
CIVIL SERVANTS AWARENESS GUIDELINE TOWARDS COMPUTER SECURITY POLICY: A CASE STUDY AT THE MANPOWER DEPARTMENT, MINISTRY OF HUMAN RESOURCES
Author(s) -
Yusmawati Muhd Yusof,
Dalbir Singh
Publication year - 2021
Publication title -
asia-pacific journal of information technology and multimedia
Language(s) - English
Resource type - Journals
ISSN - 2289-2192
DOI - 10.17576/apjitm-2021-1001-08
Subject(s) - civil servants , public sector , government (linguistics) , business , information and communications technology , security policy , agency (philosophy) , information security standards , human resources , public policy , information security , public administration , guideline , public relations , private sector , network security policy , political science , computer security , economic growth , security service , management , economics , computer science , politics , philosophy , linguistics , epistemology , law
ICT Security Policy includes information security-related policies, guidelines and best practices that are enforced in the Malaysian public sector. These policies are priority areas that contain guidelines for implementing ICT infrastructure in the public sector. However, there is a significant gap between these policies and awareness towards computer security policy among government servants in the public sector. Therefore a study involving government servants in the Manpower Department, Ministry of Human Resources was carried out to identify the critical success factor of these policies. The study was conducted through quantitative and qualitative methods. A survey was conducted to measure the level of awareness among government servants in agencies against computer security policies. Flaw factors in computer security policy implementation were discussed to obtain strategies to ensure the successful implementation of computer security policies in an agency. The significant factors leading to a successful implementation of computer security policy at the governmental agencies were validated by experts. As a result, a guideline has been prepared to be applied as an improvement proposal to increase the awareness of government servants on ICT security policy in the agencies.