SISTEM MANAJEMEN KECERDASAN BUATAN (AIMS): Pemahaman dan Penerapan ISO/IEC 42001:2023 dalam Keamanan Informasi, Keamanan Siber, dan Perlindungan Data Pribadi

Biggio, B., & Roli, F. (2018). Wild patterns: Ten years after the rise of adversarial machine learning. Pattern Recognition, 84, 317–331. https://doi.org/10.1016/j.patcog.2018.07.023

Carlini, N., Tramèr, F., Wallace, E., Jagielski, M., Herbert-Voss, A., Lee, K., Roberts, A., Brown, T., Song, D., Erlingsson, Ú., Oprea, A., & Raffel, C. (2021). Extracting training data from large language models. In Proceedings of the 30th USENIX Security Symposium (pp. 2633–2650). USENIX Association.

Cavoukian, A. (2009). Privacy by design: The 7 foundational principles. Information and Privacy Commissioner of Ontario.

European Parliament & Council of the European Union. (2024). Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial intelligence Act). Official Journal of the European Union, L series.

European Union Agency for Cybersecurity. (2023). Multilayer framework for good cybersecurity practices for AI. ENISA.

Gebru, T., Morgenstern, J., Vecchione, B., Vaughan, J. W., Wallach, H., Daumé III, H., & Crawford, K. (2021). Datasheets for datasets. Communications of the ACM, 64(12), 86–92. https://doi.org/10.1145/3458723

Goodfellow, I. J., Shlens, J., & Szegedy, C. (2015). Explaining and harnessing adversarial examples. In 3rd International Conference on Learning Representations (ICLR 2015). arXiv:1412.6572.

Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., & Fritz, M. (2023). Not what you've signed up for: Compromising real-world LLM-integrated applications with indirect prompt injection. In Proceedings of the 16th ACM Workshop on Artificial intelligence and Security (pp. 79–90). ACM. https://doi.org/10.1145/3605764.3623985

IBM. (2024). Cost of a data breach report 2024. IBM Corporation.

International Organization for Standardization & International Electrotechnical Commission. (2015). ISO/IEC 17021-1:2015 Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 1: Requirements. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2020). ISO/IEC TR 24028:2020 Information technology — Artificial intelligence — Overview of trustworthiness in artificial intelligence. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2021). ISO/IEC TR 24027:2021 Information technology — Artificial intelligence (AI) — Bias in AI systems and AI aided decision making. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2022a). ISO/IEC 22989:2022 Information technology — Artificial intelligence — Artificial intelligence concepts and terminology. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2022b). ISO/IEC 23053:2022 Framework for artificial intelligence (AI) systems using machine learning (ML). ISO.

International Organization for Standardization & International Electrotechnical Commission. (2022c). ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2022d). ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2022e). ISO/IEC 27005:2022 Information security, cybersecurity and privacy protection — Guidance on managing information security risks. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2022f). ISO/IEC 38507:2022 Information technology — Governance of IT — Governance implications of the use of artificial intelligence by organizations. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2023a). ISO/IEC 23894:2023 Information technology — Artificial intelligence — Guidance on risk management. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2023b). ISO/IEC 29134:2023 Information technology — Security techniques — Guidelines for privacy impact assessment. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2023c). ISO/IEC 42001:2023 Information technology — Artificial intelligence — Management system. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2023d). ISO/IEC 5338:2023 Information technology — Artificial intelligence — AI system life cycle processes. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2024). ISO/IEC 5259-1:2024 Artificial intelligence — Data quality for analytics and machine learning (ML) — Part 1: Overview, terminology, and examples. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2025a). ISO/IEC 27701:2025 Information security, cybersecurity and privacy protection — Privacy information management systems — Requirements and guidance. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2025b). ISO/IEC 42005:2025 Information technology — Artificial intelligence (AI) — AI system impact assessment. ISO.

International Organization for Standardization & International Electrotechnical Commission. (2025c). ISO/IEC 42006:2025 Information technology — Artificial intelligence — Requirements for bodies providing audit and certification of artificial intelligence management systems. ISO.

International Organization for Standardization. (2018a). ISO 19011:2018 Guidelines for auditing management systems. ISO.

International Organization for Standardization. (2018b). ISO 31000:2018 Risk management — Guidelines. ISO.

Ji, Z., Lee, N., Frieske, R., Yu, T., Su, D., Xu, Y., Ishii, E., Bang, Y. J., Madotto, A., & Fung, P. (2023). Survey of hallucination in natural language generation. ACM Computing Surveys, 55(12), 1–38. https://doi.org/10.1145/3571730

Kementerian Komunikasi dan Informatika Republik Indonesia. (2023). Surat Edaran Menteri Komunikasi dan Informatika Nomor 9 Tahun 2023 tentang Etika Kecerdasan Artifisial. Kemenkominfo.

