Information Security Maturity Level Research Articles

The Measuring the success of the implementation of an information and communication technology (ICT)-based management system using the Technology Acceptance Model (TAM) and the Information Security Index (KAMI) at SMK TELKOM Lampung.

The utilization of information and communication technology (ICT) in education, particularly through the implementation of ICT-based management systems in schools, has great potential to improve the quality of learning and school management. However, the success of this system's implementation is also influenced by factors such as ease of use, perceived benefits, and information security levels. This study aimed to measure the success level of the implementation of ICT-based management systems at SMK Telkom Lampung, specifically the My Learning System (MyLMS) learning platform and the Igracias school application. The study employs the Technology Acceptance Model (TAM) to measure user acceptance of the system and the Information Security Index (KAMI) to assess the maturity level of information security. The method was a survey with a quantitative approach, with a sample of 180 respondents, consisting of students, teachers, and administrative staff who actively use the system. The results show that ease of use (average score 10.74) and perceived benefits (average score 13.91) of the system positively affect user acceptance (average score 13.30), which ultimately enhances the perceived quality of the system (average score 143.67). However, the evaluation using the KAMI Index reveals that SMK Telkom Lampung needs to improve its information security management. The total score is 403 out of 645, indicating that SMK Telkom Lampung is at the "Needs Improvement" level. These results indicate that while the ICT-based management system has been well received by users, the aspect of information security still requires improvement to ensure optimal data and information protection

EVALUASI KEAMANAN INFORMASI PADA SMAN 1 XYZ MENGGUNAKAN INDEKS KAMI VERSI 4.2


 The importance of the process of evaluating information system security for a company, organization, or government agency whose goal is to carry out early detection of information leaks and even disruption of information systems. In this research conducted at SMAN 1 XYZ. The research being conducted was to determine the level of readiness and governance of information security based on ISO/IEC 27001:2013 standardization by using tools, namely the KAMI Information Security Index Version 4.2. In this research the method used to carry out the data collection process is to make direct observations on the objects used as research and questions and answers with the IT department that handles related information systems. Based on the research conducted, it was found that the maturity level of information security is that at the level of need for electronic devices, a score of 20 points is in line with the high KAMI index and is still Level I to Level II. Even though the result of the readiness assessment has a value of 245, this is a safety level of 1 which applies to SMAN 1 XYZ. To achieve a qualification level in accordance with the ISO/IEC 27001: 2013 standard, SMAN 1 XYZ must improve information security internally and externally, in this case external parties, and carry out security assessments on an ongoing and continuous basis.

Analisis Keamanan Informasi Menggunakan Tools Indeks Kami ISO 4.1

Information is a very valuable asset for a university institution. Utilization of information technology offers various conveniences in obtaining the information needed. Good information management can make universities have good managerial skills. protecting information security means that it also requires efforts to pay attention to the security factors of all supporting assets such as networks, as well as other facilities that are directly or indirectly related to the process of organizing information. Bina Darma University is an institution that is engaged in the field of education and science, which has a vision that is to become an International Standard University Based on Information Technology By 2025, to realize this there are several efforts prepared, one of which is to improve information security by implementing the ISO 27001 certification process. :2013. So in the context of Bina Darma University will implement ISO 27001: 2013. Using the method of Applied Research (applied research) the author took the initiative to conduct research with the title ANALYSIS OF INFORMATION SECURITY USING OUR INDEX TOOLS 4.1 So as to produce Knowing the maturity level of information security with a status of Inappropriate, Needs improvement , Enough and Good at Bina Darma University.

KAMI index as an evaluation of academic information system security at XYZ university

XYZ University is one of the universities that has used information technology to create quality service for students and the entire academic community. This Information technology service is managed by Information Technology and Communication Center (PUSTIK) which is responsible to carry out the development, management, service, and maintaining the security of information and communication technology. Good information technology governance should be able to maintain information security. Therefore, it is necessary to evaluate information system security especially the security of academic information systems. This information system security evaluation uses Keamanan Informasi (KAMI) Index which refers to the ISO/IEC 27001:2013 standard to be able to determine the maturity level of information security. An evaluation of five areas of the KAMI Index shows the Information Security Risk Management area gets the lowest score at 10 out of a total of 72. The result of the KAMI Index dashboard shows that the maturity level of each area of information security is at levels I and I+ with a total score of 166. This means that the level of completeness of implement ISO 27001:2013 standard is in the inadequate category.

