Identify cybersecurity risks that could impact bank operations, such as ransomware, phishing attacks, or insider threats. Conduct in-depth analysis of the potential impact of various threats on critical assets, such as customer data or core banking systems. Develop strategies to mitigate risks, whether through technology, policies, or employee awareness raising Ensure that the bank's IT and security architecture is designed to remain functional during an incident, with redundancy and failover mechanisms. Recovery from Disruption Design and implement a robust Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP). Conduct cyber attack simulations and BCP/DRP trials at regular intervals to ensure readiness for real disruption Real-Time Monitoring, ensure a threat detection system that continuously monitors network activity to identify potential disruptions early on. Develop and maintain an incident response plan that allows teams to react quickly and effectively to security incidents. Forensic and Post-Incident Analysis investigates the root cause of incidents to prevent similar incidents from happening again in the future Internal Coordination Work closely with IT Security, SOC (Security Operations Center) and risk management teams to integrate security into all operational processes. External Coordination Collaborate with regulators (such as OJK and BI), law enforcement, and cybersecurity service providers to strengthen resilience strategies. Compliance Fulfillment, ensuring all policies, procedures, and technologies used are in accordance with security standards and regulations Building a Culture of Security Awareness Conduct training programs for all employees on the importance of cyber resilience, including the introduction of the latest threats and how to prevent them. Conduct Attack simulations such as phishing tests to improve employee readiness against real threats. Develop internal and external communication plans for use in emergency situations Continuous Evaluation and Improvement System Evaluation Periodically review and test the effectiveness of security policies and technologies. Technological Innovation and Adoption of new technologies such as AI, machine learning, and blockchain to increase resilience to threats. Security Audits Conduct internal and external audits to ensure compliance with industry best practices Data Security Secure sensitive data, such as customer and transaction information, through encryption and strict access controls

Jakarta Pusat