Kajian Dimensi Budaya Keamanan Informasi dalam Berbagai Organisasi

Abstract

Information Security Culture is indispensable in securing personal data and company data. The assessment of the cultural level is generally done by calculating the index value (composite indicator) which is formed from the dimensions or factors that influence the culture. This study aims to obtain information security culture factors that can be used to form an index of the level of information security culture. The method used is Systematic Literature Review (SLR). The SLR is used to identify, review, discuss and discuss all available research on the phenomenon area of interest, with specific relevant research questions. This study examines 39 research papers related to information security culture in organizations and individuals between 2012 and 2021. There are nine types of organizations discussed, including: health, government, Small and Medium industrial, public organizations, finance, general organizations, trading companies, telecommunications, and academics. The results showed that there were 11 factors used in the assessment of information security culture, namely awareness, policy, training, monitoring, compliance, knowledge, education, behavior, strategy, change management and communication. Where there are four factors used by more than 25% of papers, namely awareness, policy, training and monitoring.