Indeks KAMI - A readiness assessment tool for information security in the public and private sectors

Deliverable Process: Indeks KAMI (Information Security)

We ensure that the Indeks KAMI assessment process is conducted systematically and comprehensively to help organizations evaluate their readiness and maturity in information security, based on the SNI ISO/IEC 27001 framework.

1. Initiation and Scope Definition

Initial phase to understand the organizational context and design an appropriate assessment approach.

• Identify business units, information assets, and systems to be evaluated
• Collect preliminary information about the organization’s structure and security policies
• Define focus areas based on organizational needs and applicable regulations

2.Indeks KAMI Questionnaire Completion

Data gathering process using the standardized Indeks KAMI assessment questionnaire.

• Guidance on completing the questionnaire according to actual organizational conditions
• Clarify terms and parameters to ensure standard-compliant interpretations
• Initial internal validation of responses for consistency and accuracy

3. Maturity Analysis and Scoring

Processing the questionnaire results to determine the level of readiness and information security maturity.

• Scoring based on five core domains: Governance, Risk Management, Technology, Human Resources, and Compliance
• Identify low-score areas as key improvement priorities
• Visualize results using charts (e.g., radar charts) for easy interpretation

4. Reporting and Recommendations

Delivering a comprehensive report as a foundation for strategic decision-making.

• Executive summary tailored for top-level management
• Detailed analysis of each domain and sub-domain with findings explanation
• Actionable recommendations with prioritized implementation steps

5. Presentation and Result Discussion

Interactive presentation of assessment results and open discussion with stakeholders.

• Result briefing and recommendations for IT security and management teams
• Open discussion to determine follow-up steps and resource allocation
• Submission of the final report in PDF and/or presentation format