Evaluasi Internal Keamanan Informasi pada Dinas Komunikasi dan Informatika Kota Palembang

This article aims to provide an overview of the conditions of readiness (completeness and maturity) of information security at Diskominfo Palembang which is carried out internally. The research instrument used was a questionnaire taken from the guidelines of Indeks KAMI version 3.1. The research method used in this article is descriptive quantitative. The answers for each area are collected, then with the calculations that have been available in the guidelines of Indeks KAMI version 3.1, the results will be obtained from the completeness of the work program that has been carried out and the maturity level of information security at Diskominfo Palembang. The assessment result of the completeness of the information security work program is 338, based on the provisions of Indeks KAMI, so this means that the readiness status of Diskominfo Palembang still needs improvement. Meanwhile, the assessment of the maturity level of information security at Diskominfo Palembang is at level I-II. This means that the maturity level of information security is still in its initial condition and is implementing an information security framework in the activities of using information technology.

English

English

ANALISIS TINGKAT KESIAPAN PENGAMANAN SISTEM INFORMASI

The University has a number of data relating to Academic and Higher Education Governance. The large amount of data that requires security, especially in terms of readiness to secure information systems. Maintaining information system security in the university environment aims to maintain confidentiality, fulfill the availability of the system for those who have authority for those who use it and the integrity of the system. The University of National Development "Veteran" Jakarta has work units such as the Faculty, UPT and Bureau where each has the task and function to manage data. The problem is the need to measure the level of information system security to see the maturity of an information system at UPN Veteran Jakarta. OUR Index stands for Information Security Index which is used as a tool to analyze and measure and evaluate the maturity level of information security with the application of SNI ISO / IEC 27001: 2009 standards that can be applied within government agencies. As for the KAMi index version used, namely version 3.1. The method used to solve the problems in OUR index is through six stages, namely the first stage of electronic systems, both information security governance, third information security risk management, the four information security management frameworks, the five asset information management and the six information security technologies. The results obtained after taking measurements using the US Index need improvement in system security in managing information security risks and governance.

An analysis on the dimensions of information security culture concept: A review

The cultivation of positive Information Security Culture (ISC) is an effective way to promote security behavior and practices among employees in the organization. However, there is yet a consensus on a standard set of dimensions for the ISC concept. ISC has been associated with many facets, with some overlapping dimensions found in the literature. There is little explanation, if any, as to why this happens or to what extent do variances of dimensions affects ISC concept and findings. This paper presents an analysis of the different dimensions in conceptualizing the ISC. Eight major databases including Web of Science, Scopus and Google Scholar were systematically exhausted using PRISMA and a total of 79 studies from 2000 to 2017 was selected for analysis. While different approaches such as adopted theories affect the dimensions of ISC, our analysis also covered other contributing factors such as the objective of the study, type of organization under study and the information security maturity level. In addition, we found no evidence of a set of widely accepted concepts and dimensions for ISC. This review provides substantial evidence on the numerous dimensions used in ISC and could be utilized by academicians as a reference in ISC-related studies.

Leadership by Example in e-Government Security Management System

e-Government is getting advance in targeting efficient services to citizens, hence, information security becomes an important asset to the national entities. Information security maturity level by Von Solms is theoretically has improved from technical to governance wave. However, a problem exists when theory does not align with the current practice because practically, the employees‟ mind-set is still in technical wave and organisations‟ strategy partially involve governance wave especially a leadership context. These can also be found by a previous contribution made by Zakaria studies, he describes a leadership stays under the manager‟s responsibilities. His study is a continuation of a Schein‟s organisation culture. Schein defines culture with three layers of values, observable and assumption, in additions Zakaria has improvised into security culture becomes security value, observable and assumption. However, manager‟s responsibilities stay under management wave; meanwhile, governance wave involves top management. Thus, the composition explores a „leadership-by-example‟ in eGovernment security management system in order to come out with a model of key-factors to line up with governance wave. In order to develop a „leadership-by-example‟ concept in the e-Government management system, the authors guide the study with four objectives and are achieved in different sections. The authors concluded an empirical study by critically reviewing previous literatures that are achieved in section 2, and followed by evaluation of leaders‟ strategy on information security development and its implementation and distribution to employees which described in section 4. Findings from the study show an inappropriate strategy of leadership concept in the organisations creates lack of motivation to employees which can be a cause of incidents by insiders. Inappropriate strategy of leadership concept is due to incompatible security leadership and unorganised security structure. Therefore, the study contributes a model of keyfactors contains of 3Ps includes „People‟, „Process‟ and „Product‟ to guide on the concept of „leadership-by-example‟ in managing information security management system systematically. General Terms Information Security Management System, People & Security and Leadership-by-Example.

