A Socio-Technical Assessment of Information Security Management Using KAMI Index, ISO/IEC 27001:2022, and User Awareness
A gap is revealed between the two subsystems of the ISMS: the technical subsystem shows high overall readiness but is not fully optimal, with weaker domain in Personal Data Protection (level II) and the social subsystem for user awareness shows less than optimal according to user interviews.