Cybersecurity Guideline Digital Financial Asset Trading Pro…

144

Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia

No Ref

Domain Sub-Domain Technical Checklist

Status

Resource Allocation

103

Incident Response

Integrating incident response tools and platforms with other security controls (e.g., firewalls, IDS) to accelerate response and coordinate threat mitigation automatically. Establishing incident communication procedures: issuing official notifications explaining the incident and mitigation measures to the public/regulators, and coordinating with cybersecurity companies, law enforcement agencies, and other external parties as necessary. Having SOPs for incident reporting obligations to authority (OJK) in accordance with regulations, by submitting official incident reports within the specified time frame. Possessing Risk Assessment Procedures that at least contain the following points: 1. Vulnerability Assessment 2. Penetration Testing 3. Risk Modeling 4. Compliance Review

4.4.2 (point 1)

 Fulfilled  Partially Fulfilled  Unfulfilled

Description

Cybersecurity Synergy

104

Incident Response

4.4.3 (point 1)

 Fulfilled  Partially Fulfilled  Unfulfilled

Description

Incident Reporting

105

Incident Response

4.4.4

 Fulfilled  Partially Fulfilled  Unfulfilled

Risk Assessment

106

Cyber Risk Management

5.1

 Fulfilled  Partially Fulfilled  Unfulfilled

Description

Made with FlippingBook Ebook Creator