Evaluation of the Implementation of Digital Forensic Readiness at the Managerial Level (a Study of Policy, Competencies, Risks, and Incidents)

Abstract

Indonesia’s rapid digital transformation has improved efficiency, accuracy, performance, and accessibility across sectors, but has increased the complexity of cyberattacks. A 2023 BSSN report recorded more than 603 million cyberattacks, highlighting the need for stronger cybersecurity resilience. Digital Forensic Readiness (DFR) is essential to ensure organizations identify, preserve, and manage digital evidence during incidents. This study evaluates DFR in universities using the COBIT 2019 framework. A convergent mixed-methods design involved 10 IT managers or department heads from private universities in Yogyakarta. Questionnaire responses were converted into capability indices from 0 to 5 using weighted frequencies, while interview data were analyzed thematically and integrated with quantitative findings. The results show most processes at capability level 3, although capability varied across institutions and components. Interviews revealed several reported capabilities were based on operational practices not formalized through written policies, standardized procedures, competencies, or evidence-preservation mechanisms. These findings emphasize interpreting capability scores alongside qualitative evidence and conducting context-specific improvements.