Evaluation of Information Security Governance in Educational Institutions Using the COBIT 5 Framework

Information security governance is crucial in educational institutions to protect sensitive information and minimize security risks. This study aims to evaluate the information security governance in educational institutions using the COBIT 5 framework, focusing on five primary processes derived from mapping business objectives related to information security: EDM03, APO12, APO13, BAI06, and DSS05. The research will be a descriptive qualitative study employing a method of distributing questionnaires to seven educational institutions in the Jabodetabek region. The findings indicate that the average maturity level of the seven educational institutions studied is only at level 1 in the implementation of information security governance based on the COBIT 5 framework. This result highlights a significant gap from the desired target level 4 expected by these institutions. The study also identifies several areas needing improvement and enhancement. Produces 20 recommendations, consisting of 7 recommendations for short-term strategies, 8 recommendations for medium-term strategies, and 5 recommendations for long-term strategies. These recommendations include the development of more comprehensive information security policies. The findings of this study provide a better understanding of the status of information security governance in educational institutions and offer guidance for improvement and enhancement. It is hoped that the findings and recommendations from this research will serve as a foundation for educational institutions to improve and strengthen their information security governance, protect sensitive information, and maintain stakeholder trust.