Appointed By The Minister Of Communication And Information About Data Leaks, BSSN: Cybersecurity Joint Responsibility

Photo by Clint left on Unsplash

JAKARTA - The National Cyber and Crypto Agency (BSSN) responded to the statement by the Minister of Communication and Information Johnny G Plate regarding data leaks and cyber attacks is the domain of BSSN. The Minister of Communication and Information's statement was made during a working meeting with Commission I of the Indonesian House of Representatives, Wednesday, September 7.

BSSN spokesman Ariandi Putra emphasized that the issue of cyber attacks and data leaks is the responsibility of all stakeholders.

"Cyber security is basically a shared responsibility for all stakeholders, both State Organizers, Business Actors, Academics, and Community/People," Ariandi said in a statement, Friday, September 9.

Ariandi explained, actually BSSN has made policies by compiling guidelines for securing and implementing Electronic Systems as stated in the BSSN Regulation no. 8 of 2020 and guidelines for information security management, technical standards and procedures as stated in BSSN Regulation no. 4 of 2021. He also mentioned PP No. 71 of 2019 concerning the Implementation of Electronic Systems and Transactions which states that cybersecurity is a shared responsibility.

"In accordance with the mandate of PP No. 71 of 2019 concerning the Implementation of Electronic Systems and Transactions (PP PSTE article 3) it is stated that 'Every Electronic System Operator must organize an Electronic System in a reliable and safe manner and be responsible for the operation of the Electronic System as it should be'," explained Ariandi.

In other words, he continued, every electronic system operator (system owner) must organize its electronic system security. "Therefore, system owners must apply information security aspects in the management and implementation of electronic systems," said Ariandi. Previously, the Minister of Communication and Information Johnny G Plate responded to the issue of data leaks that have recently occurred and have become a public spotlight. According to Johnny, attacks on digital spaces are not the domain and main tasks of the Ministry of Communication and Information, but the National Cyber and Crypto Agency (BSSN). Therefore, Johnny assessed that the spotlight on data leaks should be conveyed to BSSN, not the Ministry of Communication and Information. "Against all attacks on our digital spaces, we have become the technical domain of the National Cyber and Crypto Agency so that all questions raised in relation to cyber attacks, we certainly cannot answer and on behalf of BSSN," Johnny said at a working meeting with Commission I of the DPR at the Parliament Complex, Senayan, Jakarta, Wednesday, September 7.

Johnny emphasized that it was not the domain and task of Kominfo in terms of technical matters of cyber attacks. Due to cyber attacks, he said, it is entirely the domain of the National Cyber and Crypto Agency.

Even so, Johnny ensured that his party would continue to coordinate with cross-ministerial and institutional ministries related to the incidents of the data leak. Although, he said, the Ministry of Communication and Information could not work beyond the authority contained in PP 71 of 2019.

"Kominfo can only work on available legal umbrellas and available legal rules, cannot work beyond their authority, let alone hit the main functions of institutions or other institutions. In this case, we want to convey it under PP 71 of 2019 against all cyber attacks, leading sectors, and important domains. main tasks and functions, not in Kominfo," said Johnny.