Claim Missing Document
Check
Articles

Found 15 Documents
Search

Analysis of Government Employees’ Information Security Awareness: A Case Study of Pusinfowas BPKP Basrah Nasution; Setiadi Yazid; Yudho Giri Sucahyo
SISTEMASI Vol 15, No 4 (2026): Sistemasi: Jurnal Sistem Informasi
Publisher : Universitas Islam Indragiri

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32520/stmsi.v15i4.6259

Abstract

The utilization of information technology as a tool that is widely believed to facilitate business processes within organizations is inseparable from challenges related to information security threats. According to the 2024 cyber incident report issued by the National Cyber and Crypto Agency (BSSN), data exposure threats accounted for 58.34%, with most incidents originating from the government administration sector. Humans are considered the weakest link in information security; therefore, the primary effort to improve security can begin with measuring the level of security awareness. Among the various work units within BPKP, Pusinfowas, as the central information technology management unit, is considered an appropriate sample for evaluation and is expected to contribute to improving information security awareness across other units. This study employs the Human Aspects of Information Security Questionnaire (HAIS-Q) model to measure the level of information security awareness among employees at Pusinfowas. The HAIS-Q model consists of three dimensions—knowledge, attitude, and behavior—and seven focus areas: password management, email use, internet use, social media use, mobile device use, information handling, and incident reporting. The results indicate that employees’ information security awareness is at a “Good” level, with scores ranging between 80% and 100% across all HAIS-Q dimensions and focus areas.
SECURITY ANALYSIS OF SUPERAPPS PUSAKA USING OWASP AND ISSAF Abdul Rozak Nurdiansyah; Setiadi Yazid; Yudho Giri Sucahyo
International Journal of Social Science, Educational, Economics, Agriculture Research and Technology (IJSET) Vol. 5 No. 7 (2026): JUNE
Publisher : RADJA PUBLIKA

Show Abstract | Download Original | Original Source | Check in Google Scholar

Abstract

Pusaka Super Apps is an integrated digital platform owned by the Ministry of Religious Affairs of the Republic of Indonesia (Kemenag) that provides various religious services for millions of users. Along with the increasing reliance on government digital services, threats to information system security are becoming more complex. This study conducts a security assessment of the Pusaka Super Apps web application ( https://pusaka-v3.kemenag.go.id ) using two complementary frameworks, namely OWASP Top 10 2025 and the Information Systems Security Assessment Framework (ISSAF). The research method is qualitative descriptive with black-box testing and gray-box testing approaches that include the stages of reconnaissance, scanning, enumeration, vulnerability assessment, and impact analysis. The results of the study identified several medium vulnerabilities, including Content Security Policy Header Not Set, Missing Anti-clickjacking Header, and Missing Sub Resource Integrity Attribute. This study provides structured remediation recommendations and serves as a contribution to efforts in strengthening cyber security for government applications in Indonesia.
A Project Management Office Transformation Roadmap Based on the Project Management Office Value Ring in an Indonesian Insurance Firm Takayani Febrianti Zubaidah; Teguh Raharjo; Yudho Giri Sucahyo
Jurnal Ilmiah Akuntansi Kesatuan Vol. 14 No. 2 (2026): JIAKES Edisi April 2026
Publisher : Institut Bisnis dan Informatika Kesatuan

