Kevin Maulana Firdaus

Integrasi Faktor Manusia dalam Tata Kelola Keamanan Siber Berbasis Cloud: Studi Pengembangan Framework

Introduction

Integrasi faktor manusia dalam tata kelola keamanan siber berbasis cloud: studi pengembangan framework. Kembangkan framework tata kelola keamanan siber berbasis cloud yang mengintegrasikan faktor manusia. Pendekatan holistik untuk manajemen keamanan di organisasi digital.

Abstract

This study aims to develop a cloud-based cybersecurity governance framework that integrates human factors as a central element. A qualitative approach with a conceptual framework development design was employed through literature review, needs analysis, People–Process–Technology model design, and conceptual implementation simulation. The results indicate that integrating human factors, governance processes, and technical controls into a unified framework provides a more holistic and adaptive approach to cybersecurity management in digital organizations. The proposed framework positions humans as active actors in the security system, supported by policies, standard operating procedures, and cloud security technologies. This study contributes theoretically to the development of cybersecurity governance research and practically serves as an initial reference for organizations in designing human-centered cybersecurity strategies in cloud environments.

Review

This study addresses a highly pertinent and critical area in contemporary cybersecurity: the integration of human factors within cloud-based cybersecurity governance. The stated aim to develop a holistic framework is commendable, particularly given the increasing recognition that human elements are often the weakest link in security architectures. By proposing a framework that unifies human factors, governance processes, and technical controls, the research offers a promising conceptual advancement towards more adaptive and effective cybersecurity management for digital organizations. The emphasis on positioning humans as active participants, rather than mere vulnerabilities, represents a significant and positive shift in perspective. The methodology employed, a qualitative approach centered on conceptual framework development, appears appropriate for the stated objective. The sequential steps involving literature review, needs analysis, and the utilization of the People–Process–Technology model are sound for constructing a foundational framework. The inclusion of a "conceptual implementation simulation" is an interesting design choice, likely intended to demonstrate the framework's internal logic and potential functionality. This comprehensive approach ensures that the proposed framework is grounded in existing knowledge, addresses practical needs, and considers multiple facets of cybersecurity. While the abstract clearly articulates the theoretical and practical contributions of the framework as an initial reference for human-centered strategies, a key limitation apparent from the description is its conceptual nature. The "conceptual implementation simulation" implies that the framework has not yet undergone empirical validation or real-world testing within an operational cloud environment. Future work would greatly benefit from transitioning beyond the conceptual phase to rigorous empirical studies, pilot implementations, and detailed case studies to assess the framework's effectiveness, scalability, and specific impact on security posture and human behavior. Such validation would significantly strengthen the practical utility and robustness of this otherwise well-conceived framework.

Full Text

Comments

You need to be logged in to post a comment.