Improving Organizational Readiness for Cyber Incidents in Maritime Industry Using ISO 27002 Security Framework

^1. Department of Management, Sekolah Tinggi Ilmu Ekonomi Bhakti Pembangunan, Indonesia
^2. Department of Master of Management, Universitas Esa Unggul, Indonesia
^3,4. Department of Information System, Universitas Bunda Mulia, Indonesia
^5. Department of Management, Universitas Pembangunan Jaya, Indonesia
^6. Department of Industrial Engineering, Sampoerna University, Indonesia

Abstract

The current business world requires organizations to operate dependable information systems because digital business activities need organizations to handle extensive data from business transactions. The research develops an information security and data management framework which follows ISO 27002 standards to achieve operational and data security and organizational resilience. The researchers used a qualitative case study method to assess current practices in order to identify security vulnerabilities and create a security framework which complies with global information security standards. The study identified three main problems which included divided data storage systems and missing access control systems and absent incident management systems as factors that caused operational inefficiencies and data mismatches and increased risk to business operations. The study demonstrates that international security standards enable organizations to implement digital transformation by helping them connect their technological systems with existing business processes and their workforce. The study provides a maritime industry model which other companies can use to enhance their data governance practices and operational sustainability through effective information security management.