Indonesian Financial Services Authority
c) End-to-End Encryption - Implement end-to-end encryption (E2EE) 3 for all data exchanges within the network and with external entities to ensure that data is encrypted from the point of origin to the point of destination, limiting access even in transit.
2.
Secure Storage Solutions
Data storage environments must be secured with multiple layers of protection that includes the deployment of firewall servers and strict physical security measures.
3.
Authentication and Access Controls
Implementing robust authentication mechanisms is essential to verifying the identity of users accessing data. Multi-factor Authentication (MFA) should be employed to add an extra layer of security. Additionally, password policies should enforce strong, unique passwords that are regularly updated during both database storage and login processes.
3 Encryption end-to-end encryption (E2EE), https://www.techtarget.com/searchsecurity/definition/ end-to-end-encryption-E2EE
25
Made with FlippingBook. PDF to flipbook with ease