A Maturity Level Framework for Measurement of Information Security Performance

is one of the most important assets of the company. With the development of information technology is very rapid, the possibility of ever increasing information security disorder. This research was conducted to find out the level of information security in organization to give recommendations improvements in information security management at the company. This research uses the ISO 27001 by involving the entire clause that exists in ISO 27001 checklist. The source of the data used in this study was a detailed questionnaire and interview. The respondents in this study are all the employees are in the Office of the Bureau of information technology as many as 14 peoples. The results showed maturity level of information security in the Office of the Bureau of information technology is at level 2. The value of the gap between the value of the maturity level of the current and expected level of maturity value is 2.79. Recommendations for improvement are given requires an understanding of the company and also required coordination with the internal company.

Pengukuran dan Evaluasi Keamanan Informasi Menggunakan Indeks KAMI - SNI ISO/IEC 27001:2009

Information is a valuable asset for the college. The need for safeguards against information becomes very necessary thing for a college. One standard that can be used to measure the maturity level of information security in an organization is the KAMI index developed by Depkominfo standards refer to ISO standard ISO / IEC 27001: 2009. This assessment is used to see how far the maturity level of information security in the college environment, which results can be used as a medium for evaluation in order to improve the information security of the college in the future.
 Index Terms - Assessment, Information security, KAMI Index, Maturity Level, College X

Study on Financial-sector Information Security Level Assessment and Improvement Anticipation Model

Infringement threats to the financial sector have become more sophisticated and intelligent. In order to more effectively respond to such threats, the financial sector faces the need to perform the assessment of information security maturity level on a voluntary basis in order to better understand organizational information security situation and improve own vulnerabilities to reinforce information security. The study, in reflection of financial industrial environmental characteristics, builds a comprehensive and systematic information security assessment indices specialized in the financial sector while presenting an information security maturity level assessment model based on the indices as well as an information security improvement anticipation model through vulnerability remedy. The quantification of vulnerability levels of the control item suggested herein and the improvement anticipation model based on vulnerability correction, in particular, supports an organization under the assessment to address its vulnerabilities to effectively enhance organizational information security. In the absence of such an information security assessment model, the financial sector has poorly performed in assessing own information security activities. With the models suggested herein being in place, the sector is expected to make an active use of it to facilitate information security assessment and improve the general information security maturity level of individual financial institutions and the financial industry as a whole

조직성과에 미치는 영향요인에 관한 연구: 정보보호 성숙도의 매개효과를 중심으로

조직성과에 미치는 영향요인에 관한 연구: 정보보호 성숙도의 매개효과를 중심으로

Information security landscape and maturity level: Case study of Malaysian Public Service (MPS) organizations

Abstract Information protection is of paramount importance in today's world. From information involving the highest level of government administration and national security, to information existing at the level of the private company in the form of trade secrets or personal data, all are under the constant threat of being compromised. In this study, the researchers attempt to evaluate the information security maturity level and provide clear thoughtful analysis of the information security landscapes of the Malaysian Public Service (MPS) organizations. This study uses convenience sampling and the required data collected from 970 targeted individuals through a self-administrated survey. In addition, a survey questionnaire is utilized to gauge the security landscape and to further understand the occurrence of incidents, the sources of attack, and the types of technical safeguard. Findings revealed that the highest security incidents experienced by the MPS were spamming (42%), followed by attacks of malicious codes (41%). Twenty-five percent of incidents originated from within the organizations, 15% originated from outside, and 11% were from a mixture of internal and external sources. Also, it shows that 49% of incidents were from sources unknown to the respondents. The top most deployed safeguards by the MPS were found to be firewalls (95%), followed by anti-virus software (92%), and access control to information system (89%). Findings on the maturity level show that 61% of respondents are at Level 3, followed by 21% at Level 2 where the information security processes are still considered an Information and Communication Technology (ICT) domain. At the higher end of the continuum lies 13% for Level 4 and 1% at Level 5.