Ministry of Research, Technology, and Higher Education (MRTHE) is actively improving its information security to enhance public service. Employee's awareness on information security requires attention due to their contribution on the improvement. MRTHE should identify characteristics of employees on information security through Information Security Awareness (ISA) level measurement. Such characteristics could provide adequate analysis as consideration to establish feasible programs of ISA for employee. This study concerns to ISA level measurement for MERTHE's employee using seven focus areas of information security (password management, email usage, internet usage, social networking site usage, incident reporting, mobile computing, and information handling) with three variables of KAB model: Knowledge, Attitude, and Behavior. They are expanded into some criteria to examine employee's individual perception using Likert scale. As a result, 13 parameters out of 21 are classified as Good level of ISA. General score as representation of all parameters is 81.07 percent. It indicates that MRTHE's employee has performed positive knowledge, attitude, and behavior on information security. To enhance quality of measurement, this study conducts three hypotheses that actualized relationship among each variable. Since their relationships are proven empirically using regression linear examination, these hypotheses are acceptable. It reflects that on information security, knowledge has good influence to attitude and behavior while attitude also has good influence to behavior. Hence, MRTHE can initiate improvement of information security using programs with knowledge-based.

Ministry of Energy and Mineral Resources (MEMR) requires Information System/Information Technology (IS/IT) to accelerate its bureaucratic reform. By shortening business legalization process, performance transparency, and standardization of open-access public data, MEMR is expected to improve public service as government institution. However, current situation indicates low performance of IS/IT at MEMR. MEMR has many IS applications with similar functions, separated infrastructure, and weak IT governance. This research explores Strategic IS Planning (SISP) for MEMR as formal development guideline of IT policies, technical tactics, and IT roles. Formulation of SISP is guided by three business principles: Automation, Continuity, and Standardized. SISP is developed using a methodology which accommodates four layers: IT governance, IS application, IT infrastructure, and IT human resources. The methodology is also supplemented with Enterprise Architecture modeling and some COBIT 5 processes through cascading mechanism. This research produces some agendas for each layer, such as IT steering committee establishment to engage top-management commitment, IT competence improvement, centralized data center and disaster recovery center to simplify IT infrastructure operational, and also integration of similar functions IS applications (from 146 IS applications to 22). Through SISP, MEMR can perform more capable bureaucratic reform using IS/IT.

Indonesia Internet Domain Names Registry Association (PANDI) hosts helpdesk function as a part of .id domain management. It is a one-stop facility for all registrants and the public to submit questions and complaints regarding .id domain names. Previously, helpdesk function had poor performance since its business processes were manual and slow. This research aimed to design Information Technology Service Management (ITSM) implementation as guidelines for PANDI helpdesk. It demonstrated case study research using qualitative approach by involving helpdesk officers, and c-level in depth interview. This research relied on ITIL V3 2011 framework to generate ITSM design: service catalog, Service Level Agreement, and Standard Operating Procedures. It resulted in tracking status, priority label, reporting feature, and service categories can be added on the application side. Those artifacts guided helpdesk to improve the quality of services provided by PANDI. They consisted of a service catalog that includes 11 Customer Facing Service (CFS) and Resource Facing Service (RFS), five SLAs for helpdesk business process services, and three SOPs for account changes request service.

Certificate Policy (CP) and Certification Practice Statement (CPS) are required documents for Certification Authority (CA) to describe its information security mechanism, business processes and regulation compliance. Ministry of Communication and Information Technology (MCIT) Indonesia need to compose CP and CPS because of its role as Root CA in Indonesia National Public Key Infrastructure (INPKI). This research proposes CP and CPS for Root CA Indonesia following the content structure in Request for Comment (RFC) 3647. The proposed CP and CPS involve elaboration among applied technology, procedures of information security, and legal aspect of information security in Indonesia. Significant contribution of this research is the development of CP and CPS as fundamental standards in establishing Indonesia National Public Key Infrastructure (INPKI) as part of national information security system. Moreover, Webtrust Perspective Criteria is used to appraise the comprehensiveness of CP and CPS. As a result, the constructed CP and CPS have 96 percent suitability (43 criteria out of 45). This performance indicates that CP and CPS are applicable and ready to be adopted by Root CA Indonesia.

Web portal's capability in information quality (IQ) will determine its success; especially in complying with user's need. On Indonesia Kreatif web portal, poor IQ can be seen by the low number of visitor penetration and engagement. The aims of this research are to identify users' perception of information quality on Indonesia Kreatif web portal and analyze their causative factors. This research was conducted in three phases: First, the dimensions of IQ was synthesized from numerous previous literatures, followed by an IQ assessment, and finalized with a thorough analysis of their causative factors. The results of this research yielded fourteen IQ dimensions. Additionally, the main causative problems include the low quantity and incomplete published information, coupled with a rigid editor team. For those problems, this research proposed the following recommendations: (1) expand information sources (2) complete the information with mandatory fields, and (3) arrange a routine time schedule from drafting to publishing.