Article Per Year (5 Year)
p-Index From 2021 - 2026
0.444
P-Index
This Author published in this journals
All Journal Equivalent: Jurnal Ilmiah Sosial Teknik Scientific Journal of Informatics
Muhammad Hafizhuddin Hilman
Universitas Indonesia
Computer Science & IT Control & Systems Engineering Decision Sciences, Operations Research & Management Economics, Econometrics & Finance Electrical & Electronics Engineering Engineering Industrial & Manufacturing Engineering Law, Crime, Criminology & Criminal Justice Social Sciences

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

 1 
Evaluating Cybersecurity Investment Strategies in a Medium-Sized Enterprise: A Case Study of a Growing POS Service Provider in Indonesia Ryan Adhi Nugraha; Muhammad Hafizhuddin Hilman; Setiadi Yazid; Eko Yon Handri
Equivalent: Jurnal Ilmiah Sosial Teknik Vol. 8 No. 2 (2026): Equivalent: Jurnal Ilmiah Sosial Teknik
Publisher : Politeknik Siber Cerdika Internasional

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59261/jequi.v8i2.310

Abstract

Background: As mid-sized businesses use third-party integrations on services like SaaS-based POS systems, cybersecurity expands potential avenues of attack. Many of these organizations engage in reactive cybersecurity, or waiting until something happens instead of preventing it. In the face of increasingly complex organizational architecture, it is imperative to reevaluate whether these reactive approaches are still adequate in guaranteeing operational continuity and data safety. Objective: This research is performed to investigate whether a reactive approach of cybersecurity may still suffice for a medium sized company that expands its operation in Indonesia, which runs over the SaaS POS platform. Method: The study uses a qualitative single-case study design. The data were collected through semi-structure interviews with business and engineering stakeholders, triangulated by supporting organizational documents. Data were analyzed through rubric-based qualitative coding and mapped against a literature-derived reactive–proactive cybersecurity posture rubric in regard to incident response, budget allocation, and layered security infrastructure. Results: The results suggest daily operational readiness is limited by symptom-driven detection systems, periodic and manual monitoring practices, and response schedules dependent on unstructured coordination with follow-ups. There are baseline preventive controls, but many program-level capabilities are nascent—everything from centralized telemetry and alerting, to consistent incident workflow with remediation tracking, balanced against a systematic and periodic cadence of assurance. Conclusion: ..
Evaluating ISO Standards for Indonesian PDP Law Compliance: A Regulatory Mapping and Literature Review Egriano Aristianto; Muhammad Hafizhuddin Hilman; Setiadi Yazid
Scientific Journal of Informatics Vol. 12 No. 1: Regular Issue
Publisher : Universitas Negeri Semarang

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.15294/sji.v12i1.21538

Abstract

Purpose: This paper aims to demonstrate how ISO standards such as ISO/IEC 27001:2022, ISO/IEC 27002:2022, and ISO/IEC 27701:2019 can assist Indonesian organizations in facilitating compliance with the Personal Data Protection (PDP) Law. It highlights the challenge organizations face due to the lack of clear guidance in the law, then shows how these ISO standards can guide them to achieve the compliance. The study also maps the regulation’s requirements and how that requirements can be fulfilled by certain approaches provided by the standards and offers a clearer path toward full compliance. Methods: This research employs a qualitative approach, combining a literature review, document analysis, and comparative assessment. It provides systematic Indonesian PDP Law-ISO/IEC 27001, ISO/IEC 27002, and ISO/IEC 27701 mapping, an analysis of their alignment, a gap analysis, and how these standards able to demonstrate compliance to Indonesian PDP Law. Result: This study shows that from 14 mandatory requirement topics of Indonesian PDP Law that have been mapped, The ISO/IEC 27001:2022 only able to cover 1 topic, while ISO/IEC 27002:2022 able to provide controls to accommodating 8 topics and ISO/IEC 27701:2019 able to provide controls to accommodating 13 topics. But by combining these standards, then all of mandatory requirements of Indonesian PDP Law can be satisfied. Novelty: This study shows how international standards like ISO/IEC 27001, ISO/IEC 27002, and ISO/IEC 27701 would help organize compliance to the Indonesian PDP Law while also strengthening data protection practices in Indonesia.
Co-Authors Egriano Aristianto Eko Yon Handri Ryan Adhi Nugraha Setiadi Yazid, Setiadi