SYSTEMATIC LITERATURE REVIEW TERHADAP KERANGKA TATA KELOLA KEAMANAN DAN PRIVASI BERBASIS RISIKO PADA EKOSISTEM SMART CITY DAN SISTEM PEMERINTAHAN BERBASIS ELEKTRONIK (SPBE)
DOI:
https://doi.org/10.54314/jssr.v9i4.6717Keywords:
Smart City, cybersecurity, risk management, Internet of Things, ISO/IEC 27001, privacyAbstract
This study aims to identify, evaluate, and synthesize risk-based security and privacy governance frameworks implemented in Smart City and Electronic-Based Government System (SPBE) ecosystems. The method used is a Systematic Literature Review (SLR) by adapting PRISMA guidelines on selected literature related to Smart City, e-Government, cybersecurity, privacy, Internet of Things (IoT), Big Data, and risk management. The literature extraction results indicate that the implementation of integrated security governance frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, ENISA guidelines, and risk-based evaluation models was identified as an important factor in improving information security maturity and mitigating privacy risks in digital public services. Furthermore, the increasing integration of IoT devices, Big Data platforms, and interconnected public service infrastructures introduces new security challenges that require comprehensive governance approaches. The findings indicate that successful Smart City and SPBE implementation requires integrated risk-based security and privacy governance frameworks. Furthermore, this study proposes a conceptual framework that may serve as an initial reference for developing secure, adaptive, and sustainable digital public services.
Downloads
References
Ahvenniemi, H., Huovila, A., Pinto-Seppä, I., & Airaksinen, M. (2017). What are the differences between sustainable and smart cities? Cities, 60, 234–245. https://doi.org/10.1016/j.cities.2016.09.009
Alaba, F. A., Othman, M., Hashem, I. A. T., & Alotaibi, F. (2017). Internet of Things security: A survey. Journal of Network and Computer Applications, 88, 10–28. https://doi.org/10.1016/j.jnca.2017.04.002
Albahri, A. S., Duhaim, A. M., Fadhel, M. A., Alnoor, A., Baqer, N. S., Alzubaidi, L., Albahri, O. S., Alamoodi, A. H., Bai, J., Salhi, A., Santamaría, J., Ouyang, C., Gupta, A., Gu, Y., & Deveci, M. (2023). A systematic review of trustworthy and explainable artificial intelligence in healthcare: Assessment of quality, bias risk, and data fusion. Information Fusion, 96, 156–191. https://doi.org/10.1016/j.inffus.2023.03.008
Alfiqhyanto, D., & Supriyanto, A. (2026). ANALISA EVALUASI DAN PERANCANGAN MANAJEMEN LAYANAN TI PADA PEMERINTAH DAERAH MENGGUNAKAN FRAMEWORK ITIL V4. JATI (Jurnal Mahasiswa Teknik Informatika), 10(1), 1168–1175. https://doi.org/10.36040/jati.v10i1.16956
Aminudin, A., & Supriyanto, A. (2024). Kematangan risiko keamanan informasi layanan TI menggunakan pendekatan NIST dan standar ISO 27001:2013 (Studi kasus: Bapenda Provinsi Jawa Tengah). AITI, 21(2), 210–229. https://doi.org/10.24246/aiti.v21i2.210-229
Anthopoulos, L. (2017). Smart utopia VS smart reality: Learning by experience from 10 smart city cases. Cities, 63, 128–148. https://doi.org/10.1016/j.cities.2016.10.005
Behera, R. K., Bala, P. K., Rana, N. P., & Irani, Z. (2023). Responsible natural language processing: A principlist framework for social benefits. Technological Forecasting and Social Change, 188, 122306. https://doi.org/10.1016/j.techfore.2022.122306
Bhande, A. (2025). A Systematic Review of Data Security and Privacy-Preserving Models for Smart Cities and Edge Computing Environments. EPJ Web of Conferences, 341, 1024. https://doi.org/10.1051/epjconf/202534101024
Chourabi, H., Nam, T., Walker, S., Gil-Garcia, J. R., Mellouli, S., Nahon, K., Pardo, T. A., & Scholl, H. J. (2012). Understanding Smart Cities: An Integrative Framework. 2012 45th Hawaii International Conference on System Sciences, 2289–2297. https://doi.org/10.1109/HICSS.2012.615
Damaryanti, F., & Supriyanto, A. (2025). Optimization of the SRIKANDI E-Government System Using XGBoost-Based Classification and One-Class SVM Anomaly DetectionType. Information Technology International Journal, 3(1). https://doi.org/10.33005/itij.v3i1.50
ENISA. (2020). Guidelines for Securing the Internet of Things: Secure Supply Chain for IoT. https://www.enisa.europa.eu/publications/guidelines-for-securing-the-internet-of-things
Febrianto, F. A. (2023). Implementasi program aplikasi Srikandi (Sistem informasi kearsipan dinamis terintegrasi) pada Dinas Perpustakaan dan Kearsipan Kota Salatiga. Universitas Terbuka.
