Infrastructure is an important thing in an organization/company that is used to support activities carried out within the organization. Infrastructure that includes STMIK Rosma, including hardware, software, data, and information, and human resources that support information systems. Hardware resources include PCs that are used for clients with application program software. Windows 10 professional 32 and 64 bit as the operating system. While the software on the server uses Linux OS and PHP programming language. Data and information include infrastructure data, device data, server data and data on staff, students and lecturers at STMIK Rosma. So the need for the sustainability of this system is increasingly important. Problems that have existed in the STMIK Rosma infrastructure, such as those related to information security vulnerabilities. If this problem cannot be fixed in a sustainable manner, it will have an impact or risk on the sustainability of this infrastructure, especially the academic community. This study uses NIST SP 800-30 as the method used to solve these problems.
Keywords: Information Security, NIST SP 800-30, Infrastructure, Risk Assessment

The use of information, media and communication technology has changed both the behavior of society and human civilization globally. The development of hospitals in Karawang is increasingly mushrooming, as well as the increasing number of degenerative diseases such as hypertension and diabetes, the increasing prevalence of chronic kidney disease. So it requires the handling of renal replacement therapy (Renal Replacement Therapy) because it is increasingly needed for cases of acute and chronic renal failure. The purpose of this research is to build an integrated and controlled information system that can simplify the patient administration process and reduce the effectiveness of the patient's time for dialysis. The methodology that the authors use in this study includes methods of identification and system design. System identification includes identification of the organization, running systems, and problem identification. The problems faced at this time in the Hemodialysis Installation. Patient data is not the same between patients who are served by hemodialysis (dialysis) and those in the application report, the transaction value for using tools and materials is sometimes empty or there is no transaction value in the application, it will cause losses to the customer. hospital. It is hoped that this system can eliminate the problems that have been happening so far.