Analisis Perilaku Keamanan Informasi Karyawan Bank di Indonesia dalam Era Transformasi Digital
Abstract
Di era transformasi digital, keamanan informasi menjadi tantangan utama bagi sektor perbankan di Indonesia.
Teknologi digital yang diadopsi oleh perbankan menciptakan efisiensi operasional dan meningkatkan kualitas layanan,
tetapi di sisi lain membuka peluang terjadinya ancaman siber. Selain menjaga kelangsungan operasional, karyawan
bank juga memiliki tanggung jawab penting dalam melindungi data pribadi nasabah yang rentan terhadap
penyalahgunaan. Rendahnya tingkat kesadaran, pelatihan, dan pemahaman karyawan terkait praktik keamanan
informasi menjadi salah satu faktor yang meningkatkan risiko terhadap keamanan data. Oleh karena itu, penting untuk
mengevaluasi faktor-faktor yang memengaruhi perilaku keamanan informasi karyawan bank dalam menjaga
keamanan data dan sistem perbankan.
Penelitian ini menggunakan Theory Planned Behavior untuk menganalisis faktor-faktor yang memengaruhi
perilaku keamanan informasi karyawan bank di Indonesia, seperti pengelolaan kata sandi, pengelolaan keamanan
infrastruktur, pengelolaan email, kebijakan keamanan organisasi, dukungan dan pelatihan organisasi, serta persepsi
keamanan. Penelitian ini menggunakan metode kuantitatif dengan pendekatan survei kuisioner kepada 258 karyawan
bank di Indonesia. Analisis data menggunakan metode PLS-SEM dengan software SmartPLS 4. Temuan
menunjukkan lima dari enam variabel independen secara signifikan mempengaruhi perilaku keamanan informasi.
Variabel-variabel tersebut meliputi pengelolaan kata sandi, pengelolaan keamanan infrastruktur, pengelolaan email,
dukungan organisasi dan pelatihan dan persepsi keamanan. Sementara itu, kebijakan keamanan organisasi tidak
menunjukkan dampak yang signifikan.
Kata kunci: keamanan informasi, transformasi digital, perilaku karyawan, manajemen kata sandi, kebijakan
keamanan organisasi.
References
Abdillah, W., & Hartono, J. (2015). Partial Least Square (PLS) Alternatif Structural Equation Modeling (SEM) dalam
Penelitian Bisnis (1st ed.). Andi.
Ajzen, I. (1991). The Theory of Planned Behavior. 50, 179–211.
Belkhamza, Z. (2023). Cybersecurity in Digital Transformation Applications: Analysis of Past Research and Future
Directions.
BNPP. (2024, July 24). Tingkatkan Keamanan Siber Nasional, BNPP Apresasi Launching CSIRT Bersama 2024 oleh
Badan Siber dan Sandi Negara. https://bnpp.go.id/berita/tingkatkan-keamanan-siber-nasional-bnpp-apresasilaunching-csirt-bersama-2024-oleh-badan-siber-dan-sandi-negara
Bonneau, J., Herley, C., Van Oorschot, P. C., & Stajano, F. (2012). The quest to replace passwords: A framework for
comparative evaluation of web authentication schemes. Proceedings - IEEE Symposium on Security and
Privacy, 553–567. https://doi.org/10.1109/SP.2012.44
Candiwan, C., Azmi, M., & Alamsyah, A. (2022). Analysis of Behavioral and Information Security Awareness among
Users of Zoom Application in COVID-19 Era. International Journal of Safety and Security Engineering, 12(2),
–237. https://doi.org/10.18280/ijsse.120212
Candiwan, C., & Rianda, L. M. (2024). Transactions at Your Fingertips: Influential Factors in Information Security
Behavior for Mobile Banking Users. International Journal of Safety and Security Engineering, 14(3), 795–806.
https://doi.org/10.18280/ijsse.140312
Do, T. D., Pham, H. A. T., Thalassinos, E. I., & Le, H. A. (2022). The Impact of Digital Transformation on
Performance: Evidence from Vietnamese Commercial Banks. Journal of Risk and Financial Management,
(1). https://doi.org/10.3390/jrfm15010021
Egelman, S., & Peer, E. (2015). Scaling the security wall: Developing a security behavior intentions scale (sebis).
Proceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems, 2873–2882.
Fagan, M., Albayram, Y., Khan, M. M. H., & Buck, R. (2017). An investigation into users’ considerations towards
using password managers. Human-Centric Computing and Information Sciences, 7(1).
https://doi.org/10.1186/s13673-017-0093-6
Faizal, M. A., Faizatul, Z., Asiyah, B. N., & Subagyo, R. (2023). ANALISIS RISIKO TEKNOLOGI INFORMASI
PADA BANK SYARIAH : IDENTIFIKASI ANCAMAN DAN TANTANGAN TERKINI. 5(2).
http://journal.uiad.ac.id/index.php/asy-syarikah
Fernando, W. P. K., Dissanayake, D. A. N. P., Dushmantha, S. G. V. D., Liyanage, D. L. C. P., & Karunatilake, C.
