Measurement of Employee Information Security Awareness on Data Security: A Case Study at XYZ Polytechnic

Abstract

Information security is a critical national policy issue. Cyber-attacks and information security breaches are becoming more and more common. Fears of a growing attack could occur far outnumber the recorded cases. This is felt at the XYZ Polytechnic, there were 926 cases of Brute Password Attacks in the third quarter of 2021. Efforts for information security have not been fully carried out. Therefore, it is necessary to know the level of information security awareness, especially among XYZ Polytechnic employees, and develop strategies to improve information security. The measurement uses HAIS-Q with seven areas of information security. An information security assessment is processed using AHP method. This study pointed out that the value of focus area was at the medium level of consciousness (66.5%). Based on the results obtained, diverse strategies in terms of technology and human resources are required to supervise and raise the level of information security awareness at XYZ Polytechnic.