10
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
1.1 Background
Article 215 of Act Number 4 of 2023 concerning the Development and Strengthening of the Financial Sector (P2SK Act) mandates that one of the principles of Financial Sector Technology Innovation (ITSK), including the Digital Financial Asset and Crypto Asset (AKD/ AK) industries, is the implementation of the security and reliability of information systems, including cyber resilience. Presidential Regulation Number 47 of 2023 on the National Cybersecurity Strategy and Cyber Crisis Management also regulates the importance of cybersecurity and incident response. The mandate of the Government Regulation of the Republic of Indonesia Number 49 of 2024 includes, among other things, the transfer of regulatory and supervisory authority over digital financial assets, including crypto assets, from the Commodity Futures Trading Supervisory Agency (BAPPEBTI) to Indonesian Financial Services Authority (OJK) on January 10, 2025. To carry out this supervisory and regulatory duty, OJK issued OJK Regulation Number 27 of 2024 concerning the Implementation of Trading in Digital Financial Assets, including Crypto Assets, which also emphasizes the importance of cybersecurity and cyber resilience. Providers of Digital Financial Asset Trading, hereinafter referred to as Providers, include Bourses, Clearing Institutions for Guarantees and Settlements, Custodians, Exchanges, and other parties designated by OJK. The cybersecurity landscape in Indonesia is rapidly evolving, driven by the increasing use of technology in the financial services sector. However, this development also brings cybersecurity challenges, including the risk of cyberattacks, data breaches, and other illegal activities. Cybersecurity has become a major concern among Financial Services Industry actors.
Made with FlippingBook Ebook Creator