83
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
3.
Containment The containment phase is crucial in the incident response process, aimed at halting the spread of the incident, preventing further damage escalation, and protecting the overall information technology infrastructure. The speed and accuracy of containment efforts significantly determine the effectiveness of cyber incident mitigation. Strategic actions that can be taken during this phase include: a. Isolation of Affected Systems Temporarily disconnecting network connectivity from systems indicated to be infected or compromised to prevent lateral movement by attackers to other systems. This isolation should be carried out both at the device and network levels, including VLAN segmentation or network port deactivation. b. Restriction of Malicious Network Traffic Reconfiguring firewall policies and network monitoring tools to restrict unauthorized or suspicious traffic. This includes blocking specific protocols, limiting communication to/from certain geographic locations, and implementing geofencing.
Made with FlippingBook Ebook Creator