cybersecurity strategy 2021 updatebudi.rahardjo.id/files/br-ojk-2021-1.pdf · •ojek online:...

INDONESIA COMPUTER EMERGENCY RESPONSE TEAM

Cybersecurity Strategy

Budi Rahardjo@rahard

2021


VLSI/Security/Social Media/IoT/AI/Big Data

• Lecturer at ITB• Manage .ID domain 1997-

2005• Founder & chairman of

ID-CERT• Serial technopreneur

22021 BR - Security Strategy 2021

INDONESIA COMPUTER EMERGENCY RESPONSE TEAM2021 BR - Security Strategy 2021 3


Pemanfaatan Teknologi Informasi di Indonesia

• Ojek online: Gojek, Grab, {berbagai layanan ojek lokal}• Fintech: Gopay, Ovo, Dana, Jenius, ...• E-commerce: Tokopedia, Shopee, Bukalapak, Blibli, Lazada, ...• Travel: Traveloka, Tiket.com, ...• Komunikasi: WhatsApp, Telegram, Signal, ...• Media Sosial: Instagram, Facebook, Twitter, tiktok, ...• E-government: pajak,

Tingginya ketergantungan kita kepada IT

2021 BR - Security Strategy 2021 4


Recent Security Cases in Indonesia



New WA Privacy Policy & Terms and Condition



Kreditplus



Siapa Yang Bertanggungjawab?

• Dalam setiap kasus, selalu pelanggan (nasabah) yang disudutkan• Ketika sebuah layanan terkena retas, maka pengguna yang harus

sibuk mengganti password

• Harus ada sanksi kepada penyedia jasa• Agar tidak lalai• Ada aspek kehati-hatian• Jera• (Secukupnya dan tidak terlalu memberatkan juga)



Tanggap Darurat | Emergency Response

• Mulai diwajibkan keberadaan organisasi tanggap darurat (emergency response) di berbagai bidang yang dianggap kritis (critical infrastructure)• Bidang-bidang yang dianggap infrastruktur kritis• (Rancangan) Peraturan Badan Siber dan Sandi Negara tentang

Perlindungan Infrastruktur Informasi Kritis nasional• https://bssn.go.id/wp-content/uploads/2019/09/rancangan-Perban-

PIIKN-V6.pdf



Sektor Infrastruktur Informasi Kritis Nasional

a) penegakan hukumb) energi dan sumber daya mineralc) transportasid) keuangan dan perbankane) kesehatanf) teknologi informasi dan komunikasig) pangan (pertanian)h) pertahanan dan industri strategisi) layanan darurat (sosial)j) sumber daya airk) pemerintah



Strategy



#1: (Secruity) Information Sharing

• Problem: lack of information sharing• The need of information sharing & analysis center (ISAC)• Everybody is developing Security Operation Center (SOCs) and

Incident Response Teams (IRTs/emergency response team), but still not sharing information• The bad guys are sharing information!

• To do: Information sharing platform, standard & procedures



#2: Bulit-in Security (in new tech)

• Security is not considered when developing new technologies• It may be too late when considered

later• eg. attacked by vending machines

• Security must be built-in• Internet of Secure Things• ...

https://liveatpc.com/attacked-by-a-vending-machine-botnet-strikes-again-with-ddos-attack-on-university/



#3: Human Aspects: Awareness & Skills

“The man behind the gun”

• Security awareness for top management, because security is a top down initiative

• Increase in capability & capacity of technical personels



Concluding Remarks

• Ketergantungan akan teknologi informasi (dan teknologi lainnya) akan semakin meningkat• Aspek keamanan (security) akan tetap menjadi salah satu topik

yang utama• Cybersecurity strategy

• Information sharing• Built-in security• Human resources


cybersecurity strategy 2021 updatebudi.rahardjo.id/files/br-ojk-2021-1.pdf · •ojek online:...

Documents