Indonesia's Data Centre Security: Integrating Physical and Cyber Defences Key to Digital Resilience

Indonesia is in the midst of a data centre construction boom, driven by its ambition to become a digital hub in Southeast Asia. However, the rapid growth of this infrastructure brings increasingly complex security challenges. Prabhuraj Patil, Senior Director, Physical Access Control Solutions, ASEAN & India Subcontinent at HID, stressed that digital resilience can no longer rely solely on cyber defences.

According to Patil, companies often fall into the trap of a dichotomy between cyber threats and physical security. In reality, the two are interconnected; a weakness in physical access can become an entry point that cripples even the most sophisticated cyber defences.

One of the biggest risks facing companies in Indonesia is fragmented security systems. Many organisations still manage access cards, CCTV, biometrics, and digital identities separately. Patil explained that this approach creates dangerous ‘blind spots’.

‘When an incident occurs, security teams must manually gather data from various systems. This wastes valuable time and increases the chance of missing critical information,’ Patil said. He urged companies to shift to unified identity governance to improve visibility and response times to threats.

Indonesia is considered well-positioned to adopt advanced technologies like mobile credentials and biometrics. The government’s commitment through the Automated Biometric Identification System (ABIS) and Digital Population Identity (IKD) provides a solid foundation. However, major obstacles remain in the form of reliance on legacy systems and interoperability issues.

Addressing concerns about biometric data privacy, Patil asserted that security and privacy are not contradictory. ‘Privacy must be part of the system design from the very first stage. Data must be encrypted, stored securely, and collected with clear consent to build public trust,’ he added.

To strengthen operational resilience over the next five years, Patil suggested three strategic steps for data centre managers and government agencies. The indirect entry of global players like Microsoft, Google, and AWS into Indonesia has already raised domestic security standards. Patil is optimistic that by integrating security into operational design from the outset, Indonesia’s data centres will be able to meet global investor expectations and safeguard national digital sovereignty.