Evaluasi Kesiapan Keamanan Informasi Dinas Sosial
Main Article Content
Abstract
Information security is essential for ensuring service continuity and data protection within Electronic System Providers (ESPs). This study evaluates the information security readiness of Dinas Sosial GHI using the KAMI Index Version 5.0 based on SNI ISO/IEC 27001:2022. A descriptive-evaluative method was applied through interviews and document observations. The assessment covered governance, risk management, security framework, asset management, information security technology, personal data protection, and third-party involvement. The results show that the Electronic System Category obtained a score of 21, classified as High, while the overall information security completeness score was 170, categorized as Not Feasible, with a maturity level of I–I+. The respective scores were governance 18, risk management 4, security framework 37, asset management 52, technology 24, and personal data protection 35. Third-party security achieved 10%. These findings indicate the need for structured improvements in risk management, security policies, technology, personal data protection, and third-party security.
Article Details
Section
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
How to Cite
References
Akbar, M. T., Gussati, R., Pradiva, M. A. R., Refina, Ferlica, E. Y., Afriandi, T. M., Lestari, D. A. I., & Husadi, H. (2026). An Information Security Maturity Evaluation of the BKO District Court Based on the KAMI Index Version 5.0. 15(2), 65–75. https://doi.org/https://doi.org/10.18495/comengapp.v15i2.1329
Akbar, M. T., & Siregar, M. U. (2024). A Survey on Software Requirements Engineering in Information Technology Institutions. 9(2), 253–264. https://doi.org/https://doi.org/10.21831/elinvo.v9i2.70862
Akbar, M. T., Veronica, R. T., Widyana, R. I., & Nurahman, H. (2026). Evaluasi Kesiapan Keamanan Informasi BAWASLU ABC Menggunakan Indeks KAMI 5.0. 9(1), 88–97. https://doi.org/https://doi.org/10.14421/csecurity.2026.9.1.5709
Alkhazi, B., Alshaikh, M., Alkhezi, S., & Labbaci, H. (2022). Assessment of the Impact of Information Security Awareness Training Methods on Knowledge, Attitude, and Behavior. IEEE Access, 10(November), 132132–132143. https://doi.org/10.1109/ACCESS.2022.3230286
Bagaskara, B. A., Idhom, M., & Wahanani, H. E. (2025). PENGUJIAN WEBSITE DINAS SOSIAL SURABAYA MENGGUNAKAN METODE PENETRATION TESTING DAN OWASP TOP 10. 8(1), 40–50.
Bakhtiar, A., & Salsabila Hidayat, F. (2023). EVALUASI SISTEM MANAJEMEN KEAMANAN INFORMASI BERDASARKAN PENILAIAN INDEKS KAMI v.4.2 PADA DINAS XYZ PROVINSI JAWA TENGAH. Industrial Engineering Online Journal, 12(4). https://ejournal3.undip.ac.id/index.php/ieoj/article/view/41401
Chan, C. C., Yang, C. Z., & Fan, C. F. (2021). Security Verification for Cyber-Physical Systems Using Model Checking. IEEE Access, 9, 75169–75186. https://doi.org/10.1109/ACCESS.2021.3081587
Clarissa, S., & Wang, G. (2023). Assessing Information Security Management Using ISO 27001:2013. Jurnal Indonesia Sosial Teknologi, 4(9), 1361–1371. https://doi.org/10.59141/jist.v4i9.739
Dewantara, R., & Sugiantoro, B. (2021). Evaluasi Manajemen Keamanan Informasi Menggunakan Indeks Keamanan Informasi (KAMI) pada Jaringan (Studi Kasus: UIN Sunan Kalijaga Yogyakarta). Jurnal Teknologi Informasi Dan Ilmu Komputer, 8(6), 1137. https://doi.org/10.25126/jtiik.2021863123
