Cybersecurity Guideline Digital Financial Asset Trading Pro…

59

Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia

4.1.7 Wallet Protection

To ensure the protection of consumer assets, Providers, particularly Exchanges and Custodians, must evaluate their wallet management systems according to strict functional and security standards, with attention to the following points: 1. Security Features a. Of the 30% of consumer assets managed by Exchanges, 70% must be stored in cold wallets, as stipulated in Article 91 paragraph 3 of OJK Regulation Number 27 of 2024. b. The use of hot wallets is only permitted for operational purposes and must be equipped with an authorization system and multi-layered approval for security purposes, such as multi-signature. c. Wallets must implement multi-layered protection that includes but is not limited to:

• Physical security, including device separation • Confidentiality of physical storage locations • Multi-Party Computing features • Air gap features and Hardware Security Module (HSM) • Disaster resilience • Access and control SOPs

Made with FlippingBook Ebook Creator