(2023). Challenges and Opportunities in Password Management: A Review of Current Solutions. Sri Lanka
Journal of Social Sciences and Humanities, 3(2), 9–20. https://doi.org/10.4038/sljssh.v3i2.96
Jehanzeb, K., Rasheed, A., & Rasheed, M. F. (2013). Organizational Commitment and Turnover Intentions: Impact
of Employee’s Training in Private Sector of Saudi Arabia. International Journal of Business and Management,
(8). https://doi.org/10.5539/ijbm.v8n8p79
Krishnan, S. G., Al-Nahari, A., Ismail, N. A., & Yao, D. N. L. (2023). Enhancing Cybersecurity Awareness among
Banking Employees in Malaysia: Strategies, Implications, and Research Insights. International Journal of
Academic Research in Business and Social Sciences, 13(8). https://doi.org/10.6007/ijarbss/v13-i8/17413
Luthfah, D. (2023). PENGUATAN KEAMANAN SIBER PADA SEKTOR JASA KEUANGAN INDONESIA.
JURNAL PENELITIAN DAN KARYA ILMIAH LEMBAGA PENELITIAN UNIVERSITAS TRISAKTI, 259–267.
https://doi.org/10.25105/pdk.v9i1.18643
Mazumder, M. M. M., & Hossain, D. M. (2023). Voluntary cybersecurity disclosure in the banking industry of
Bangladesh: does board composition matter? Journal of Accounting in Emerging Economies, 13(2), 217–239.
Muma, M., Iravo, Dr. A., & Omondi, Dr. M. (2014). Effect of Training Needs Assessment on Employee Commitment
in Public Universities: A Case Study of Jomo Kenyatta University of Agriculture and Technology. International
Journal of Academic Research in Business and Social Sciences, 4(9). https://doi.org/10.6007/ijarbss/v4-i9/1153 Ocen, E., Francis, K., & Angundaru, G. (2017). The role of training in building employee commitment: the mediating
effect of job satisfaction. European Journal of Training and Development, 41(9), 742–757.
https://doi.org/10.1108/EJTD-11-2016-0084
OJK. (2024, July 9). Siaran Pers: OJK Luncurkan Pedoman Keamanan Siber Bagi Penyelenggara Inovasi Teknologi
Sektor Keuangan (ITSK).
Palanisamy, R., Norman, A. A., & Mat Kiah, M. L. (2022). BYOD Policy Compliance: Risks and Strategies in
Organizations. Journal of Computer Information Systems, 62(1), 61–72.
https://doi.org/10.1080/08874417.2019.1703225
Putra, Nurwa, A. R. A., & Priambodo, F. D. (2022). Infrastructure as Code for Security Automation and Network
Infrastructure Monitoring. MATRIK : Jurnal Manajemen, Teknik Informatika Dan Rekayasa Komputer, 22(1),
–214. https://doi.org/10.30812/matrik.v22i1.2471
Riemenschneider, C. K., Burney, L. L., & Bina, S. (2023). The influence of organizational values on employee attitude
and information security behavior: the mediating role of psychological capital. Information and Computer
Security, 31(2), 172–198. https://doi.org/10.1108/ICS-10-2022-0156
Saeed, S. (2023). Digital Workplaces and Information Security Behavior of Business Employees: An Empirical Study
of Saudi Arabia. Sustainability (Switzerland), 15(7). https://doi.org/10.3390/su15076019
Saeed, S. (2023). Education, Online Presence and Cybersecurity Implications: A Study of Information Security
Practices of Computing Students in Saudi Arabia. Sustainability (Switzerland), 15(12).
https://doi.org/10.3390/su15129426
Saeed, S., Altamimi, S. A., Alkayyal, N. A., Alshehri, E., & Alabbad, D. A. (2023). Digital Transformation and
Cybersecurity Challenges for Businesses Resilience: Issues and Recommendations. In Sensors (Vol. 23, Issue
. Multidisciplinary Digital Publishing Institute (MDPI). https://doi.org/10.3390/s23156666
Sanok, D. J. (2005). An Analysis of How Antivirus Methodologies Are Utilized in Protecting Computers from
Malicious Code. http://computer.howstuffworks.com/virus.htm
Sari, P. K., Handayani, P. W., Hidayanto, A. N., & Busro, P. W. (2023). HOW INFORMATION SECURITY
MANAGEMENT SYSTEMS INFLUENCE THE HEALTHCARE PROFESSIONALS’ SECURITY
BEHAVIOR IN A PUBLIC HOSPITAL IN INDONESIA. Interdisciplinary Journal of Information,
Knowledge, and Management, 18, 583–607. https://doi.org/10.28945/5185
Sari, P. K., Trianasari, N., & Prasetio, A. (2025). Investigating the Main Factors Affecting Healthcare Workers’
Information Security Behaviors: An Empirical Study in Indonesia. Journal of Internet Services and Information
Security, 15(1), 1–15. https://doi.org/10.58346/JISIS.2025.I1.001
Sohrabi Safa, N., Von Solms, R., & Furnell, S. (2016). Information security policy compliance model in organizations.
Computers & Security, 56, 70–82. https://doi.org/https://doi.org/10.1016/j.cose.2015.10.006
Szóstek, A. M. (2011). ‘Dealing with My Emails’: Latent user needs in email management. Computers in Human
Behavior, 27(2), 723–729.
Yazdanmehr, A., & Wang, J. (2016). Employees’ information security policy compliance: A norm activation
perspective. Decision Support Systems, 92, 36–46.
