Yohanes Dewantara Marpaung et al. 2026. Integrating the NIST 800-30 Risk Management Framework with Penetration Testing: A Case Study of Web-Based Training Information Systems in a Cybersecurity Company. Indonesian Journal of Information Systems. 9, 1 (Aug. 2026), 90–106. DOI:https://doi.org/10.24002/ijis.v9i1.14877.