Cyberattacks on online news media can cause websites to cease operations and display unauthorized content, such as links to online gambling sites. Online news media companies have a critical need for robust information security frameworks. This study aims to examine and optimize information security governance at Pojokoto.com, an online news portal frequently targeted by cyberattacks such as Distributed Denial of Service (DDoS) and malware that disrupt operational continuity. By adopting the COBIT 2019 framework, specifically the Deliver, Service, and Support (DSS) domain, this qualitative study assesses current capability levels and identifies gaps relative to desired targets. Data collection involved direct observation, in-depth interviews with IT administrators, and a review of Standard Operating Procedures (SOPs). The results indicate an average current capability level of 2.17, with the most critical deficiencies found in the Continuity Management (DSS04) and Security Service Management (DSS05) processes. To address these gaps, the study proposes several strategic recommendations, including the implementation of a cloud-based Web Application Firewall (WAF), Two-Factor Authentication (2FA), Root Cause Analysis (RCA), and a formalized Disaster Recovery Plan (DRP) utilizing the 3-2-1 backup strategy. The study’s implications highlight that shifting from reactive issue resolution to proactive security management is essential not only to minimize service downtime but also to safeguard press freedom and maintain public trust in the digital era.
Copyrights © 2026