Using the Information Security Index to Measure University Information Security Management : Concepts and Strategies

Abstract

An information security index is an evaluation tool for analyzing the degree of information security preparedness in government agencies. This evaluation tool is not intended to investigate the feasibility or effectiveness of existing forms of security, but rather as a tool to provide a picture of the readiness condition. This study aims to create a concept and evaluation strategy using information security index. The research method used is literature study and interview to generate a proper concept and strategy that matured. The result of this research is information security index will evaluate an organization based on six area that is: ICT Roles, Information Security Governance, Information Security Risk Management, Information Asset Management and Information Technology and Security. In an evaluation using information security index there are nine steps to be taken the first step is planning, second is literature study and interview then six evaluation steps based on the last area is the result of the evaluation, the Estimated time needed to do the assessment is thirteen weeks.