Dari Pesan Mencurigakan Menuju Respons Aman: Edukasi Keamanan Siber Berbasis Kasus Bagi Pegawai KCP Bank Mandiri Perak Timur Surabaya

Abstract

Bank employees make security decisions while processing digital communications, transactions, and sensitive information. A preliminary survey and semi-structured interview with the management of Bank Mandiri Perak Timur Sub-Branch, Surabaya, identified the need for contextual learning on phishing, social engineering, credential protection, personal data, and incident reporting. This community engagement program was implemented from 25 May to 5 June 2026, with the main webinars held on 3-4 June. The intervention combined needs assessment, role-relevant case design, concise explanation, interactive discussion, and qualitative reflection. The evaluation drew on process observation, scenario discussion, and participant feedback without collecting customer data or internal security information. The learning process centered on five safe decisions: pause before acting, inspect message indicators, verify through official channels, protect data and access, and report suspected incidents. Case discussion also positioned cybersecurity as a shared organizational responsibility rather than an issue assigned solely to information-technology personnel. The program produced an initial five-step response framework and a needs-to-response matrix for future role-based training. These outputs are meaningful because they translate technical and legal information into practical decisions relevant to daily banking work. Further evaluation is required to assess retention and behavioral application.