Dio F, Januponsa
Unknown Affiliation

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

A Literature-Based Heat Matrix for Quantifying Inter-Domain Correlations within the ISO/IEC 27002:2013 Framework Dazki, Erick; Indrajit, Richardus Eko; Dio F, Januponsa
Jurnal Teknik Informatika (Jutif) Vol. 6 No. 4 (2025): JUTIF Volume 6, Number 4, Agustus 2025
Publisher : Informatika, Universitas Jenderal Soedirman

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.52436/1.jutif.2025.6.4.5203

Abstract

The problem of managing information security controls is complex because the domains outlined in standards like ISO/IEC 27002 rarely operate in isolation; they have intricate interdependencies that are often overlooked. This oversight can lead to fragmented security controls, inefficient resource allocation, and weaknesses in overall security governance. To address this issue, this paper proposes a literature-based heat matrix methodology, building on ISO/IEC 27002:2013 while referencing the updated 2022 guidance, NIST SP 800-53 Revision 5, and COBIT 2019. The primary goal is to assign numerical correlation values to the fourteen domains of ISO/IEC 27002:2013, providing a structured approach to visualize and understand their interrelationships. The methodology involves a comprehensive literature review and is complemented by expert validation from experienced practitioners to refine the correlation scores. The result is an illustrative 14x14 matrix that demonstrates how numeric inter-domain correlations can reveal critical overlaps and guide strategic decision-making. A new five-tier correlation scale is introduced to aid interpretation, clarifying whether two domains have very low, low, moderate, high, or very high levels of interdependency. This approach offers a significant impact on the field of informatics and computer science by enabling organizations to move beyond siloed security management. By recognizing these correlations, organizations can allocate resources more effectively, enhance holistic risk management, and strengthen security governance. The heat matrix serves as a practical tool for practitioners and managers to identify domain pairs that require close coordination, ultimately leading to more coherent policy frameworks and a more robust security posture.
IT Governance through Mathematical Modeling: A Quantitative Assessment of Maturity Using Factor Analysis and Structural Equation Modeling Indrajit, Richardus Eko; Dazki, Erick; Kurniawan, Rido Dwi; Dio F, Januponsa
Jurnal Teknik Informatika (Jutif) Vol. 6 No. 5 (2025): JUTIF Volume 6, Number 5, Oktober 2025
Publisher : Informatika, Universitas Jenderal Soedirman

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.52436/1.jutif.2025.6.5.5201

Abstract

IT Governance (ITG) ensures an organization's technological capabilities align with its business strategy. Although frameworks like COBIT 2019 offer structured guidelines, many assessment techniques rely on qualitative measures, which can compromise objectivity. This paper proposes a novel quantitative approach that integrates Factor Analysis (FA) and Structural Equation Modeling (SEM) to measure IT Governance maturity. By mapping each COBIT 2019 domain—EDM, APO, BAI, DSS, and MEA—onto a latent construct, organizations gain empirical insights into their governance status. Exploratory and confirmatory factor analyses validate these domains, while SEM reveals the magnitude and significance of each domain's impact on overall IT Governance maturity. A real-world example from a financial services company, "FinServEU," demonstrates how this framework can prioritize improvements, enhance regulatory compliance, and promote continuous monitoring. The results highlight that quantitative ITG modeling provides a reliable basis for informed decision-making and optimal resource allocation, bridging the gap between broad qualitative assessments and actionable strategies. This approach is crucial for the field of informatics and computer science, as it offers a robust, reproducible, and objective framework for evaluating a key aspect of digital transformation, ensuring that technological progress is guided by sound, data-driven principles.