Fauzia Anis Sekar Ningrum, Yudha Riwanto, Inggrid Yanuar Risca Pratiwi, & Muhammad Ainul Fikri. (2024). Analisis Keamanan Sistem Informasi Perguruan Tinggi Berbasis Indeks KAMI. Jurnal Informatika Polinema, 10(3), 437–444. https://doi.org/10.33795/jip.v10i3.5154
Habibullah, R., Nuruzzaman, M. T., & Mulyanto, A. (2024). Evaluasi Keamanan Sistem Informasi Dengan Indeks KAMI Dan COBIT 5 Di Pesantren. Cyber Security Dan Forensik Digital, 7(2), 69–80. https://doi.org/10.14421/csecurity.2024.7.2.4576
Imtikhan Azmi, H., Tulus_akbar, Tasya Kumala Dewi, B., & Sugiantoro, B. (2024). Evaluasi Tingkat Kesiapan Keamanan Informasi Pada SMK XYZ Menggunakan Indeks KAMI Versi 4.2. Cyber Security Dan Forensik Digital, 7(1), 42–49. https://doi.org/10.14421/csecurity.2024.7.1.4422
Karunia, W. A., Zahra, A. F., & Amrozi, Y. (2025). Kajian Ancaman Baru Dalam Keamanan Informasi : Systematic Literature Review Pada Kerentanan Cyber Security Pasca-Pandemi Evaluating Emerging Threats In Information Security : A Systematic Literature Review On Post-Pandemic Cybersecurity Vulnerabilities. CyberSecurity Dan Forensik Digital, 8(1), 10–16.
Kawanishi, Y., Nishihara, H., Yoshida, H., Yamamoto, H., & Inoue, H. (2023). A Study on Threat Analysis and Risk Assessment Based on the “Asset Container” Method and CWSS. IEEE Access, 11(January), 18148–18156. https://doi.org/10.1109/ACCESS.2023.3246497
Khusna, T. N., & Sugiantoro, B. (2023). Pengukuran Tingkat Keamanan Informasi Pada Upt-Psi Universitas Muria Kudus Berdasarkan Indeks Keamanan Informasi (Kami) Versi 4.2. JIPI (Jurnal Ilmiah Penelitian Dan Pembelajaran Informatika), 8(3), 847–856. https://doi.org/10.29100/jipi.v8i3.3720
Marican, M. N. Y., Razak, S. A., Selamat, A., & Othman, S. H. (2023). Cyber Security Maturity Assessment Framework for Technology Startups: A Systematic Literature Review. IEEE Access, 11(January), 5442–5452. https://doi.org/10.1109/ACCESS.2022.3229766
Paramita, S., Siregar, S. A., Damanik, R. A., & ... (2022). Analisis Manejemen Resiko Keamanan Data Sistem Informasi Berdasarkan Indeks Keamanan Informasi (KAMI) ISO 27001: 2013. Bulletin of Information …, 3(4), 374–379. https://journal.fkpt.org/index.php/BIT/article/view/421%0Ahttps://journal.fkpt.org/index.php/BIT/article/download/421/263
R.Y Rahman, M. . H. (2023). EVALUASI KEAMANAN INFORMASI PADA SMAN 1 TANGGAMUS MENGGUNAKAN INDEKS KAMI VERSI 4.2. JURNAL FASILKOM, 13(2), 181–187.
Sugiarto, P., & Suryanto, Y. (2022). Evaluation of the Readiness Level of Information System Security at the BAKAMLA Using the KAMI Index based on ISO 27001:2013. International Journal of Mechanical Engineering, 7(2), 974–5823.
Sun, N., Li, C. T., Chan, H., Dung Le, B., Islam, M. Z., Zhang, L. Y., Islam, M. R., & Armstrong, W. (2022). Defining Security Requirements With the Common Criteria: Applications, Adoptions, and Challenges. IEEE Access, 10, 44756–44777. https://doi.org/10.1109/ACCESS.2022.3168716
Zhang, H., Pan, Y., Lu, Z., Wang, J., & Liu, Z. (2021). A Cyber Security Evaluation Framework for In-Vehicle Electrical Control Units. IEEE Access, 9, 149690–149706. https://doi.org/10.1109/ACCESS.2021.3124565