Etika Profesi Pengembang Sistem Informasi dalam Pencegahan Insider Threat
DOI:
https://doi.org/10.66052/ztcz1j45Keywords:
professional ethics, insider threat, information systems, software development, information securityAbstract
Insider threat represents a security risk arising from individuals who have authorized access to organizational systems and information. In information system development, developers may interact with source code, databases, credentials, configurations, and deployment environments, making professional responsibility an important part of security protection. This study aims to synthesize the relationship between professional ethics of information system developers and insider threat prevention through a systematic literature review. Literature published primarily from 2021 to 2026 was examined from scholarly sources covering information security, software engineering, ethics, and secure software development. The synthesis indicates that privacy, confidentiality, security, responsibility, accountability, and professional judgment are ethical principles with direct implications for insider threat prevention. These principles can be operationalized through access control, least privilege, authentication, separation of duties, logging and audit trails, security monitoring, and secure software development practices. The study produces an integrative mapping that connects ethical principles, potential insider behaviors, security objectives, and preventive controls. The mapping positions professional ethics as a normative foundation that should be translated into concrete security practices throughout the software development life cycle.
Downloads
References
. Inayat, M. Farzan, S. Mahmood, M. F. Zia, S. Hussain, and F. Pallonetto, “Insider threat mitigation: Systematic literature review,” Ain Shams Engineering Journal, vol. 15, no. 12, Art. no. 103068, 2024. doi: 10.1016/j.asej.2024.103068
N. Pathirana, R. Roberts, H. Kalutarage, and C. D. McDermott, “Integrating human factors into insider threat detection – A systematic review,” ACM Computing Surveys, vol. 58, no. 10, Art. no. 260, pp. 1–37, 2026. doi: 10.1145/3798089
S. Prabhu and P. Dell, “A structured review of insider cybersecurity behaviour studies,” Information Security Journal: A Global Perspective, vol. 34, no. 6, pp. 655–682, 2025. doi: 10.1080/19393555.2025.2543458
N. Balagopal and S. K. Mathew, “Exploring the factors influencing information security policy compliance and violations: A systematic literature review,” Computers & Security, vol. 147, Art. no. 104062, 2024. doi: 10.1016/j.cose.2024.104062
M. N. Al-Mhiqani, T. Alsboui, T. Al-Shehari, K. H. Abdulkareem, R. Ahmad, and M. A. Mohammed, “Insider threat detection in cyber-physical systems: A systematic literature review,” Computers & Electrical Engineering, vol. 119, Art. no. 109489, 2024. doi: 10.1016/j.compeleceng.2024.109489
F. Alzaabi and A. Mehmood, “A review of recent advances, challenges, and opportunities in malicious insider threat detection using machine learning methods,” IEEE Access, vol. 12, pp. 30907–30927, 2024. doi: 10.1109/ACCESS.2024.3369906
A. Georgiadou, S. Mouzakitis, and D. Askounis, “Detecting insider threat via a cyber-security culture framework,” Journal of Computer Information Systems, vol. 62, no. 4, pp. 706–716, 2022. doi: 10.1080/08874417.2021.1903367
M. Jeong and H. Zo, “Preventing insider threats to enhance organizational security: The role of opportunity-reducing techniques,” Telematics and Informatics, vol. 63, Art. no. 101670, 2021. doi: 10.1016/j.tele.2021.101670
R. Alidoosti, P. Lago, M. Razavian, and A. Tang, “Exploring ethical values in software systems: A systematic literature review,” Journal of Systems and Software, vol. 226, Art. no. 112430, 2025. doi: 10.1016/j.jss.2025.112430
J. Gogoll, N. Zuber, S. Kacianka, T. Greger, A. Pretschner, and J. Nida-Rümelin, “Ethics in the software development process: From codes of conduct to ethical deliberation,” Philosophy & Technology, vol. 34, pp. 1085–1108, 2021. doi: 10.1007/s13347-021-00451-w
S. E. Biable, N. M. Garcia, and D. Midekso, “Proposed ethical framework for software requirements engineering,” IET Software, vol. 17, no. 4, pp. 526–537, 2023. doi: 10.1049/sfw2.12136
