Pusat Pelaporan dan Analisis Transaksi Keuangan (PPATK) adalah lembaga pemerintahan Indonesia yang memiliki peran penting dalam melawan tindak pidana pencucian uang dan pendanaan terorisme. Keamanan data di PPATK sangat penting mengingat lebih dari 16 juta laporan transaksi keuangan dan kontribusi dari 37.228 pihak pelapor yang diterima dan perlu dikelola. Meskipun informasi khusus mengenai serangan di PPATK tidak tersedia, namun penting untuk menetapkan regulasi keamanan di lembaga tersebut. Badan Siber dan Sandi Negara (BSSN) telah menetapkan peraturan untuk memastikan keamanan informasi, termasuk Peraturan BSSN Nomor 4 tahun 2021 yang telah dipatuhi oleh PPATK. Penelitian ini dilakukan untuk menganalisis dan mengevaluasi tingkat kepatuhan PPATK terhadap regulasi tersebut dengan menggabungkan pendekatan kuantitatif dan kualitatif. Hasil penelitian menunjukkan tingkat kepatuhan tinggi sekitar 94.7% dengan evaluasi pada 12 fungsi keamanan informasi yang secara keseluruhan baik, namun beberapa fungsi memerlukan perbaikan. Metode penelitian menggunakan skala penilaian dari NIST CRS (Cyber Risk Scoring) dan USG (Urgency, Seriousness, Growth) dengan tujuan memberikan rekomendasi konstruktif untuk meningkatkan Sistem Manajemen Keamanan Informasi (SMKI) di PPATK.

---

The Financial Transaction Reports and Analysis Center (PPATK) is an Indonesian government institution that has an important role in fighting money laundering and terrorism financing. Data security at PPATK is very important considering that there are more than 16 million financial transaction reports and contributions from 37,228 reporters that need to be managed. Although specific information regarding the attack in PPATK is not available, it is important to establish security regulations at the institution. The National Cyber and Crypto Agency (BSSN) has made regulations to ensure information security remains safe, including BSSN Regulation Number 4 of 2021 which has been complied with by PPATK. This research was conducted to analyze and evaluate how well PPATK complies with these regulations, by combining quantitative and qualitative approaches. The research results show that information security systems in PPATK is running very well with a high level of around 94.7%, with an overall good evaluation of 12 information security functions, but there are several functions that require improvement. The research method uses assessment scales from NIST CRS (Cyber Risk Scoring) and USG (Urgency, Seriousness, Growth) with the aim of providing constructive recommendations for improving the Information Security Management System (SMKI) at PPATK.