Vulnerable To Attack, KPU Asks KPI For Unpublished Digital System Server Procurement

The atmosphere of the information dispute hearing in the KIP Courtroom, Jakarta, Wednesday (13/3/2024). BETWEEN/Good Ahmad Rizaldi.

The Representative of the General Elections Commission (KPU) as the respondent in the information dispute trial at the Central Information Commission (KIP) asked the trial panel regarding the procurement of the KPU digital system server not to be published. Expert from the Indonesian KPU Luqman Hakim said that in the procurement of the server there was information that could endanger the public. In addition, according to him, the KPU often gets hacking attacks on the system. "The procurement of the server must be excluded according to PPID (Information and Documentation Management Officer), so we will exclude the rest, we will hand it over to the assembly," said Luqman in the KIP Courtroom, Jakarta, quoted from Antara, Wednesday, March 13. The KPU conveyed this when given the opportunity by the trial assembly to answer the information dispute from the Indonesian Constitutional Rights Advocacy Foundation (Yakin) as the applicant. In a request for information with register number 002/KIP-PSIP/II/2024, the applicant asks for information about details of the KPU information technology infrastructure related to the 2024 election, including topology, physical servers, cloud servers (cloud storage) and networks, the location of each tool and network, to details of cybersecurity tools. The petitioner also requested details of the Alibaba Cloud service used, including the process of procuring cloud services and contracts between the Indonesian KPU or its representatives with Alibaba Cloud. "If server information is opened, it will be dangerous for us that without being informed to the public we are already overwhelmed, and that DPT data has been stolen," he said. Meanwhile, the KIP trial assembly asked the KPU to re-test the consequences of the request for information. In addition, the panel also asked the KPU to bring all server procurement documents at the KPU and other information technology systems. The panel also considered that the KPU's proposal that did not want to publish server procurement information did not have a clear legal basis. In addition, the panel also believes that not all information in the procurement document is confidential.

"It has been conveyed by the heads of the assembly that the consequences test must be based on clear laws and what kind of danger it poses, and also in the term," said KIP Commissioner KIP Chairman Syawaludin.