Ferrag, M. A., Maglaras, L. A., Janicke, H., Jiang, J., & Shu, L. (2017). Authentication Protocols for Internet of Things: A Comprehensive Survey. Security and Communication Networks, 2017, 1–41. https://doi.org/10.1155/2017/6562953
Gunawan, C. T. A., & Suryanto, Y. (2022). Maturity Level Analysis of Digital Evidence Handling on Integrated Criminal Justice System based on NIST SP800-53 Revision 5 Using NIST Maturity. Budapest International Research and Critics Institute (BIRCI-Journal). https://doi.org/10.33258/birci.v5i2.4861
Hashem, I. A. T., Chang, V., Anuar, N. B., Adewole, K., Yaqoob, I., Gani, A., Ahmed, E., & Chiroma, H. (2016). The role of big data in smart city. International Journal of Information Management, 36(5), 748–758. https://doi.org/10.1016/j.ijinfomgt.2016.05.002
Indonesia, P. P. R. (2018). Peraturan Presiden Nomor 95 Tahun 2018 tentang Sistem Pemerintahan Berbasis Elektronik. In Menteri Hukum Dan Hak Asasi Manusia Republik Indonesia.
Irani, Z., Abril, R. M., Weerakkody, V., Omar, A., & Sivarajah, U. (2023). The impact of legacy systems on digital transformation in European public administration: Lesson learned from a multi case analysis. Government Information Quarterly, 40(1), 101784. https://doi.org/10.1016/j.giq.2022.101784
ISO/IEC. (2022). ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements.
Jusniaty, J., Nurmiati, N., Wahid, A., Fitriani, F., & Rosnita, R. (2025). Digital Transformation In Local Government: Implementation Of Integrated Dynamic Archive Information System (Srikandi) At Village Level In Indonesia. International Conference of Business, Education, Health, and Scien-Tech, 2(1), 1073–1082.
Khatoun, R., & Zeadally, S. (2016). Smart cities. Communications of the ACM, 59(8), 46–57. https://doi.org/10.1145/2858789
Matusiak, K. K. (2022). Evaluating a digital community archive from the user perspective: The case of formative multifaceted evaluation. Library & Information Science Research, 44(3), 101159. https://doi.org/10.1016/j.lisr.2022.101159
Mellouli, S., Janssen, M., & Ojo, A. (2024). Introduction to the Issue on Artificial Intelligence in the Public Sector: Risks and Benefits of AI for Governments. Digital Government: Research and Practice, 5(1), 1–6. https://doi.org/10.1145/3636550
Miles, M. B., Huberman, A. M., & Saldaña, J. (2014). Qualitative data analysis: A methods sourcebook (3rd ed.). SAGE Publications.
Paul, J., Lim, W. M., O’Cass, A., Hao, A. W., & Bresciani, S. (2021). Scientific procedures and rationales for systematic literature reviews (SPAR‐4‐SLR). International Journal of Consumer Studies, 45(4). https://doi.org/10.1111/ijcs.12695
Preecha, J. (2025). CYBERSECURITY AND PUBLIC TRUST IN DIGITAL GOVERNANCE: FOCUSING ON CITIZEN TRUST. Proceeding of International Conference on Social Science and Humanity, 2(2), 26–37. https://doi.org/10.61796/icossh.v2i2.27
Puspitaningrum, A. C. (2025). Systematic Literature Review: Implementasi ITSM pada Perguruan Tinggi di Indonesia: Tren Penelitian, Praktik dan Rekomendasi. JURNAL TECNOSCIENZA, 10(1), 169–184.
