Information Security Awareness Level Evaluation in Government Institution: A Case Study of Indonesian Meteorological, Climatological, and Geophysical Agency Employees

Several studies reveal the importance of Information security awareness (ISA) for individuals and private and public organizations as it protects their sensitive information from unauthorized access, theft, or damage. ISA is critical for the Meteorological, Geophysical, and Climatological Agency (BMKG) as one of the Indonesian government institutions responsible for collecting, processing, and storing large amounts of sensitive and confidential data related to weather patterns, natural disasters, and climate conditions. Breaches of this data could have severe consequences, such as economic losses and public distrust, which impact the credibility and reputation of the organization. The purpose of this study is to evaluate the awareness consisting of the knowledge, attitudes, and behaviors of BMKG employees toward information security. The Human Aspects of Information Security Questionnaire (HAIS-Q) was adapted and customized to meet the needs of the organization, and a new focus area was added to address the organization's concerns about the use of cloud services. Questionnaires were distributed to BMKG employees at the central and regional offices, and responses were received from 86 out of a total of 99 respondents. The findings revealed that the BMKG employees had average levels of ISA in the internet use focus area, with a total value of 71.37 and 78.72 in the knowledge dimension of the social media use focus area. Furthermore, this study provides several insights and recommendations for improving employees' ISA in the context of public organizations.