Supplementary Materials for "Incident-Driven Information System Risk Management Using ISO 31000:2018, STRIDE, and CIA Triad: A Case Study of an Indonesian Manufacturer"

Supplementary materials for an article accepted for publication in the International Journal of Safety and Security Engineering. The dataset provides a transferable reference model for ISO 31000:2018 implementation in Indonesian manufacturing, grounded in the Clause 6 cycle, STRIDE threat modelling, and the CIA Triad. It includes three research instruments (perception survey, semi-structured interview guide, field observation sheet), an Excel file with six aggregated data sheets, three reference templates (Clause 6 mapping, STRIDE-CIA joint analysis, and Likelihood × Impact 5×5 heatmap), and a de-identified triangulation summary. The case organisation is referred to as "the case organisation" or "PT. ABC". All materials are anonymised. Raw transcripts, internal incident reports, IT audit findings, and per-respondent data are not included due to confidentiality agreements.