Key Issues in Cybersecurity Implementation in Government Agencies: A Case Study in Jakarta Smart City

Information Security Governance has become one of the main focus areas of government management because of its importance in protecting the overall information assets of government organizations. The Cybersecurity Governance Framework that is applied in the government environment should ideally follow the flow of government management and bureaucracy. Government management and bureaucracy directives are usually interpreted, disseminated, and implemented through a series of policies related to cybersecurity. Policies should ideally be implemented from the policy-making level to the operational level, where they are eventually being implemented. Implementing cybersecurity will involve many stakeholders which are regulated by rules and regulations. This study reports on follow-up and interviews of key actors/informants in Jakarta Smart City (JSC). Initial experience shows that the implementation of cyber security in JSC must follow the flow of the prevailing government bureaucracy. Three factors were involved in implementing bureaucracy-based cybersecurity: Legal Fundamental for Cybersecurity Management, Security Management, and Cybersecurity Stakeholders.