OJK Drafts Cybersecurity Guidelines for Online Lending Industry

The Financial Services Authority (OJK) is currently drafting cybersecurity and resilience guidelines for the online lending (pindar) industry as an effort to strengthen protection against the risk of cyberattacks, an OJK official said. The guidelines are expected to serve as a reference for operators in conducting regular cyber risk assessments, said Agusman, Chief Executive of OJK’s Supervisory Board for Financing Institutions, Venture Capital, and Other Financial Institutions (PVML). The guidelines are also expected to help improve cybersecurity and resilience capabilities, he said during a press conference on the results of the OJK Board of Commissioners’ Monthly Meeting (RDK) in Jakarta on Tuesday. Agusman acknowledged that cyber risk is a primary concern in the pindar industry, given that all business processes are conducted through digital platforms. Therefore, pindar operators need to implement adequate cyber risk management to protect data and maintain system reliability. OJK recorded that the pindar industry’s outstanding financing grew 25.88 percent year-on-year (yoy) to Rp105.14 trillion in June 2026. This financing growth was accompanied by an aggregate non-performing loan rate, or 90-day default rate (TWP90), of 4.26 percent.