Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Journal of Embedded Systems, Security and Intelligent Systems
Saipul Anwar
Tanri Abeng University, Jakarta, Indonesia
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
From Information Security Governance to Data Protection Effectiveness: The Serial Mediating Roles of Security Policy Compliance and Cybersecurity Capability Mohammad Imam Shalahudin; Achmad Benny Mutiara Qn; Abdullah Said Alkalbani; Arisantoso; Saipul Anwar; Muhamad Femy Mulya
Journal of Embedded Systems, Security and Intelligent Systems Vol 7 No 4 (2026): December 2026
Publisher : Program Studi Teknik Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59562/jessi.v7i4.15218

Abstract

Purpose - This study examines the relationship between Information Security Governance (ISG) and Data Protection Effectiveness (DPE), focusing on the serial mediating roles of Security Policy Compliance (SPC) and Cybersecurity Capability (CC). Design/methods/approach – A quantitative explanatory approach was employed using a cross-sectional survey of 300 respondents selected through purposive sampling in Indonesia. Data were collected using a structured questionnaire comprising 33 indicators across four constructs and analyzed using Partial Least Squares Structural Equation Modeling (PLS-SEM) with SmartPLS 4. Findings – The results revealed significant positive relationships between ISG and SPC (β = 0.493, p < 0.001), SPC and CC (β = 0.433, p < 0.001), and CC and DPE (β = 0.404, p < 0.001). The serial indirect relationship between ISG and DPE through SPC and CC was also significant (β = 0.086, p < 0.001). The model explained 45.4% of the variance in DPE. Research implications/limitations – The findings suggest that effective data protection requires coordinated governance, consistent security policy compliance, and organizational cybersecurity capabilities. However, the cross-sectional design, purposive sampling, and reliance on self-reported data limit causal interpretation and generalizability. Originality/value – This study integrates the Information Security Governance and Dynamic Capability perspectives within a Governance–Behavior–Capability–Outcome Framework. It extends existing cybersecurity research by identifying behavioral compliance and organizational capability as sequential mechanisms linking security governance with data protection effectiveness.
Co-Authors Abdullah Said Alkalbani Achmad Benny Mutiara Qn Arisantoso Mohammad Imam Shalahudin Muhamad Femy Mulya