AUDIT KEAMANAN SISTEM INFORMASIPERPUSTAKAAN KOTA YOGYAKARTA BERDASARKANSTANDAR ISO 27001

Given the importance of information security, the policy on information security must be good and should include several procedures such as procedures of security policies, procedures of asset management, procedures of physical and environmental security, procedures of communications management and operations, procedures of access control, procedures of aquisition, development and maintenance of information systems, as well as procedures of incident management of information security. To get the security of a good information system services, it is necessary to Audit the Information Systems to ensure information security that is applied is in accordance with procedures. ISO / IEC 27001 is a standard document for Information Security Management System (ISMS) is generally discussed about what should be done in an attempt to implement the concept - the concept of information security at the Library of Yogyakarta City on the security aspects of information systems based on standard ISO 27001 by measuring the security of information systems and auditing by ISMS based. This research has resulted in findings of Yogyakarta City Library Information System at the level of security with a maturity scale of 2.6 (Defined Process). This shows that the management of Information System Security has been documented and communicated as well as the activity is running according to procedure referring to the Operational Standard Library (OSL). After measuring the security of information systems and audit the security of Yogyakarta City Library Information System is expected to provide solutions to the security of information systems applied in Yogyakarta City Library.