55
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
3
Extranet Zone lies between the Intranet and Internet zones. This zone is designed to provide limited access to trusted external parties, such as business partners or vendors, to certain resources within the internal network. The Extranet Zone is often implemented using VPNs (Virtual Private Networks) and role-based access control (RBAC) to ensure that only specific users can access relevant data. The extranet requires layered protection, including strong authentication and traffic encryption, as it involves third- party access to the organization’s internal environment 8 .
The implementation of Network Segmentation is recommended by Indonesia’s National Cyber and Crypto Agency in BSSN Regulation Number 8 of 2023 on the Protection Framework for Vital Information Infrastructure (IIV), as well as by the Canadian Centre for Cyber Security, the National Security Agency (NSA), and the Cybersecurity & Infrastructure Security Agency (CISA) in the United States. In addition, the Securities and Futures Commission (SFC) in Hong Kong has also issued similar guidance for financial institutions in the capital markets, including securities firms and brokers.
8 International Organization for Standardization, ISO/IEC 27033-1:2015 - Information technology - Security techniques - Network security
Made with FlippingBook Ebook Creator