This study aims to review the literature on antecedent factors of information security related to the protection of health information systems (HISs) in the healthcare organization. We classify those factors into organizational and individual aspects. We followed the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) framework. Academic articles were sourced from five online databases (Scopus, PubMed, IEEE, ScienceDirect, and SAGE) using keywords related to information security, behavior, and healthcare facilities. The search yielded 35 studies, in which the three most frequent individual factors were self-efficacy, perceived severity, and attitudes, while the three most frequent organizational factors were management support, cues to action, and organizational culture. Individual factors for patients and medical students are still understudied, as are the organizational factors of academic healthcare facilities. More individual factors have been found to significantly influence security behavior. Previous studies have been dominated by the security compliance behavior of clinical and non-clinical hospital staff. These research gaps highlight the theoretical implications of this study. This study provides insight for managers of healthcare facilities and governments to consider individual factors in establishing information security policies and programs for improving security behavior.

The cognitive aspect is crucial in developing interactive and adaptive systems, including learning management systems (LMS). By understanding human cognitive processes, developers can create adaptive systems that are sustainably used by targeted users. Cognitive traits need to be explored to become part of the user model, especially especially to develop an LMS with an adaptive interface based on cognitive load. However, there is limited research exploring the correlation between cognitive load and adaptive interfaces, as well as the visualization of information, within online learning settings, including those specifically within LMS platforms. Additionally, a lack of understanding of cognitive processes renders the use of LMS static and unable to adapt to learners’ abilities. Therefore, information regarding the specific characteristics or model of cognitive load that accurately represent LMS users as triggers for adaptive interfaces needs to be further examined. A total of four experts in the cognitive field were interviewed. The interview process was conducted in a semi-structured manner to obtain information about problems in the use of e-learning, the nature of cognitive, and the process of capturing cognitive load during learning using LMS. By using a soft system methodology, the results from the interviews are mapped into a cognitive load-based LMS user model design. The initial model design includes information on working memory capacity, task performance (time, true/false rate), learning behavior (learner log), physiological (in a lab scale), and self-reporting (Likert scale). This model design is a promising first step towards a more technical process in developing adaptive and interactive systems.

Currently, cloud computing adoption is being utilized in the financial sector for its flexibility and innovative technologies. This study assesses PT XYZ's readiness to migrate its core systems to a cloud environment, which is crucial for maintaining competitive agility and robustness in Indonesia's financial services sector. Focusing on the diffusion of innovations (DOI) model and the technology-organization-environment (TOE) framework, the research examines ten factors influencing PT XYZ's migration strategy. The analysis identifies challenges related to PT XYZ's aging on-premises infrastructure, including server procurement delays and maintenance issues, which impact operational efficiency. Through semi-structured interviews with key IT personnel, this study explores perceptions of the benefits and challenges of cloud computing, as well as regulatory compliance, aiming to guide PT XYZ toward a successful cloud migration that ensures continuity, compliance, and enhanced operational capabilities. The findings contribute to understanding the relative advantages, such as cost savings and security concerns, complexity, compatibility, technology readiness, top management support, firm size, competitive pressure, and regulatory factors. PT XYZ’s decision to migrate aligns with all the factors for cloud computing adoption, with the relative advantage, complexity, compatibility, technological readiness, and top management support being high impacts on the migration decision, while regulatory compliance presents a challenge for the financial services industry in Indonesia].

An international association advancing the multidisciplinary study of informing systems. Founded in 1998, the Informing Science Institute (ISI) is a global community of academics shaping the future of informing science.

The existence of information technology has provided various conveniences and opportunities for conducting business online, one of which is the Software as a Service (SaaS) industry. PT XYZ is one of the startups focused on the SaaS business as a provider of integrated school management system (ISMS) solutions. IT plays a vital role in the operational activities of ISMS. PT XYZ is aware of this and has implemented a zero-security incident policy for its ISMS. However, the ISMS still experiences security incidents due to vulnerabilities in the system that result in losses for PT XYZ. This indicates the need for information security risk management for the ISMS. The purpose of this study is to obtain a design for information security risk management for ISMS. This study uses a qualitative method where data collection is conducted through interviews, observations, and literature reviews. SNI ISO/IEC 27005:2022 is used as the information security risk assessment, while risk control recommendations utilize SNI ISO/IEC 27001:2022. This study resulted in 28 risk scenarios, namely: 12 High risks, 10 Moderate risks, two Low risks, and four Very Low risks. The outcome of this study is the design of information security risk management for PT XYZ's ISMS.

Background: Cybersecurity is important for government agencies and the usefulness shows the need for a thorough understanding of information security awareness (ISA) among employees in order to enhance protective measures and ensure compliance with regulations. The Meteorology, Climatology, and Geophysical Agency (BMKG) of Indonesia is very important in providing essential national data and this responsibility shows the need to assess and promote ISA among the employees. The efforts to ensure a robust ISA culture can allow BMKG to safeguard sensitive meteorological and geophysical data, strengthen operational resilience, maintain public trust, and mitigate potential cyber threats that are capable of compromising national security. Objective: This study aimed to evaluate the level of organizational ISA among employees at BMKG and to improve measures considered important. Methods: The Human Aspects of Information Security Questionnaire (HAIS-Q) was administered as the reference model to assess the knowledge, attitudes, and behaviors of employees regarding information security. A descriptive statistical analysis and Partial Least Squares Structural Equation Modelling (PLS-SEM) were further applied to analyze data from 459 BMKG employees across various security domains, including password management, email use, internet use, social media use, mobile device security, and incident reporting. Results: The results showed that BMKG employees possessed a high overall level of ISA (88.06%) with the average knowledge, attitudes, and behaviors recorded to be 88.06%, 81.89%, and 80.74%, respectively. Meanwhile, specific areas such as email use (78.70%) and mobile device use (73.19%) had only moderate awareness. The structural model analysis also showed that behavior exerted the most significant influence on ISA (β = 0.423), followed by attitude (β = 0.289) and knowledge (β = 0.214). Conclusion: The overall awareness level was positive but there was a need for targeted efforts in password management, email use, and mobile device security to improve ISA practices. Moreover, the implementation of comprehensive information security policies, regular training, and organizational support was suggested to be important for fostering a robust security culture within BMKG. Keywords: Information Security Awareness, Cybersecurity, BMKG, PLS-SEM, Government Employees, Indonesia