Security Evaluating Security of Insurance Agency Portal: An ISO/IEC 25023 Quality Model Approach

Information systems play a pivotal role in business operations, especially for insurance agency portals that facilitate interactions between agencies and companies, providing services like registration, training, and access to essential reports. This study delves into assessing the quality of these portals by employing the internationally recognized SQuaRE series standards, concentrating specifically on security aspects as measured by ISO/IEC 25023. The choice of ISO/IEC 25023 is strategic, given its comprehensive approach to security metrics and its widespread acceptance, ensuring a thorough security assessment. ISO/IEC 25023 testing is divided into several stages: defining security characteristics, defining attributes measurement and measuring every metric name based on sub criteria. The study evaluates and analyzes based on the results measurements and provide recommendations. The agency portal website must improve integrity and non-repudiation that have low scores, currently compromised by inadequate array access validation and the absence of digital signatures. based on the recommendations provided to achieve a high- quality system