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.37641/jiakes.v14i2.4820

Abstract

The transformation of the Project Management Office (PMO) has become an important factor in improving organizational performance and value generation inside financial institutions. This study investigates the progress of the PMO in one of the biggest insurance companies in Indonesia, utilizing the PMO Value Ring 26 Functions framework as the primary analytical tool. Established in 2022, the PMO is a developing governance unit that aims to shift from procedural compliance to strategic value generation. This exploratory qualitative case study employs semi-structured interviews, document analysis, and a systematic literature review to assess the PMO’s current maturity level, identify transformation challenges, and propose a three-year strategic development plan. According to the findings, the PMO at the insurance company now serves as a governance facilitator, with limited capabilities in value measurement, stakeholder engagement, and benefit realization. Using the PMO Value Ring 26 Functions model, the study recommends a structured transformation path that prioritizes governance integration, capability enhancement, and performance-based value delivery. The findings benefit both academic and practical sectors by contextualizing the PMO Value Ring framework within a developing economy and providing actionable insights for firms looking to create value-driven PMO maturity in regulated industries.
Digital Risk Management Strategies for Navigating Indonesia's Banking Digital Transformation: A Case Study of Himbara (Bank XYZ) Fajar Guna Ma’sum; Yudho Giri Sucahyo
Glosains: Jurnal Sains Global Indonesia Vol. 7 No. 3 (2026): Glosains: Jurnal Sains Global Indonesia
Publisher : Sekolah Tinggi Agama Islam Kuningan

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59784/glosains.v7i3.822

Abstract

Background: Digital transformation has enhanced efficiency in Indonesia’s banking industry while creating increasingly complex digital risk challenges. This study examines the digital risk management strategy implemented by Bank XYZ, focusing on the absence of a comprehensive risk management framework and the inadequate fulfillment of internal and external requirements. Objective: This study aims to analyze gaps in Bank XYZ’s digital risk management practices and develop an integrated strategy based on the People, Process, Technology, and Organization (PPTO) framework, incorporating ISO 31000:2018 and COBIT 2019 to support sustainable digital transformation. Methods: This research adopts the ISO 31000:2018 framework, COBIT 2019, and digital risk theory, integrating risk management principles with the People, Process, Technology, and Organization (PPTO) approach. The study employs an applied research methodology using qualitative data obtained from interviews with key informants, internal data from Bank XYZ, regulatory documents, and industry best practices. Results:  The findings indicate that while Bank XYZ has established digital risk management strategies, their implementation and adequacy remain suboptimal. Strategic recommendations were developed based on risk analysis and Focus Group Discussion (FGD) results, utilizing ISO 31000:2018 and COBIT 2019 frameworks across four primary areas: strengthening human resources and digital risk culture, optimizing business processes, enhancing the automation and integration of risk monitoring systems, and improving digital risk governance at the organizational level. Conclusion: The study concludes that the success of digital risk management at Bank XYZ is highly dependent on the consistency of implementation across all organizational levels and the institution’s readiness to adapt to the evolving risk landscape in the digital era.
STRUCTURAL VULNERABILITY AND INDONESIA'S DIGITAL SOVEREIGNTY AMID TRANSNATIONAL CYBERCRIME: A SYSTEMATIC LITERATURE REVIEW: Eng Pratomo Widodo; Puspitasari Puspitasari; Muhamad Sahroni Rofii; Yudho Giri Sucahyo
Scientechno: Journal of Science and Technology Vol. 5 No. 4 (2026)
Publisher : Yayasan Adra Karima Hubbi

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.70177/scientechno.v5i4.4493

Abstract

Indonesia faces an exponential surge in cyber threats, evidenced by a 714 percent rise in incidents in 2025 (BSSN) and cases including the Bank Jambi breach, the Brain Cipher ransomware attack on the Temporary National Data Center, and the relocation of regional scam networks from Cambodia, Myanmar, Laos, and Vietnam into Indonesia. This study aims to map the characteristics of these threats and Indonesia's structural vulnerability, evaluate the effectiveness of its cybersecurity oversight and law enforcement policies, and formulate strategies for strengthening digital sovereignty. A systematic literature review following the PRISMA 2020 protocol was employed, searching Scopus, SINTA, Google Scholar, DOAJ, SSRN, and authoritative institutional reports, yielding 50 studies from 370 initially identified records. Results show that structural vulnerability is multidimensional, spanning geographic, demographic, technological, regulatory, and institutional dimensions; policy effectiveness is constrained by institutional fragmentation and weak international legal cooperation; and strengthening digital sovereignty requires integrating structural reform, institutional capacity, regulatory harmonization, and international cooperation. The novelty lies in integrating structural vulnerability, digital sovereignty, and transnational crime theory into one analytical framework for Indonesia, with the implication of guiding future empirical research based on primary stakeholder data.