H. Nina, J. A. Pow-Sang, and M. Villavicencio, “Systematic mapping of the literature on secure software development,” IEEE Access, vol. 9, pp. 36852–36867, 2021. doi: 10.1109/ACCESS.2021.3062388
R. A. Khan, S. U. Khan, H. U. Khan, and M. Ilyas, “Systematic literature review on security risks and its practices in secure software development,” IEEE Access, vol. 10, pp. 5456–5481, 2022. doi: 10.1109/ACCESS.2022.3140181
S. Groll, L. Fuchs, and G. Pernul, “Separation of duty in information security,” ACM Computing Surveys, vol. 57, no. 7, Art. no. 180, pp. 1–35, 2025. doi: 10.1145/3715959
Z. Zulkifli, N. H. binti Abd Rahim, T. Alam, F. H. Yusoff, and M. M. Rahman, “Uncovering ethical values in information systems development methodologies: A systematic literature review,” Malaysian Journal of Computing, vol. 11, no. 1, pp. 2421–2436, 2026. doi: 10.24191/mjoc.vo11i1.9810
M. N. Alraja, U. J. Butt, and M. Abbod, “Information security policies compliance in a global setting: An employee’s perspective,” Computers & Security, vol. 129, Art. no. 103208, 2023. doi: 10.1016/j.cose.2023.103208
A. Rezaei Nasab, M. Shahin, S. A. Hoseyni Raviz, P. Liang, A. Mashmool, and V. Lenarduzzi, “An empirical study of security practices for microservices systems,” Journal of Systems and Software, vol. 198, Art. no. 111563, 2023. doi: 10.1016/j.jss.2022.111563
C. Weir, I. Becker, and L. Blair, “Incorporating software security: Using developer workshops to engage product managers,” Empirical Software Engineering, vol. 28, Art. no. 21, 2023. doi: 10.1007/s10664-022-10252-0
E. Halme, M. Jantunen, V. Vakkuri, K. K. Kemell, and P. Abrahamsson, “Making ethics practical: User stories as a way of implementing ethical consideration in Software Engineering,” Information and Software Technology, vol. 167, Art. no. 107379, 2024. doi: 10.1016/j.infsof.2023.107379
T. A. Griffin, B. P. Green, and J. V. M. Welie, “The ethical agency of AI developers,” AI and Ethics, vol. 4, pp. 179–188, 2024. doi: 10.1007/s43681-022-00256-3
N. Tjikhoeri, L. Olson, and E. Guzmán, “The best ends by the best means: Ethical concerns in app reviews,” Empirical Software Engineering, vol. 29, Art. no. 138, 2024. doi: 10.1007/s10664-024-10463-7
S. M. Marebane and R. T. Hans, “A comparative study on the ethical responsibilities of key role players in software development,” Software, vol. 2, no. 4, pp. 504–516, 2023. doi: 10.3390/software2040023
C. Cociancig, H. Heuer, and A. Breiter, “AI ethics unwrapped: An empirical investigation of ethical principles in collaborative ideation processes,” AI Ethics, vol. 5, pp. 3159–3172, 2025. doi: 10.1007/s43681-024-00638-9
E. Nurmiati and M. F. Aqeel, “Tinjauan etika profesi IT dalam menghadapi ancaman cyber crime di Indonesia,” Jurnal Sistem Informasi dan Ilmu Komputer, vol. 4, no. 2, pp. 13–22, 2026. doi: 10.59581/jusiik-widyakarya.v4i2.6168
S. Anugrah, M. Z. Himawan, N. R. Qalby, and E. Nurmiati, “Pengaruh etika profesi terhadap keamanan informasi dalam konteks kebocoran data BSI (Bank Syariah Indonesia): Studi literatur sistematis,” Jurnal Tata Kelola dan Kerangka Kerja Teknologi Informasi, vol. 11, no. 2,
A. Bayhaqi, A. S. Rohyan, and L. Swastina, “Etika profesi dalam pengembangan dan pengelolaan sistem informasi di era transformasi digital,” Majalah Ilmiah METHODA, vol. 16, no. 2, pp. 204–210, 2026. doi: 10.46880/methoda.Vol16No2.pp204-210
K. Rindell, J. Ruohonen, J. Holvitie, S. Hyrynsalmi, and V. Leppänen, “Security in agile software development: A practitioner survey,” Information and Software Technology, vol. 131, Art. no. 106488, 2021. doi: 10.1016/j.infsof.2020.106488
IEEE-CS/ACM Joint Task Force on Software Engineering Ethics and Professional Practices, “Software engineering code of ethics and professional practice,” Science and Engineering Ethics, vol. 7, no. 2, pp. 231–238, 2001. doi: 10.1007/s11948-001-0044-4
M. J. Page et al., “The PRISMA 2020 statement: An updated guideline for reporting systematic reviews,” BMJ, vol. 372, Art. no. n71, 2021. doi: 10.1136/bmj.n71
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Journal of Communication Science and Public Administration
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
