Claim Missing Document
Check
Articles

Found 2 Documents
Search

NIST SP 800-34-Based Disaster Recovery Plan Framework for the National Committee for Sharia Economics Khalil Mojadidi; Abba Suganda Girsang
Equivalent: Jurnal Ilmiah Sosial Teknik Vol. 8 No. 3 (2026): Equivalent: Jurnal Ilmiah Sosial Teknik
Publisher : Politeknik Siber Cerdika Internasional

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59261/jequi.v8i3.340

Abstract

Background: In today’s digital era, information technology (IT) infrastructure is critical to organizational operations, making Disaster Recovery Planning (DRP) essential for business continuity. Institutions managing strategic data assets, such as KNEKS, must address risks from disasters, cyberattacks, and infrastructure failures during PDES development. Objective: This study aims to identify KNEKS’s disaster recovery requirements under current and future PDES conditions and to develop a comprehensive DRP framework based on NIST SP 800-34. Methods: A qualitative case study approach was employed using NIST SP 800-34 Rev. 1 as the primary framework, complemented by FIPS 199, SNI ISO 31000, and NIST SP 800-53. Data were collected through semi-structured interviews with IT managers and system administrators, supported by document analysis. Triangulation and member checking were used to ensure validity. Results: The assessment revealed significant gaps in disaster recovery readiness, particularly in formalized policies, technical redundancy, and impact analysis procedures. Based on these findings, a tailored DRP framework was developed, incorporating activation, recovery, and reconstitution phases while maintaining scalability for future PDES expansion. Conclusion: A comprehensive NIST SP 800-34-based DRP is essential to ensure KNEKS’s operational continuity. The proposed framework offers a structured and scalable approach to disaster recovery and provides a practical model for emerging public-sector, data-intensive institutions.
Raising Employee Cybersecurity Awareness Through Octalysis-Based Gamification: A Pre-Post Assessment Using HAIS-Q at the Ministry of Public Works and Public Housing Ramadhan Papua Putra; Abba Suganda Girsang
Equivalent: Jurnal Ilmiah Sosial Teknik Vol. 8 No. 3 (2026): Equivalent: Jurnal Ilmiah Sosial Teknik
Publisher : Politeknik Siber Cerdika Internasional

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59261/jequi.v8i3.364

Abstract

Background: Rapid digital transformation has increased cybersecurity threats, while employee awareness remains a critical vulnerability in many organizations, including government institutions. Strengthening cybersecurity awareness is essential to reduce human-related security risks. Objective: This study aims to assess employee cybersecurity awareness at the Ministry of Public Works and Housing (Kementerian Pekerjaan Umum dan Perumahan Rakyat [Ministry of PUPR]) using the Human Aspects of Information Security Questionnaire (HAIS-Q) and to evaluate the effectiveness of an Octalysis-based gamification intervention in improving awareness across knowledge, attitude, and behavior dimensions. Methods: A pre-post quasi-experimental design was applied involving 146 employees. Data were collected using the validated HAIS-Q instrument before and after a four-week web-based gamification intervention. The gamification design implemented two Octalysis core drives: Development & Accomplishment and Empowerment of Creativity & Feedback, through leaderboard, badge, and instant feedback features. Results: The findings show that overall cybersecurity awareness increased from 75.85% (medium level) to 83.69% (good level), indicating a 10.33% improvement. All seven HAIS-Q focus areas improved, with the most significant gain observed in internet use (58.22% to 69.79%). Conclusion: The Octalysis-based gamification approach effectively enhanced employee cybersecurity awareness. Integrating gamification with HAIS-Q provides a structured and evidence-based method for improving cybersecurity behavior in government organizations.