Critical information assets disaster management audit model for UTM student information system

Abstract

In any modern universities like UTM, e-learning is an important technology that can improve the quality of teaching and learning. Information is constantly processed and combined to form new information assets that are critical to any business processes. The critical information assets perceived by UTM e-learning as the owner or stakeholders (such as Centre for Teaching & Learning (CTL), Centre for Information and communication Technology (CICT), students and lecturers) will suffer an adverse impact if the information assets are lost, interrupted or destroyed. Therefore, it becomes necessary for the owners of UTM e-learning to identify their critical information assets. This research is conducted on UTM e-learning system in identifying the critical information assets and type in which are being stored or held as well as identifying the potential threats (disasters) that might affect the information assets. The researcher adopted the use of Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) methodology, OCTAVE Allegro in identifying the critical asset and some models of information management. The research identifies the real information needs in UTM e-learning system by identifying who needs the information by putting together a good plan and auditing it regularly that can go a long way towards preventing a disaster. Eventually, a disaster audit model for the system was proposed that reflects the concept of critical information asset disaster control.