI - Personal Name
Dr. Bambang PDP, SE., Ak., S.Kom., MMSI - Personal Name
011 PUR I R1
NONE
Text Skripsi
Indonesia
UNIVERSITAS TEKNOLOGI DIGITAL INDONESIA (UTDI)
2026
Yogyakarta
011 MTI 2026
LOADING LIST...
LOADING LIST...