Cybersecurity Of Work From Anywhere Model For Government : A Systematic Literature Review

Presidential Regulation No. 21 of 2023 grants Indonesian civil servants (ASN) location flexibility, creating cybersecurity challenges that institutions and authorities have yet to fully address. Existing frameworks such as ISO 27001 and NIST provide only general remote work guidelines, lacking specific recommendations for the Work From Anywhere (WFA) model. This gap poses significant risks to data security and government operations, particularly as cyber incidents reported by the National Cyber and Crypto Agency of Indonesia (BSSN) continue to rise. The 2023 Indonesian Cybersecurity Landscape report recorded 347 suspected cyber incidents, including data breaches and the exposure of over 1.6 million records on the darknet, affecting numerous stakeholders. This study employs a Systematic Literature Review (SLR) to identify cybersecurity threats associated with remote work and explore effective mitigation techniques. The findings reveal five primary threats classified into two categories: human-centric threats (social engineering attacks, insider threats, and human errors) and technology-centric threats (malware-based and network attacks). To address these threats, the study identifies four key best practice themes: Awareness and Education, Phishing Protection, Technical Countermeasures, and Management and Audit. These themes provide a structured approach to enhancing cybersecurity in WFA environments. The results of this study serve as valuable input for formulating policy and technical guidelines to implement WFA in government settings. Future research should explore supply chain security, integration of WFA with on-site operations, cultural factors in security compliance, and governance frameworks to enhance cybersecurity resilience in government WFA environments.