Evaluation Information Security Maturity in Higher Education Institutions Using the Kami Index Based on ISO/IEC 27001: A Case Study at University X

Abstract

The digital transformation of higher education institutions has introduced new challenges in managing information security. This study evaluates the maturity level of information security at University X using the Information Security Index (KAMI Index) version 5.0, with reference to ISO/IEC 27001:2022. A qualitative descriptive approach was applied through interviews, observations, and document studies. Eight core domains of the KAMI Index were analyzed and mapped to the Capability Maturity Model Integration (CMMI). The findings indicate that most aspects remain at the initial maturity levels (Initial and Repeatable), particularly in governance and risk management. Based on these results, a strategic roadmap and thematic action plan for the 2025–2027 period were formulated to enable continuous improvement. This study provides practical contributions for higher education institutions seeking to strengthen their information security posture systematically and measurably.