Lewis, P., Perez, E., Piktus, A., Petroni, F., Karpukhin, V., Goyal, N., Küttler, H., Lewis, M., Yih, W., Rocktäschel, T., Riedel, S., & Kiela, D. (2020). Retrieval-augmented generation for knowledge-intensive NLP tasks. Advances in Neural Information Processing Systems, 33, 9459–9474.

Lundberg, S. M., & Lee, S.-I. (2017). A unified approach to interpreting model predictions. Advances in Neural Information Processing Systems, 30, 4765–4774.

Mehrabi, N., Morstatter, F., Saxena, N., Lerman, K., & Galstyan, A. (2021). A survey on bias and fairness in machine learning. ACM Computing Surveys, 54(6), 1–35. https://doi.org/10.1145/3457607

Mitchell, M., Wu, S., Zaldivar, A., Barnes, P., Vasserman, L., Hutchinson, B., Spitzer, E., Raji, I. D., & Gebru, T. (2019). Model cards for model reporting. In Proceedings of the Conference on Fairness, Accountability, and Transparency (pp. 220–229). ACM. https://doi.org/10.1145/3287560.3287596

MITRE Corporation. (t.t.). MITRE ATLAS: Adversarial threat landscape for artificial-intelligence systems. https://atlas.mitre.org

National Institute of Standards and Technology. (2023). Artificial intelligence risk management framework (AI RMF 1.0) (NIST AI 100-1). U.S. Department of Commerce. https://doi.org/10.6028/NIST.AI.100-1

National Institute of Standards and Technology. (2024). Artificial intelligence risk management framework: Generative artificial intelligence profile (NIST AI 600-1). U.S. Department of Commerce. https://doi.org/10.6028/NIST.AI.600-1

Organisation for Economic Co-operation and Development. (2024). Recommendation of the Council on Artificial intelligence (OECD/LEGAL/0449). OECD.

Otoritas Jasa Keuangan. (2023). Panduan kode etik kecerdasan artifisial (AI) yang bertanggung jawab dan terpercaya di industri teknologi finansial. OJK.

OWASP Foundation. (2024). OWASP top 10 for LLM applications 2025. OWASP GenAI Security Project.

Parasuraman, R., & Manzey, D. H. (2010). Complacency and bias in human use of automation: An attentional integration. Human Factors, 52(3), 381–410. https://doi.org/10.1177/0018720810376055

Raji, I. D., Smart, A., White, R. N., Mitchell, M., Gebru, T., Hutchinson, B., Smith-Loud, J., Theron, D., & Barnes, P. (2020). Closing the AI accountability gap: Defining an end-to-end framework for internal algorithmic auditing. In Proceedings of the 2020 Conference on Fairness, Accountability, and Transparency (pp. 33–44). ACM. https://doi.org/10.1145/3351095.3372873

Republik Indonesia. (2019). Peraturan Pemerintah Nomor 71 Tahun 2019 tentang Penyelenggaraan Sistem dan Transaksi Elektronik. Lembaran Negara Republik Indonesia Tahun 2019 Nomor 185.

Republik Indonesia. (2022). Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. Lembaran Negara Republik Indonesia Tahun 2022 Nomor 196.

Ribeiro, M. T., Singh, S., & Guestrin, C. (2016). "Why should I trust you?": Explaining the predictions of any classifier. In Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (pp. 1135–1144). ACM. https://doi.org/10.1145/2939672.2939778

Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017). Membership inference attacks against machine learning models. In 2017 IEEE Symposium on Security and Privacy (pp. 3–18). IEEE. https://doi.org/10.1109/SP.2017.41

Tramèr, F., Zhang, F., Juels, A., Reiter, M. K., & Ristenpart, T. (2016). Stealing machine learning models via prediction APIs. In Proceedings of the 25th USENIX Security Symposium (pp. 601–618). USENIX Association.

UNESCO. (2021). Recommendation on the ethics of artificial intelligence. United Nations Educational, Scientific and Cultural Organization.

Vassilev, A., Oprea, A., Fordyce, A., & Anderson, H. (2024). Adversarial machine learning: A taxonomy and terminology of attacks and mitigations (NIST AI 100-2 E2023). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.AI.100-2e2023

Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, Ł., & Polosukhin, I. (2017). Attention is all you need. Advances in Neural Information Processing Systems, 30, 5998–6008.