BSSN States Cyber Security Must Be a Primary Aspect of Indonesia One Data Bill

Jakarta (ANTARA) - The Head of the National Cyber and Crypto Agency (BSSN), Lieutenant General (Ret.) Nugroho Sulistyo Budi, stated that cyber security must be a primary and mandatory aspect within the Indonesia One Data Bill (RUU SDI), given that data has become vital infrastructure for the nation. This was conveyed during a meeting with the Indonesian House of Representatives’ Legislative Body (Baleg) in Jakarta on Monday, with the hope that cyber security will not be sidelined while preparing the foundation for Indonesia’s digital government.

“The security aspect is no longer an option, but is a mandatory element attached to the regulation of data, applications, and the infrastructure of Indonesia One Data,” said Sulistyo. During the Q&A session, Sulistyo added that without mandatory security regulations in digital government implementation, many government system developers tend to overlook cyber security in their systems. BSSN findings revealed that some agency system managers prioritise practicality, which inadvertently compromises the multi-layered protection perimeters of their digital systems.

Reflecting on this, security must be established as a standard maintained within the Indonesia One Data Bill regulations to ensure that such issues are not overlooked in the future and that every managed data set receives optimal protection. According to Sulysto, every piece of data secured within the Indonesia One Data mechanism must at least satisfy five pillars of cyber security: confidentiality, integrity, availability, authenticity, and non-repudiation. Regarding the pillar of integrity, data management must guarantee that the managed data is not illegally modified and remains accurate. There is also the pillar of availability, where data managers must ensure that data and systems are always accessible when needed. The fourth pillar is authenticity, where data managers must ensure that data can be recognised as being sent by a legitimate sender and has not been manipulated to ensure data integrity. Finally, the pillar of non-repudiation ensures that data management can guarantee that the sender cannot deny the transmission of the data.