Pengukuran Tingkat Kesiapan Pemerintah Digital (Pemdi) Berbasis Vulnerability Assessment

Abstrak

The swift progression of technology has rendered website indispensable in the E-Government. Nevertheless, this advancement introduces increasing challenges, especially concerning information security. Numerous systems are created and implemented without sufficient security assessments, leading to weaknesses that malicious actors may exploit for cyberattacks. This research introduces an innovative methodology that integrates both governance and technical viewpoints. The KAMI (Information Security) Index 4.0, which is grounded in ISO/IEC 27001, serves as the basis for governance assessment, whereas a Network Security Assessment that refers to the OWASP Top 10 and includes CVSS 3.0 is utilized for the technical evaluation. The evaluation results of the KAMI Index scores were unsatisfactory, the current level of readiness is merely at a foundational framework stage. Network Security Assessment identified 15 vulnerabilities with 1 critical, 11 medium, 3 low across 5 systems. The proposed testing aids administrators in pinpointing weaknesses in both governance and infrastructure, thus equipping stakeholders with a clearer understanding of how to effectively secure the systems.