The Smartbangkom system is a strategic system developed by the National Institute of Public Administration (LAN) to support the mandate of developing the competence of the State Civil Apparatus (ASN) in accordance with LAN Regulation Number 10 of 2018. As part of e-government implementation, Smartbangkom functions as a standardized training management center for training institutions in Indonesia, both at the ministry, agency and local government levels. Given its crucial role, this system requires a comprehensive information security plan to protect operations and maintain service quality. However, the current security management of the Smartbangkom system is still inadequate, reflected in the occurrence of security incidents such as ransomware and sensitive data leaks. Therefore, this research aims to design information security risk management for the Smartbangkom system through risk identification, risk level assessment, and risk control recommendations. ISO 27005:2022 is used as the main framework, which is integrated with NIST SP 800-30 Rev. 1 for risk assessment and NIST SP 800-53 Rev. 5 for risk handling recommendations. The result of this research is an information security risk management document that aims to strengthen the security of the Smartbangkom system and support the sustainability of LAN's strategic services in managing ASN training nationally.