Resources · Blog · Tag

Indonesia.

Indonesian regulation and the local threat picture.

Tagged “Indonesia”

Blog31 Jul 2026

OJK Cyber Resilience Rules for Digital Banks in Indonesia 2026

Indonesia now has 17 licensed digital banks, more than any other country in Southeast Asia. Digital banking penetration has grown alongside them, from 31% of the population in 2022 to a projected 39%, roughly 75 million people, by 2026. Operating a digital bank Indonesia service places an institution.

Francesco Catozzo

Blog27 Jul 2026

What Is a Cybersecurity Audit? Types, Process, and Checklist

Most breaches don’t announce themselves. They start quietly, in a system nobody checked: an open port left over from a migration, a contractor account that was never disabled, a backup that hasn’t been tested since it was set up. A cybersecurity audit is how you find these before someone

Francesco Catozzo

Blog24 Jul 2026

What Is Ransomware? How It Works and How to Prevent It

Most guides describe ransomware as software that locks your files until you pay. That description is a decade out of date, and believing it is exactly what gets businesses caught. Modern ransomware doesn’t just lock your data. It steals it first, then encrypts what’s left, then threatens

Surya Maulana

Blog20 Jul 2026

What Is Social Engineering? Types and Real-World Attacks

Most cyberattacks don’t start with code. They start with a conversation. An attacker doesn’t need to break your firewall if they can convince someone to open the door. That’s social engineering: manipulating people into handing over access, information, or money. It skips the techn

Zentara Team

Blog16 Jul 2026

Data Breach Response: A Guide for Businesses

Most organisations do not fail at data breach response because they lack a plan. They fail because the clock had already been running for weeks before anyone noticed. Notification deadlines start when you become aware of a breach. That single word governs everything that follows. An organisation tha

Zentara Team

Blog15 Jul 2026

ISO/IEC 27701 Privacy Information Management System (PIMS)

Most of the guidance you will find on privacy information management systems is out of date. It tells you that a PIMS is an extension of ISO 27001, and that you need an ISO 27001 certificate before you can certify one. Several certification bodies still publish this on their websites today. It stopp

Francesco Catozzo

Third-Party Risk Management Under Singapore's Cybersecurity Act

Blog23 Jun 2026

A Guide to Hybrid Cloud and the US-Indonesia Data Deal

In February 2026, Indonesia and the United States signed a landmark trade agreement that quietly shifted how Indonesian companies move data across borders. For any business running part of its systems in the cloud, maintaining robust cloud security matters more than it first appears. The agreement s

Zentara Team

Blog22 Jun 2026

Indonesia’s Data Protection Authority and the Move to Active UU PDP Enforcement

Indonesia’s data protection law, called UU PDP (Law No. 27 of 2022), has been active since October 2024. Companies can already be penalised for breaking it. What is changing now in 2026 is who enforces it: the government is setting up a dedicated agency to check whether businesses follow the r

Zentara Team

Data Protection Impact Assessment (DPIA)

Blog19 Jun 2026

OT Security: How Attackers Reach Critical Systems

In June 2024, a single ransomware attack froze 282 public services across Indonesia. Immigration counters stopped. Airport queues stretched for hundreds of metres. The attackers didn’t break into some heavily guarded control room. They got into ordinary government IT systems, and from there they rea

Zentara Team

Blog18 Jun 2026

The 72-Hour Rule in UU PDP: A Guide for Fintech & E-Commerce

A customer opens your app, taps a button, and asks you to delete everything you hold about them. From that moment, the clock starts. Under Indonesia’s data protection law, you have 72 hours to act. For a fintech platform or an online store handling thousands of these requests, doing it by hand

Francesco Catozzo

Blog13 May 2026

Digital Bayanihan: Unifying Cyber Defence in the Philippines

As cyber threats grow in scale and sophistication, national security is increasingly shaped by digital resilience. Governments worldwide are strengthening legislation to protect critical infrastructure, digital services, and citizen data. In the Philippines, the proposed Cybersecurity Act represents

Regal Star Rauniyar

Uncategorized08 May 2026

Closing Indonesia’s Cybersecurity Capacity Gap Through Automation

Indonesia’s digital economy is expanding faster than its cybersecurity workforce. As organisations accelerate cloud adoption, digital banking, and critical infrastructure modernisation, the demand for skilled cybersecurity professionals continues to outpace supply. This gap is no longer just a

Trimikha Valentius