119
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
No Ref
Domain Sub-Domain Technical Checklist
Status
Accountability
5
Information Security Principles
Recording all operational activities and system access systematically through secure logging mechanism (immutable), as well as implementing SIEM and external audits to ensure compliance. Using strong and adaptive authentication methods, including requiring Multi-Factor Authentication (MFA) for all accounts with access to sensitive systems or digital assets. Managing access rights based on roles by implementing Role-Based Access Control (RBAC) and the principle of least privilege, so that only authorized parties can access or modify certain systems and data. repudiation for consumer transactions with mechanisms such as digital signatures or immutable transaction records, therefore, every action is accountable and cannot be denied.
3.2.4
Fulfilled Partially Fulfilled Unfulfilled
Description
Authentication
6
Information Security Principles
3.2.5
Fulfilled Partially Fulfilled Unfulfilled
Description
Authorization
7
Information Security Principles
3.2.6
Fulfilled Partially Fulfilled Unfulfilled
Description
Non-repudiation Ensuring non-
8
Information Security Principles
3.2.7
Fulfilled Partially Fulfilled Unfulfilled
Description
Made with FlippingBook Ebook Creator