Integrated Risk Mitigation Program Dashboard

11 Threats mapped with COBIT 2019, ZTA Tenets, and ISO 27002 Controls

BACHELOR'S THESIS

DESIGN OF A CYBER SECURITY RISK MANAGEMENT MODEL BASED ON COBIT 2019 AND ZERO TRUST ARCHITECTURE FOR RISK MITIGATION IN THE AEROSPACE INDUSTRY: A CASE STUDY OF DETERECO

By:

STEFANUS JESANO PRAMATHANA

1202223026

BACHELOR’S PROGRAM IN INFORMATION SYSTEMS

FACULTY OF INDUSTRIAL ENGINEERING

TELKOM UNIVERSITY

2026

Stefanus Jesano Pramathana

Author

Position: Fresh Graduate Field Focus: IT Risk Management Bachelor's Thesis Completed: July 10, 2026 Available in 10 Languages

Phone Number (+62) 823-8571-7896

Email Address jesano.pramathana@gmail.com

LinkedIn Profile /in/jesanopramathana

Total Threats 0

Moderate Risk 0

Low-Moderate 0

Low Risk 0

Risk Level Distribution

Threats by The 5-Layer Zero Trust Defense Model

Priority	ID Risk	Threat Type	Layer	Risk Level	Practice Governance (COBIT 2019)	ZTA Tenet (NIST SP 800-207)	ISO Controls (ISO 27002)

Sankey Diagram

Perbandingan Sebelum vs Sesudah Mitigasi

Sebelum Mitigasi

Total ancaman dari seluruh lapisan arsitektur.

Sesudah Mitigasi

Sisa ancaman setelah Zero Trust diterapkan.

🎯 Conclusion

Key Points

Risk Profile & Threat Identification

The risk profile was successfully compiled into a Priority Risk List, identifying 11 contemporary threats based on qualitative studies and structured interviews that were verified by internal employees in accordance with DetereCo's operational conditions. There are 3 threats with a Moderate risk level that are the highest priority (T.10, T.11, T.09), followed by 3 threats with Low to Moderate risk (T.04, T.07, T.02), and finally 5 threats classified as Low risk (T.01, T.03, T.05, T.06, T.08).

Universal Risk Modification under ZTA

Although there are 8 threats whose risk levels align with the organization's risk appetite, because the Zero Trust Architecture principle assumes that every threat will be exploited by an attacker and existing control mechanisms have not been implemented in accordance with the 7 Tenets of NIST SP 800-207, the entire Priority Risk List, containing 11 threat risk, falls under the "Risk Modification" response option. This is done to design a Risk Mitigation Program (RMP) based on the principles of Zero Trust Architecture.

Governance & Oversight Deficiencies

The results of the capability level assessment highlight deficiencies in the domain of executive strategic oversight (EDM03.01, EDM03.02, and EDM03.03) stemming from the lack of training programs and the absence of active, substantive oversight by stakeholders. Weaknesses in managerial operational execution in the field (APO12.01, APO12.02, APO12.03, APO12.04, and APO12.06), which collectively constitute the root cause of the company's exposed technical vulnerabilities.

ISO 27005 & COBIT 2019 Integration

The Integrated Risk Mitigation Program was successfully designed by adopting the ISO/IEC 27005 process flow (from context establishment and risk assessment to risk treatment). The 11 priority risks were then precisely mapped to governance practice weaknesses in the COBIT 2019 domains EDM03 and APO12. This mapping demonstrates that the root cause of each technical vulnerability can be directly traced to specific deficiencies in governance management practices that are not yet optimal.

ZTA Tenets & ISO 27002 Translation

Risk treatment recommendations were successfully designed by mapping the root causes of governance issues to the 7 fundamental principles (Tenets) of Zero Trust Architecture. To make them practical, these ZTA principles were translated into technical security controls from ISO/IEC 27002:2022 (such as control 8.12 Data Leakage Prevention, 8.22 Segregation of Networks, 8.5 Secure Authentication, etc.). These recommendations are classified using the 5-Layer Zero Trust Defense Model to mitigate modern threats in a structured manner.

Empirical Validation & Consensus

The Final Integrated Risk Mitigation Program has been enhanced through empirical validation by 9 industry experts and academics, proving the relevance of the artifacts to the final results: 7 out of 11 threats were rated "Highly Relevant" and 4 out of 11 threats were rated "Relevant," and a unanimous consensus (100%) was reached during the Participant Validation phase. This can serve as a blueprint for cybersecurity that precisely aligns strategic risk management gaps with the execution of tactical security controls based on the Zero Trust Architecture principle in the aerospace industry.

💡 Recommendation

Strategic Next Steps

Dynamic HR-IT Integration

Integrate the reporting system for changes in employee status (transfers, retirement, resignation) from the Human Capital (HC) division with the Information Technology (IT) management system. This is to automate the revocation of system access rights in real time (dynamic policy) in order to eliminate reliance on slow and high-risk manual bureaucratic processes.

