Design of IT Risk Control in the Computer Laboratory of the Faculty of Computer Science, University Pembangunan Nasional Veteran Jakarta Using the ISO 27001: 2022 Framework

Universities serve as hubs for knowledge acquisition, making it crucial for them to implement effective information security policies to protect their assets. This study focuses on the IT risk control assessment of the Computer Laboratory at the Faculty of Computer Science, UPN Veteran Jakarta (UPNVJ). The research aims to identify and mitigate risks that could compromise the institution's operations by applying the ISO 27001:2022 framework using the PDCA (Plan, Do, Check, Act) methodology. Through this framework, we evaluated the lab's information security measures, identifying key vulnerabilities and implementing specific controls to minimize the risk of data breaches and system failures. The findings include a detailed risk assessment with improvements in security management, though some limitations were encountered in implementation. Future research could expand the study to other departments at UPNVJ to ensure comprehensive protection across the university's IT infrastructure.