RISK MANAGEMENT ANALYSIS BASED ON ISO 31000 ON THE OPERATIONAL ASPECTS OF INFORMATION TECHNOLOGY OF PT. SCHLUMBERGER GEOPHYSICS NUSANTARA

Abstract

1. Schlumberger Geophysics Nusantara is a leading multinational company providing integrated technology and services to the oil and gas industry in Indonesia. The company relies on the cloud-based DELFI platform to support its operational activities. This high dependence on information technology (IT) systems creates various operational risks that require systematic management. This study analyzes IT operational risk management using the ISO 31000:2009 framework through a descriptive qualitative approach. Data were collected through structured interviews with the Project Manager and Account Manager of the Digital & Integration Division. Risk assessment was conducted using a likelihood × impact matrix on a 1–5 scale. The results identified 14 IT operational risks, with 9 risks (64.29%) classified as High and 5 risks (35.71%) classified as Moderate. The highest-rated risks were DELFI system downtime, cyberattacks, and data breaches, each with a risk score of 20. The ISO 31000:2009 framework provides a structured approach for identifying, evaluating, and prioritizing risk treatment to support the continuity of the company's IT operations.