Indonesia National Cybersecurity Review: Before and After Establishment National Cyber and Crypto Agency (BSSN)

Abstract

Nowadays, the cybersecurity concern is increasing due to the development of information technology. Threats and methods of attack on cybersecurity at all times occur very quickly. Indonesia was attacked by 28,430,843 in 2015 and increased to 135,672,984 cyber attacks in 2016, and became the 10th largest country in the world with encryptor/ransomware malware infection in 2017. Previous studies have shown that national cybersecurity in Indonesia have not been properly managed. This can be shown from the lack of cooperation among government agencies, the lack of national strategies, governance, policies, and regulations on cybersecurity, and cyber security infrastructure in Indonesia are still not integrated with each other. The problems are caused by the absence of an organization that focuses on cybersecurity nationally. In 2017, the President of the Republic of Indonesia established the National Cyber and Crypto Agency as the government agency that responsible for handling national cybersecurity issues. This paper examines institutional structure and functions of National Cyber and Crypto Agency (BSSN) from the perspective of the regulation and BSSN opportunities in realizing the national cybersecurity demands in Indonesia. The analysis indicated clearly that BSSN has strengths in regulation, management, and technical fields as the organizer and provider of a national cybersecurity as well as strategic function to be the coordinator in realizing synergy among parties who have interests in national, regional and international cybersecurity system, so that BSSN can be relied upon to become the leading sector of national cybersecurity development in Indonesia.