Institutional MFA Transition

Simulate a phased transition to the use of MFA at the institutional level; if well-received, this can become a mandatory policy issued through a formal instrument (SKEP or Decree).

Mandatory Root Cause Analysis

Formalize the root cause analysis process as a mandatory post-incident procedure by ensuring that the board of directors and senior management are actively involved in periodic risk oversight. Currently, APO12.06 Level 5 is rated zero because root causes are not escalated to the highest decision-makers.

Stricter Intranet Governance

Establish a formal policy regarding stricter restrictions on the use of the Intranet. This aims to protect the company's IP reputation from damage.

Cybersecurity Workforce Training

Invest in cybersecurity workforce competency training through tiered training programs and specialized IT risk management certifications. This is crucial to reduce the risk of future information leaks, as internal employees will have a high level of awareness regarding implicit trust.

DLP & DRM Procurement Priority

The procurement of DLP (Data Leak Prevention) and DRM (Digital Rights Management) systems should be treated as a budget priority that cannot be postponed, as they are one way to replace the bureaucracy of physical paper forms.

Family

Primary Dedication

Immediate & Extended Family

Dedicated with deep gratitude to the author’s immediate and extended family. The prayers that have always accompanied me, the moral guidance, and the boundless support have been the essential foundation that has enabled me to keep moving forward and complete this series of final thesis research projects to their fullest extent.

Advisors

First Advisor

Ibu Widyatasya Agustika Nurtrisha, S.Kom., M.T.

Thank you for your meticulous direction, patient guidance, and full dedication in mentoring the author from the beginning to the end of this final project. Every piece of advice provided has been an invaluable guiding light.

Academic Advisor

Second Advisor

Bapak Dhata Praditya, S.T., M.T., Ph.D.

Thank you for your deep academic insights, encouragement to always think critically, and highly helpful technical guidance in strengthening the methodology and analytical framework of this final project.

Technical Advisor

Research Partners

Resource Persons & Data Partners

DetereCo

Thank you to the entire management and IT division at DetereCo who, with full openness and trust, were willing to be the primary resource persons in this final project. The contribution of data and time provided has become an invaluable empirical foundation for this research.

Structured Interview

Expert Judgment

Focus Group Discussion

Participant Validation

Supporting Documents

Colleagues

Bachelor's Thesis Partner

Miftahul Falah

Thank you to Miftahul Falah for being an exceptional colleague throughout this final project. Your commitment to supporting one another amid various technical challenges, along with your consistent spirit of collaboration, has facilitated the smooth progress of this research and made it a truly valuable academic experience.

Fellow Colleague

Related Publications

Extending the Bachelor Thesis into International IEEE Xplore Publications

The Integrated Risk Mitigation Program based on Zero Trust Architecture (ZTA), developed in this Bachelor's Thesis, has undergone a peer-review process and been accepted for publication at two international conferences. These two research outputs detail the specific application of the main framework within critical operational domains and will be indexed in the IEEE Xplore Digital Library database.

Designing an Integrated Cyber Risk Mitigation Based on Zero Trust Architecture: A Conceptual Framework for the Aerospace Industry

ACCEPTED

Conference ICADEIS 2026 (The 2026 International Conference on Advancement in Data Science, E-learning, and Information Systems)

Research Focus This paper focuses on bridging the gap between strategic IT governance and technical execution by designing a 5-layer Zero Trust framework specifically to protect critical ERP systems and Access Rights from Privilege Escalation in converged IT/OT aerospace environments.

Relation to Bachelor's Thesis This paper is a direct extraction of the core foundation established in my Bachelor's Thesis. While the thesis comprehensively covers the entire security mitigation program up to the expert validation stage, this paper specifically highlights the conceptual design phase. It introduces the "5-Layer Zero Trust Defense Model" as a targeted solution to combat specific threats, such as illegal privilege escalation, within Enterprise Resource Planning (ERP) systems in the aerospace industry.

Standards Applied COBIT 2019
NIST SP 800-207
ISO/IEC 27002:2022

A Zero Trust Security Architecture for IoT and Cloud: Conceptualizing a Risk Mitigation Program for Digital Twins in the Aerospace Industry

ACCEPTED

Conference ICISS 2026 (The 13th International Conference on ICT for Smart Societies)

Research Focus This paper focuses on adapting the Zero Trust framework for machine-to-machine (M2M) interactions to secure the data flow between physical IoT Edge Gateways and Cloud Digital Twins against False Data Injection (FDI) attacks.

Relation to Bachelor's Thesis This paper serves as a technical extension of the framework developed in the Bachelor's Thesis. While the thesis focuses on broader enterprise security, this paper specifically applies the "5-Layer Zero Trust Defense Model" to protect automated machine-to-machine (M2M) communications within IoT and Cloud (Digital Twins) ecosystems. Validated through STRIDE Analysis, the paper proves that the security framework is highly adaptable; it is not only robust in securing human access but also analytically proven to prevent False Data Injection (FDI) threats on physical factory sensors.

Standards Applied COBIT 2019
NIST SP 800-207
ISO/IEC 27002:2022

Universitas Telkom - 2026