Putri, N. A., & Handayani, N. S. (2025). Efektivitas Penggunaan Sistem Srikandi dalam Pengelolaan Arsip Dinamis di Dinas Perpustakaan dan Kearsipan Kabupaten Tulungagung. Librarium: Library and Information Science Journal, 2(2), 75–90. https://doi.org/10.53088/librarium.v2i2.1987
Roman, R., Zhou, J., & Lopez, J. (2013). On the features and challenges of security and privacy in distributed internet of things. Computer Networks, 57(10), 2266–2279. https://doi.org/10.1016/j.comnet.2012.12.018
Sari, D. P., Amaliana, I., Nugraha, L., Seftiawan, S., & Dzulfikar, H. (2025). Evaluasi manajemen layanan teknologi informasi dengan framework ITIL V4 pada sistem e-presensi BKPSDM Kabupaten Ciamis. Jurnal Ilmiah Informatika (JIMI), 10(2), 112–125.
Sauer, P. C., & Seuring, S. (2023). How to conduct systematic literature reviews in management research: a guide in 6 steps and 14 decisions. Review of Managerial Science, 17(5), 1899–1933. https://doi.org/10.1007/s11846-023-00668-3
Sicari, S., Rizzardi, A., Grieco, L. A., & Coen-Porisini, A. (2015). Security, privacy and trust in Internet of Things: The road ahead. Computer Networks, 76, 146–164. https://doi.org/10.1016/j.comnet.2014.11.008
Snyder, H. (2019). Literature review as a research methodology: An overview and guidelines. Journal of Business Research, 104, 333–339. https://doi.org/10.1016/j.jbusres.2019.07.039
Sofiyani, Z., Suprayitno, S., Fahmi, F., & Mahadewi, M. P. (2025). Toward Transparent Bureaucracy: NLP-Based Document Classification and Power Dynamics in the SRIKANDI System. Proceedings from the Document Academy, 12(2). https://doi.org/10.35492/docam/12/2/10
Sofyan, H., Kaswidjanti, W., & Ilmiyah, L. S. (2024). Information Security Index (ISI) 4.2 for Information Security Evaluation (Case Study: Sleman Regency Communication and Informatics Office) (pp. 188–200). https://doi.org/10.2991/978-94-6463-366-5_18
Suprayitno, S., Rahmi, R., & Sofiyani, Z. (2024). Imagining the Future of Records Management: An Analysis of the SRIKANDI in Indonesia through Documentation Studies. Proceedings from the Document Academy, 11(2). https://doi.org/10.35492/docam/11/2/8
Supriyanto, A., Jananto, A., Razaq, J. A., Hartono, B., & Damaryanti, F. (2025). Alignment of KAMI Index with Global Security Standards in Information Security Risk Maturity Evaluation. Cybernetics and Information Technologies, 25(2), 173–192. https://doi.org/10.2478/cait-2025-0018
Tabuni, Y., Warnars, H. L. H. S., Gaol, F. L., & Soeparno, H. (2025). Blockchain Applications in Smart Cities for Environmental Sustainability and Tourism Enhancement. 2025 4th International Conference on Creative Communication and Innovative Technology (ICCIT), 1–7. https://doi.org/10.1109/ICCIT65724.2025.11167269
Wimal, K., Cullen, G., & Donovan, J. (2025). Blockchain-Driven Smart Cities: Review of Key Applications and Emerging Trends. 2025 2nd International Conference on Advanced Innovations in Smart Cities (ICAISC), 1–8. https://doi.org/10.1109/ICAISC64594.2025.10959451
Yaqoob, I., Ahmed, E., Hashem, I. A. T., Ahmed, A. I. A., Gani, A., Imran, M., & Guizani, M. (2017). Internet of Things Architecture: Recent Advances, Taxonomy, Requirements, and Open Challenges. IEEE Wireless Communications, 24(3), 10–16. https://doi.org/10.1109/MWC.2017.1600421
Zhang, K., Ni, J., Yang, K., Liang, X., Ren, J., & Shen, X. S. (2017). Security and Privacy in Smart City Applications: Challenges and Solutions. IEEE Communications Magazine, 55(1), 122–129. https://doi.org/10.1109/MCOM.2017.1600267CM
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Agus Indra Cahaya, Taufik Fredy Kristianto, Prof. Dr. Aji Supriyanto, S.T., M.Kom (Author)
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
