FINDING FORM

Document #: FAPP-07 Release Date: 01-Jun-2019 Page 1 of 3

Part 1: Client Audit Data

Client: Dinas Komunikasi dan Informatika Sidoarjo Client ID#: 29092021IND-571CER
Audit Criteria: ISO/IEC 27001:2013 Date(s) of audit: 19 & 22 November 2021

Part 2: Finding Detail

Finding #: MEM-INW-OFI

Finding Category: Action required

Major Nonconformity
Minor Nonconformity
Opportunity for improvement
Minor Area of concern for Stage II
Major Area of concern for Stage II
Submit corrective action plan by (date):
Submit corrective action by (date):
No response required
No response required. Action to be taken prior to Stage II

Audit Criteria reference # :

OFI :
1. Pada ruang battery data center agar dirapihkan masih terlihat adanya kardus, sisa kabel dan alat alat
lainnya.
2. Pada pengisian aplikasi buku tamu data center sebaiknya di tambahkan jam keluarnya untuk monitoring
jam saat masuk dan saat keluar pada aktivitas ruang data center.
3. Tanggal pelaksanaan form ‘Matriks Kompetensi’ belum diisikan dengan semestinya
4. Ahmad Firdaus (sebagai PIC Jaringan Infrastruktur) belum memiliki bukti pelaksanaan training
‘Awareness’ of ISO/IEC 27001:2013 dengan semestinya
5. Memastikan pelaksanaan evaluasi efektifitas pelaksanaan / pemberian pelatihan yang tidak hanya untuk
pelatihan ISO/IEC 27001:2013 saja, tetapi mencakupi semua pelatihan yang diberikan lainnya
6. Memastikan pengisian form ‘PTK’ (KSDA.SMKI.FM.02.01, rev: 00, eff. date: 05 Apr 2021) dilakukan
dengan rinci dan jelas (misal: berhubungan dengan isu terbukanya pintu di data center)
7. Memastikan form: ‘Daftar Peraturan’, ‘Daftar Pemenuhan Peraturan’, & ‘Daftar Rekaman Distribusi
Peraturan’ diupdate dan disesuaikan karena belum memasukkan: “Permenkominfo No. 20/2016” & “PP
No. 71/2019” dengan semestinya

Issued by: Indra Wahyudi & M. Effrin Martiansyah

Part 3: Corrective action plan (To be completed by the client)

Root Cause (Required in all cases)
     

Correction (if not required, please justify)

     

FAPP-07 Un- controlled document if printed

 FINDING FORM
Document #: FAPP-07 Release Date: 01-Jun-2019 Page 2 of 3

Corrective action plan (Required in all cases)

     

Plan for verification of effectiveness (Required in all cases)

     

Target date for completion:       Signature:       Date:      

Part 4: Acceptance of corrective action plan (For CBQA’s use only)

Accepted by:       Date:      

SECTION 5: verification of implementation (For CBQA’s use only)

Implementation of the corrective action plan
     

Effectiveness of corrective action

     

Nonconformity closed: Corrective action(s) verified to be implemented.

Verified by:       Date:      

FAPP-07 Un- controlled document if printed

 FINDING FORM
Document #: FAPP-07 Release Date: 01-Jun-2019 Page 3 of 3

FAPP-07 Un- controlled document if printed