Small cities in developing countries really need information that is safe and fast. Information security is very important in managing small cities in developing countries. Information technology is the best solution in managing information quickly and easily but is safe in its use. The purpose of this study is to analyze the condition of information security governance in small cities. This research uses measurement methods based on Information Security Governance, Information Security Risk Management, Information Security Management Framework, Information Asset Management, Technology, and Information Security. The results of this study indicate that security governance in small cities is still low and requires serious and comprehensive security improvements. The results of this study also found that the low level of information security management resulted in serious information security threats due to the low level of information security management. Serious ways and handling are needed to reduce time to do something, improve effectiveness, improve service information, introduce new services, increase the level of trust in investigating requests and services, facilitate services received, establish communication with users and improve service quality in small cities in the country developing.

Key words: information security, governance, small cities