DPR Officially Begins Discussion of Cybersecurity Bill, Submits Problem Inventory List to Government

The House of Representatives (DPR) will soon begin deliberations on the Security and Resilience Bill (RUU KKS) after officially submitting the Problem Inventory List (DIM) to the government on Monday (29/6). The DIM was handed over during a working committee formation meeting for the RUU KKS at Commission I of the DPR, which was also attended by Deputy Minister of Law and Human Rights, Eddy Hiariej, representing the government. “It is our great hope that this bill can be discussed immediately and receive joint approval between the government and the DPR in accordance with statutory provisions,” Eddy stated in his remarks. Chairman of Commission I of the DPR, Utut Adianto, requested that the government form a team for the discussion process of the RUU KKS. However, he also expressed hope that the government would not release the DIM or the bill draft prematurely to avoid hoaxes circulating among the public. “I also request at this stage that these drafts not be released yet, because there will be too many hoaxes. Later, when we have discussed it to a certain stage, if it is necessary, we will provide it to the public. That is all, ladies and gentlemen, the rest is as usual,” he said. There are a total of 10 points of substance in the Cybersecurity and Resilience Bill. Among other things, they regulate the implementation of cybersecurity, international cooperation, and criminal provisions in the cyber domain that have not been regulated by other laws. The list of points includes: 1. Implementation of cybersecurity for information infrastructure and critical information infrastructure, which includes the obligation for information infrastructure operators to protect the infrastructure they own, manage, and/or operate; 2. Implementation of cyber resilience, carried out by increasing human resource capacity, technological capacity, and business process capacity; 3. Implementation of international cooperation, where coordination between countries is required in the implementation of cybersecurity and resilience; 4. Strengthening the government’s role in implementing cybersecurity and resilience, from formulating national cybersecurity and resilience standards and policies, developing and enhancing human resource capacity including education, training, and competency improvement, fostering a national cybersecurity technology industry ecosystem, providing awards to critical information infrastructure operators that meet cybersecurity standards and have good cybersecurity performance, to monitoring internet traffic anomalies; 5. Implementation of technical audits, which is a systematic process of examination, tracing, and fact-finding regarding a cyber incident; 6. Regulation of public participation, where the public can participate in the implementation of cybersecurity and resilience either directly or indirectly; 7. Regulation of funding sources; 8. Regulation of investigation procedures; 9. Regulation of administrative sanctions; 10. Regulation of criminal provisions, where the core crimes have not been found or perfectly regulated in other laws.