CYBERSECURITY STRATEGY FOR SMART

BUILDINGS

Direktorat Keamanan Siber dan Sandi Pemerintah Pusat

BSSN

Jakarta, 23 Januari 2024

 BADAN SIBER DAN
SANDI NEGARA

Smart City?
Smart City
“konsep perkotaan yang
menggunakan data dan
teknologi untuk meningkatkan
kinerja, kesejahteraan, serta Smart
Building
mengurangi biaya dan konsumsi
sumber daya. Mereka

Connectivity

Integration
menekankan sektor-sektor
Internet of
"smart" yang mencakup Things
transportasi, energi, perawatan
kesehatan, air, dan pengelolaan
limbah.”
Data &
- Samantha Bradshaw dan Monitoring
Tracey P. Lauriault (2017) Center
 BADAN SIBER DAN
SANDI NEGARA

“Keamanan Merujuk pada kondisi

atau status bebas RISIKO atau
BAHAYA yang dapat mengancam
APA ITU integritas, keberlanjutan atau
kesejahteraan suatu entitas atau
KEAMANAN? sistem”

- Anderson, R. (2008)
 BADAN SIBER DAN
SANDI NEGARA

Malware

Human Ransom
Error ware

Security Smart
Challenges Insufficient
data
Protection
Building
DDoS

Hardware
/Software Network
Vulnerabil Breaches
ities
 BADAN SIBER DAN
SANDI NEGARA Mitigasi Security Challenge

Secure Architecture Design Risk Assessment Security Policy and Governance

architecture with security in mind identify potential vulnerabilities and threats comprehensive cybersecurity policy
defense-in-depth to create multiple layers of compliance with relevant regulations and
security standards
BADAN SIBER DAN
SANDI NEGARA Mitigasi Security Challenge

Network Segmentation separate critical systems from non-critical

access management controls

Identity and Access Management multi-factor authentication

Encryption Encrypt data both in transit and at rest

 BADAN SIBER DAN
Mitigasi Security
SANDI NEGARA

Challenge
Continuous Monitoring
• to detect anomalies and potential threats
• monitoring network traffic, system logs, and
user behavior

Incident Response
• Develop IR Team
• regularly test an incident response plan

Security Awareness
• regular cybersecurity awareness programe
• Best practice for maintaining Security
 BADAN SIBER DAN
SANDI NEGARA

Ensure that vendors

Third Party follow secure coding
practices and adhere
Assessment to cybersecurity
standards

Mitigasi Security Regular Security

Audits and
to identify and
address
vulnerabilities

Challenge Penetration Testing

simulate real-world
attacks

up-to-date with the

Patch Management latest security
patches
BADAN SIBER DAN
SANDI NEGARA Mitigasi Security Challenge

Data Privacy Compliance data privacy regulations and standards

stay updated on the latest threats and

Collaboration with Cybersecurity best practices
Experts information sharing

to protect components from

Physical Security Measures unauthorized physical access
BADAN SIBER DAN
SANDI NEGARA

Remind
“IoT without security = Internet of Threats”
- Stephane Nappe
“(Ingatlah) Kechilafan Satu
Orang Sahaja Tjukup Sudah
Menjebabkan Keruntuhan
Negara”
MAYJEN TNI DR. ROEBIONO KERTOPATI
(1914 - 1984)
BAPAK PERSANDIAN REPUBLIK INDONESIA

11