Claim Missing Document
Check
Articles

Found 2 Documents
Search
Journal : International Journal of Engineering, Science and Information Technology

Failure of Preventive Security Controls in Cloud-Native Systems: Revisiting Governance Enforcement Ramadhan, Muhammad Daffa; Fajar, Ahmad Nurul
International Journal of Engineering, Science and Information Technology Vol 5, No 3 (2025)
Publisher : Malikussaleh University, Aceh, Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.52088/ijesty.v5i3.1294

Abstract

Cloud-native architectures have introduced a fundamental shift in how security and governance are applied within modern IT environments. While traditional preventive IT General Controls (ITGCs) were designed for static, centralised systems, their application in dynamic, decentralised, and automated cloud-native systems remains ambiguous and often ineffective. This study investigates the patterns of failure in preventive controls across cloud-native environments and analyses the extent to which governance frameworks fail to enforce security proactively. Employing a meta-synthetic approach, this research reviews documented cloud breach incidents from 2021 to 2024 to extract recurring failure patterns. These incidents were analysed and mapped against major security control domains, including identity and access management, configuration hardening, and observability. The findings highlight systemic gaps in the implementation of preventive measures, particularly in areas where infrastructure is governed as code, and runtime dynamics alter control effectiveness. Furthermore, the study examines how existing governance frameworks such as ISO 27001, COBIT, and NIST CSF are often too abstract or outdated to directly translate into executable policies within CI/CD pipelines and cloud-native infrastructures. The study reveals that misconfigurations, inadequate identity management, and runtime blind spots are among the most common contributors to control failures. These issues are compounded by the lack of real-time enforcement mechanisms and the misalignment between policy design and operational realities. Based on these findings, the paper proposes a shift toward Governance-as-Code and continuous control validation as critical strategies for modern preventive governance. In conclusion, the paper demonstrates that traditional ITGCs, while still conceptually relevant, require operational reengineering to remain effective in cloud-native ecosystems. A governance model that is executable, context-aware, and runtime-integrated is essential for proactive security and sustained compliance in modern digital infrastructure.
UX Matters: Unlocking QRIS Adoption among MSMEs in the Greater Jakarta Area Ramadhan, Muhammad Daffa; Fajar, Ahmad Nurul
International Journal of Engineering, Science and Information Technology Vol 5, No 4 (2025)
Publisher : Malikussaleh University, Aceh, Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.52088/ijesty.v5i4.1337

Abstract

This study investigates the influence of User Experience (UX) dimensions, integrated with the Technology Acceptance Model (TAM), on the adoption intention of Micro, Small, and Medium Enterprises (MSMEs) in the Greater Jakarta area toward the Quick Response Code Indonesian Standard (QRIS). The research examines functional qualities, which consist of Efficiency, Perspicuity, and Dependability, alongside hedonic qualities, represented by Stimulation and Novelty, as well as Trust, which serves as an essential construct in the adoption process of financial technologies. These factors were evaluated as direct predictors of adoption behaviour, while Perceived Usefulness (PU) and Perceived Ease of Use (PEOU) were employed as mediating variables to capture the mechanisms underlying the relationships, consistent with TAM’s theoretical framework. Data were collected from 400 MSMEs across various industries in the region, and analysis was conducted using Partial Least Squares–Structural Equation Modelling (PLS-SEM). The empirical results demonstrate that Efficiency strongly drives PU, emphasising the critical role of task performance and functional reliability in shaping perceptions of usefulness. Dependability and Trust significantly improve PEOU, highlighting that stable system performance and confidence in technology providers reduce complexity and foster ease of use. Interestingly, while Stimulation shows a positive and direct impact on Intention to Use, Perspicuity and Novelty yield unexpected negative effects, suggesting that overly simple or overly unfamiliar experiences may hinder rather than encourage adoption. Furthermore, PU and PEOU are shown to mediate several causal paths, reinforcing TAM’s theoretical assumptions and underscoring the value of integrating UX considerations into classical acceptance models. The final structural model exhibits strong explanatory power, with an R² of 0.903 for Intention to Use, indicating the robustness of the integrated framework and confirming the effectiveness of combining UX dimensions with TAM in explaining QRIS adoption behaviour among MSMEs.