Supplementary Data: Risk Exposure and Zero Trust Maturity Assessment Using ISO/IEC 27005, CISA ZTMM, and PPTG - A Case Study of a Hybrid-Infrastructure Bank in Indonesia

This repository contains the survey instruments, respondent-level maturity data, and supporting monitoring data underlying the paper "Risk Exposure and Zero Trust Maturity Assessment Using ISO/IEC 27005, CISA ZTMM, and PPTG: A Case Study of a Hybrid-Infrastructure Bank in Indonesia" (Sopian, L., Legowo, N., International Journal of Safety and Security Engineering, IIETA, [volume/issue/year once assigned]). The study assessed Zero Trust Architecture maturity and cyber risk exposure at an anonymized Indonesian commercial bank ("Bank XYZ") through triangulated data collection: a 15-item CISA Zero Trust Maturity Model (ZTMM) v2.0 questionnaire (n=45 respondents across three organizational levels), semi-structured interviews, and internal Key Risk Indicator (KRI) monitoring data.