123
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
No Ref
Domain Sub-Domain Technical Checklist
Status
Secure storage media
21
Cybersecuri- ty Implemen- tation
The data storage environment is protected
4.1.3 (point 1)
Fulfilled Partially Fulfilled Unfulfilled
by multiple security layers, and can be equipped with both
physical and non- physical (software) security measures. a. Networks : application
Description
of WAF, VPN, DDoS Protection, physical firewall
b. Servers : OS
hardening, database encryption, servers locked and possessing redundant power supply (UPS) c. Device and endpoint: EDR, MDM, port- blocking Activities on storage media must record user or system identity, access time, and type of operation. These access logs must be tamper- proof to maintain log integrity.
Secure storage media
22
Cybersecuri- ty Implemen- tation
4.1.3 (point 2)
Fulfilled Partially Fulfilled Unfulfilled
Description
Secure storage media
23
Cybersecuri- ty Implemen- tation
Ensuring that the infrastructure of data center and
4.1.3 (point 3)
Fulfilled Partially Fulfilled Unfulfilled
backup data center contains equivalent configurations, capacities, and security levels (1:1 ratio)
Description
Made with FlippingBook Ebook Creator