The Model Of Quantifying Information Security With Cobit 5 Matrix In Indonesia Higher Education

Abstract

Currently in the era of Industry 4.0, information security and cyber security becomes very important for all areas of government, private and education. The information produced by each party shall be maintained from the disturbance of various things, both natural disturbances and human disturbances. This paper examines more deeply about the quantification of information security with COBIT 5 Information Security approach and information security calculation matrix of each criterion especially in Higher Education only, since it has not been done by educational practitioners and all academicians to maintain and secure information resulting from. The outcome of this research is the degree of inventory criteria of information security function that is the current, expected and maximum degree. Object of in-depth research on campus Perbanas Insititut with degree "0" ie there is no Director of Information Security, Assessment of threats and vulnerabilities, Vulnerability management and incident response, including Business continuity and disaster recovery. For the distribution of questionnaires of respondents good results above 60% are Q1, Q2, Q5, Q7, Q11, Q13, Q23, Q25 and Q27, details can be seen in the study outcome table. Furthermore, this study produces an information security matrix for the 14 prescribed aspects of the COBIT 5 information security security risk. The information security posture will produce good information when the security matrix indicator is over 2 to 5, ie 2 (managed), 3 (established), 4 (predictable) and 5 (optimized). The average Higher Education in Indonesia is still in the COBIT 5 information security matrix below 2.