118
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
Checklist: Implementation of Cybersecurity Guidelines for Providers
No Ref
Domain Sub-Domain Technical Checklist
Status
Data Protection Policy
1
Data Protec- tion
Complying with personal data protection regulations, including the determination of data storage location and transfer mechanisms in accordance with Law No. 27/2022 and OJK Regulation No. 27/2024. Maintaining data confidentiality using adequate cryptography standard encryption (e.g.: AES-256), therefore, the data remain secure despite being accessed by unauthorized parties. Ensuring data integrity by preventing illegal or unintentional changes. For instance, by applying privacy- by-design principle in the system architecture and controlled change process. Ensuring data and system availability through secure data backup and automatic failover system, so that the services continue to run when needed.
3.1
Fulfilled Partially Fulfilled Unfulfilled
Description
Confidentiality
2
Information Security Principles
3.2.1
Fulfilled Partially Fulfilled Unfulfilled
Description
Integrity
3
Information Security Principles
3.2.2
Fulfilled Partially Fulfilled Unfulfilled
Description
Availability
4
Information Security Principles
3.2.3
Fulfilled Partially Fulfilled Unfulfilled
Description
Made with FlippingBook Ebook Creator