Evaluation of information security management in crisis response using KAMI index: The case of company XYZ

Company XYZ plays a substantially strategic role in providing technical availability for public security in many digital business activities. Their vision is to enable a secure, trusted, and digitalized environment for citizens and consumers to perform daily activities, such as digital payment, accessing public facilities provided by the government, and many others. However, this makes information travel rapidly to the organization, and the company possesses highly critical and vital assets. These circumstances become an issue in terms of information security management. The pandemic has also brought various technical challenges in reassessing the company's methods and tools in the cyber security area. Some of such changes may likely be permanent or continue in the post-pandemic period. Therefore, the company needs to re-evaluate the capabilities of its security management in the current situation and assess the implications on information security. This study is conducted to measure the company's readiness to apply high standard information security assessment and analyze the pandemic impact on Company XYZ's vulnerability and information security using the latest version of the KAMI Index. The results show that company XYZ has achieved maturity level V of information security management with an overall score of 592. The results also offer further recommendations to improve their information security frameworks in preparing further security assessment, opportunities, and enhancement to address any possible issues during and post-pandemic.