76 / 200
Jabatan Perkhidmatan Awam
Laporan Tahunan 2017 Annual Report
62
Aktiviti 2 : Bengkel Semakan Dokumen ISMS
Bengkel ini telah dilaksanakan pada 13-17 Mac
2017 di Bangunan i-IMATEC di INTAN, Bukit Kiara
yang juga melibatkan peserta-peserta daripada
BPMS dan INTAN. Objektif bengkel adalah untuk :
a) menyemak dan mengemaskini dokumen-
dokumen SOP berdasarkan prosedur semasa
b) menyelaraskan dan mengemaskini dokumen
ISMS bagi menepati dan memenuhi keperluan
standard.
Activity 2: ISMS Document Review Workshop
The workshop was held on 13-17 March 2017 at
the i-IMATEC Building in INTAN, Bukit Kiara which
also involved participants from BPMS and INTAN.
The workshop’s objectives were to:
a) review and update SOP documents based on
current procedures
b) coordinate and update ISMS documents to
meet and fulfil standard requirements
Aktiviti 3: Audit Dalam ISO 27001:2013 (ISMS)
Bil 1 & 2
2 sesi audit dalam telah dilaksanakan pada 28-
29 Mac 2017 dan 11-12 April 2017 di BPMS dan
INTAN, Bukit Kiara. Pasukan Audit Dalaman ISMS
terdiri daripada 8 orang juruaudit iaitu 3 juruaudit
daripada INTAN dan 5 juruaudit daripada BPMS.
Ketua juruaudit bagi kedua-dua sesi ialah Pn. Wan
Norasiah binti Wan Mohd Nawi daripada INTAN.
Activity 3: Internal Audit for ISO 27001: 2013
(ISMS) No. 1 & 2
Two internal audit sessions were held from 28-29
March 2017 and 11-12 April 2017 at BPMS and
INTAN, Bukit Kiara. The ISMS Internal Audit Team
consists 8 auditors: 3 auditors from INTAN and
5 auditors from BPMS. The chief auditor of both
sessions was Pn. Wan Norasiah binti Wan Mohd
Nawi from INTAN.
AKTIVITI-AKTIVITI PERSEDIAAN AUDIT DALAM DAN AUDIT SIRIM
PREPARATORY ACTIVITIES FOR INTERNAL AND SIRIM AUDITS
Aktiviti 1: Bengkel Risk Assesment
Bengkel ini telah dijalankan pada 20-24 Februari
2017 di Bangunan i-IMATEC di INTAN, Bukit
Kiara yang melibatkan peserta-peserta daripada
BPMS dan INTAN serta tenaga pengajar daripada
pihak MAMPU. Objektif bengkel ini adalah untuk
melaksanakan:
a) penilaian risiko terhadap aset ICT, personel
dan perkhidmatan ICT yang diterima; dan
b) merangka pelan tindakan pemulihan bagi
risiko yang telah dikenalpasti
Activity 1: Risk Assessment Workshop
The workshop was held on 20-24 February 2017
at the i-IMATEC Building in INTAN, Bukit Kiara
involving participants from BPMS and INTAN with
instructors from MAMPU. The objective of this
workshop was to implement:
a) Risk assessment of ICT assets, personnel and
ICT services that had been received; and
b) to draw up a recovery action plan for any
identified risks.