Application of Structural Equation Modelling to Cyber Security Maturity Level in Indonesian Private Sector

Abstract

This study investigates cybersecurity maturity in the Indonesian private sector, vital for sustaining operations in the Industry 4.0 era. Using Structural Equation Modeling (SEM), data from 23 companies were analyzed to evaluate the relationship between 5 key aspects—Governance, Identification, Protection, Detection, and Response—and their 29 sub-aspects. While significant correlations were observed between aspects and their sub-aspects, the relationships among the main aspects themselves were weak, indicating their independence. Sub-aspects such as compliance, identification reporting, and user management emerged as critical contributors to maturity levels, emphasizing the need for adherence to standards, robust reporting mechanisms, and user management. This research provides a theoretical model that enables organizations to assess their cybersecurity maturity, identify improvement areas, and enhance strategic responses to evolving threats. The findings contribute to developing more effective cybersecurity policies and frameworks, ensuring the private sector can adapt to emerging challenges while laying the groundwork for future studies.