Yohanes Dewantara Marpaung, et al. “Integrating the NIST 800-30 Risk Management Framework With Penetration Testing: A Case Study of Web-Based Training Information Systems in a Cybersecurity Company”. Indonesian Journal of Information Systems, vol. 9, no. 1, Aug. 2026, pp. 90-106, doi:10.24002/ijis.v9i1.14877.