Keamanan Data Berbasis Cloud: Evaluasi Konfigurasi Google Workspace for Education Plus di International School
DOI:
https://doi.org/10.52436/1.jpti.1454Kata Kunci:
CIS Benchmark, Google Workspace For Education, ISO/IEC 27001, Keamanan Data, Komputasi Awan, Log Keamanan, UU PDPAbstrak
Digitalisasi pendidikan mendorong lembaga internasional untuk mengadopsi layanan komputasi awan dalam pengelolaan data akademik, administrasi, dan komunikasi internal. Google Workspace for Education Plus menjadi salah satu platform yang banyak digunakan karena menyediakan kemudahan akses serta fitur kolaboratif yang terintegrasi. Penggunaan platform ini membawa kebutuhan evaluasi menyeluruh terhadap keamanan data, terutama pada institusi yang memproses informasi pribadi guru dan siswa. Penelitian ini bertujuan menilai efektivitas kontrol keamanan Google Workspace melalui analisis log keamanan yang diperoleh dari Google Admin Console pada periode 12 Oktober hingga 12 November 2025. Data utama mencakup autentikasi pengguna, penggunaan 2-Step Verification, aktivitas phishing, enkripsi pesan, kebijakan Data Loss Prevention (DLP), serta aktivitas berbagi file eksternal dan akses aplikasi pihak ketiga. Evaluasi dilakukan dengan membandingkan temuan lapangan terhadap CIS Google Workspace Benchmark v1.5.0, ISO/IEC 27001:2022, dan regulasi nasional Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. Hasil penelitian menunjukkan tingkat stabilitas yang tinggi pada proses autentikasi dan enkripsi data. Sistem mencatat 178 login gagal dan 14 percobaan login mencurigakan yang berhasil dihentikan. Lebih dari 33.000 pesan terenkripsi melalui TLS dan tidak ditemukan insiden DLP. Risiko signifikan muncul dari aktivitas berbagi file eksternal sebanyak 13.000 berkas serta keterhubungan dengan 85 aplikasi OAuth. Temuan tersebut menunjukkan perlunya penguatan kebijakan autentikasi, pengawasan aplikasi pihak ketiga, serta perluasan aturan pembatasan berbagi data. Penelitian ini memberikan gambaran empiris mengenai kesiapan keamanan cloud di sekolah internasional dan mendukung pengambilan kebijakan yang selaras dengan standar global dan regulasi nasional.
Unduhan
Referensi
H. S. Lallie, A. Thompson, E. Titis, and P. Stephens, “Understanding Cyber Threats Against the Universities, Colleges, and Schools,” Elsevier, pp. 1–27, Jul. 2023, doi: 10.3390/computers14020049.
I. A. Loebis, M. Mustofa, S. Arifin, M. Angglena, and Y. Salim, “The Role of Cloud Computing Technology in Supporting Educational Accessibility and Scalability,” Journal International of Lingua and Technology, vol. 3, no. 2, pp. 469–483, Aug. 2024, doi: 10.55849/jiltech.v3i2.682.
I. Sopwandin and A. Junaidi, “USING GOOGLE WORKSPACE FOR EDUCATION AS A FOUNDATION FOR DATA GOVERNANCE AND STUDENT SERVICES IN HIGHER EDUCATION,” Jurnal Kependidikan Islam, vol. 14, no. 02, 2024, doi: 10.24042/alidarah.v14i2.23893.
M. Sheikh, A. Bajpai, R. Raheja, and M. Tiwari, “Cloud Data Security: Addressing Risks and Advanced Mitigation Strategies for the Modern Era,” International Research Journal of Education and Technology Peer Reviewed Journal, vol. 07, no. 02, pp. 84–92, 2025.
H. El-Sofany, S. A. El-Seoud, O. H. Karam, B. Bouallegue, and A. M. Ahmed, “A proposed secure framework for protecting cloud-based educational systems from hacking,” Egyptian Informatics Journal, vol. 27, pp. 1–10, Sep. 2024, doi: 10.1016/j.eij.2024.100505.
A. Alakuu and D. K. Dake, “Cloud Computing in Education: A review of Architecture, Applications, and Integration Challenges,” Int. J. Comput. Appl., vol. 186, no. 66, pp. 49–65, 2025.
R. R. Turluev, D. A. Abdullayev, and S. A. Zyryanova, “Cloud Computing and Big Data Analytics in Education,” SHS Web of Conferences, vol. 172, pp. 1–4, 2023, doi: 10.1051/shsconf/202317201015.
M. A. Ayanwale, R. R. Molefi, and S. Liapeng, “Unlocking educational frontiers: Exploring higher educators’ adoption of google workspace technology tools for teaching and assessment in Lesotho dynamic landscape,” Heliyon, vol. 10, no. 9, pp. 1–19, May 2024, doi: 10.1016/j.heliyon.2024.e30049.
X. Dong and Y. Xie, “Research on cloud computing network security mechanism and optimization in university education management informatization based on OpenFlow,” Systems and Soft Computing, vol. 7, pp. 1–10, Dec. 2025, doi: 10.1016/j.sasc.2025.200225.
National Institute of Standards and Technology, “Digital Identity Guidelines,” 2023.
“ISO/IEC 27001:2022 Information Security Management Systems,” 2022, Geneva, Switzerland.
Google Cloud, “Google Workspace Security Whitepaper,” 2024.
V. Malele, “Cybersecurity Cloud-Based Online Learning: A Literature Review Approach,” Journal of Information Systems and Informatics, vol. 5, no. 4, pp. 1623–1632, Dec. 2023, doi: 10.51519/journalisi.v5i4.583.
European Union Agency for Cybersecurity, “Cybersecurity Challenges in the Education Sector,” 2023, Athens, Greece.
A. Behl and S. Behl, “Managing Third-Party Risk in Cloud-Based Collaboration Platforms,” Comput. Secur., vol. 131, 2025.
S. Pearson, “Data Governance and Cloud Security in Educational Institutions,” Journal of Cloud Computing, vol. 12, no. 1, pp. 1–14, 2024.
