Yohanes Dewantara Marpaung (2026) “Integrating the NIST 800-30 Risk Management Framework with Penetration Testing: A Case Study of Web-Based Training Information Systems in a Cybersecurity Company”, Indonesian Journal of Information Systems, 9(1), pp. 90–106. doi: 10.24002/ijis.v9i1.14877.