As a vital element in ensuring the company’s business continuity, PT Jalin Pembayaran Nusantara (“Jalin”), an information technology service provider, has established a Cyber Security Incident Response Team (CSIRT), known as Tim Tanggap Insiden Siber (TTIS). The team aims to safeguard the company’s business operations from various cyber threats that could disrupt the digital solutions and services it provides.

Basic information on CSIRT Jalin is signed with PGP key version 1.0, issued on October 24, 2024, and available in RFC Document 2350 (Indonesian version) RFC Document 2350 (Indonesian version) . PGP Keys

VISION

To build a reliable and professional cyber resilience framework within Jalin.

MISSION

CSIRT Jalin’s mission:

1. To enhance cybersecurity capacity and capabilities;
2. To implement a security system that includes preventive, response, and recovery procedures against threats and attacks that cause disruptions, failures, or losses;
3. To provide incident response and/or recovery mechanisms carried out by the cybersecurity incident response and recovery team.

CSIRT FUNCTIONS

1. Coordinate the handling of cyber incidents at the corporate level.
2. Develop technical guidelines for cyber incident handling.
3. Serve as the company’s contact point and coordinate responses in the event of a cyber incident.
4. Coordinate with sectoral Cyber Security Incident Response Teams or the national team if sectoral teams are unavailable.
5. Ensure timely and effective incident response and recovery.
6. Provide necessary assistance to service recipients.
7. Conduct digital forensic activities to identify, collect, analyze, and examine digital evidence from computers or devices, which can then be used as evidence in legal cases or investigations.
8. Report handled cyber incidents to the Board of Directors and, if sectoral teams are unavailable, to the national Cyber Security Incident Response Team.
9. Coordinate and collaborate with other stakeholders while ensuring information confidentiality, data protection, and regulatory compliance.

TYPES OF INCIDENTS

1. Distributed Denial of Service (DDoS)
2. Malware
3. Phishing
4. Compromised Information
5. Unauthorized Activity
6. Brute Force Attack
7. Email Spam

CONTACT US