Manajemen Risiko Penerapan Data Integrity di PT XYZ dengan Metode House of Risk

Abstract

Penelitian ini bertujuan mengidentifikasi faktor risiko penyebab ketidakpatuhan dalam pelaksanaan periodic review data integrity assessment di PT XYZ, perusahaan FMCG bersertifikasi ISO 9001:2015, serta merumuskan strategi mitigasinya. Metode yang digunakan meliputi Root Cause Analysis (Five Whys), Gap Analysis berbasis ISO 9001:2015 dan ALCOA++, serta House of Risk (HOR) Fase 1 dan 2. Hasil Gap Analysis menunjukkan tingkat penerapan mencapai 67,69% (kategori "Baik"), namun masih terdapat kesenjangan pada aspek pelaksanaan dan monitoring. HOR Fase 1 mengidentifikasi 8 risk event dan 8 risk agent, dengan tiga prioritas agen risiko tertinggi: belum adanya mekanisme verifikasi lapangan, lingkup audit internal yang belum mencakup data integrity, dan belum adanya jadwal validasi backup data. Strategi mitigasi prioritas utama yang direkomendasikan adalah pelatihan khusus bagi penanggung jawab periodic review dan implementasi sistem manajemen data terintegrasi (QMS) dengan pengingat otomatis.

This study aims to identify risk factors causing non-compliance in implementing periodic data integrity assessment reviews at PT XYZ, an ISO 9001:2015-certified FMCG company, and to formulate mitigation strategies. The methods used include Root Cause Analysis (Five Whys), Gap Analysis based on ISO 9001:2015 and ALCOA++, and House of Risk (HOR) Phase 1 and 2. The Gap Analysis results showed an implementation level of 67.69% ("Good" category), yet gaps remain in execution and monitoring. HOR Phase 1 identified 8 risk events and 8 risk agents, with the top three priority agents being: lack of field verification mechanisms, internal audit scope excluding data integrity, and absence of scheduled backup data validation. The primary recommended mitigation strategies are specialized training for periodic review personnel and implementing an integrated data management system (QMS) with automatic reminders.