77
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
c. Providers should also actively establish communication with regulators to obtain guidance on compliance issues and proactively adapt to regulatory changes. d. Conducting periodic evaluations of collaborations to assess their effectiveness and direct benefits received, such as improved internal capacity or quicker access to threat information. 4. Developing Information-Sharing Media a. Providers and Associations may develop technology- based information sharing media that support real- time information sharing while ensuring the security of sensitive information. b. Defining access policies for the information sharing media, ensuring only authorized or designated personnel have access to the platform. 5. Conducting Joint Training a. Conducting regular joint training involving stakeholders from various industries to enhance awareness and technical capacity in detecting and responding to security incidents. b. Training topics may include ransomware recovery scenarios, DDoS attack mitigation, phishing simulations, and analysis of AML/KYC standards and suspicious transaction reporting. c. Providers are also encouraged to develop a bug bounty program as part of a collaborative approach with the ethical hacker community and to evaluate training performance to continuously refine their security strategies.
Made with FlippingBook Ebook Creator