Peran Divisi Kepatuhan dalam Cyber Security Governance & Penanganan Insiden Keamanan Data Nasabah

Scheduled 20 – 21 Agustus 2026 Malang

Registration

Peran Divisi Kepatuhan dalam Cyber Security Governance & Penanganan Insiden Keamanan Data Nasabah

20 – 21 Agustus 2026 Malang Hotel Ibis Styles

Description

Peran Divisi Kepatuhan juga semakin strategis dalam memastikan adanya regulatory monitoring, compliance assessment, control review, issue escalation, serta koordinasi dengan fungsi manajemen risiko, audit internal, teknologi informasi, legal, dan unit bisnis. Kepatuhan perlu mampu menerjemahkan ketentuan regulator dan standar keamanan informasi menjadi compliance obligations yang dapat diimplementasikan dan diuji efektivitasnya.

Penanganan insiden keamanan data nasabah membutuhkan koordinasi lintas fungsi yang cepat dan terstruktur. Kegagalan dalam mendeteksi, merespons, melakukan eskalasi, mendokumentasikan, dan menyelesaikan insiden dapat menimbulkan dampak yang signifikan terhadap operasional, finansial, kepatuhan, reputasi, serta kepercayaan nasabah. Oleh karena itu, Divisi Kepatuhan perlu memahami perannya dalam incident response lifecycle, termasuk aspek regulatory notification, evidence preservation, issue management, remediation, dan lessons learned.

Pelatihan Peran Divisi Kepatuhan dalam Cyber Security Governance & Penanganan Insiden Keamanan Data Nasabah dirancang untuk meningkatkan kompetensi peserta dalam memahami cyber security governance dari perspektif kepatuhan, mengidentifikasi cyber compliance risk, menilai kecukupan control framework, serta berperan efektif dalam penanganan dan pelaporan insiden keamanan data nasabah.

Melalui pendekatan regulasi, governance framework, risk assessment, studi kasus, dan simulasi incident response, peserta diharapkan mampu membangun koordinasi yang lebih efektif antara Divisi Kepatuhan dan fungsi terkait serta memperkuat ketahanan siber dan perlindungan data nasabah di lingkungan BPD

Objectives

Memahami konsep dan prinsip cyber security governance dalam industri perbankan.
Memahami peran Divisi Kepatuhan dalam cyber risk management.
Mengidentifikasi kewajiban regulasi terkait keamanan siber dan perlindungan data nasabah.
Memetakan cyber compliance obligations ke dalam kebijakan dan kontrol internal.
Mengidentifikasi cyber security dan data protection risks dari perspektif kepatuhan.
Melakukan compliance assessment terhadap cyber security controls.
Memahami mekanisme deteksi, klasifikasi, eskalasi, dan penanganan insiden siber.
Menentukan peran Divisi Kepatuhan dalam incident response dan regulatory notification.
Melakukan assessment terhadap root cause dan compliance impact suatu insiden.
Menyusun corrective action dan remediation plan atas insiden keamanan data

Course outline

1. Cyber Security Governance dalam Perbankan

Konsep cyber security governance.
Cyber resilience dan operational resilience.
Cyber risk sebagai bagian dari enterprise risk.
Peran Board dan Management.
Three Lines Model.
Peran IT, Information Security, Risk Management, Compliance, Legal, dan Internal Audit.
Governance structure dan accountability.
Cyber security culture.

2. Regulatory & Compliance Framework Cyber Security

Regulasi terkait penyelenggaraan teknologi informasi perbankan.
Ketentuan keamanan sistem informasi.
Ketentuan perlindungan data nasabah.
Regulatory expectations terhadap cyber resilience.
Regulatory obligation mapping.
Internal policy dan control standards.
Compliance monitoring.
Regulatory reporting dan escalation.
Emerging regulatory requirements.

3. Peran Divisi Kepatuhan dalam Cyber Governance

Compliance oversight terhadap cyber security.
Regulatory monitoring.
Compliance risk assessment.
Policy review.
Compliance advisory.
Compliance testing.
Monitoring regulatory obligations.
Escalation of material cyber issues.
Koordinasi dengan Risk, IT, Information Security, dan Internal Audit.
Compliance reporting kepada manajemen.

4. Cyber Security Risk Assessment

Cyber risk identification.
Threat dan vulnerability assessment.
Cyber risk taxonomy.
Inherent cyber risk.
Control effectiveness.
Residual cyber risk.
Risk scoring dan prioritization.
Critical assets identification.
Customer data risk.
Third-party cyber risk.
Cyber risk register.

5. Data Nasabah & Information Security Control

Klasifikasi informasi dan data nasabah.
Data access governance.
Identity and access management.
Privileged access management.
Encryption.
Data loss prevention.
Logging dan monitoring.
Data transmission security.
Backup dan recovery.
Data retention dan disposal.
Segregation of duties.

6. Cyber Security Compliance Monitoring & Testing

Compliance monitoring framework.
Cyber security compliance checklist.
Control testing.
Policy compliance review.
IT general controls.
Application controls.
Access control testing.
Security configuration review.
Vulnerability management compliance.
Penetration testing governance.
Compliance findings dan issue tracking.

7. Cyber Security Incident Management

Definisi dan klasifikasi insiden siber.
Incident response lifecycle.
Detection dan initial assessment.
Incident triage.
Containment.
Eradication dan recovery.
Incident escalation.
Incident severity classification.
Roles and responsibilities.
Incident documentation.
Evidence preservation.

8. Penanganan Insiden Keamanan Data Nasabah

Identifikasi data breach.
Customer data exposure assessment.
Incident impact assessment.
Root cause analysis.
Data breach containment.
Regulatory notification requirements sesuai ketentuan yang berlaku.
Customer notification considerations.
Communication strategy.
Legal dan compliance assessment.
Post-incident review.

9. Crisis Management & Cross-Functional Coordination

Cyber crisis management.
Incident command structure.
Crisis escalation.
Coordination antara Compliance, IT, Information Security, Risk, Legal, dan Business.
Management communication.
Board reporting.
External stakeholder management.
Media dan reputational risk considerations.
Business continuity.
Disaster recovery.

10. Third-Party & Supply Chain Cyber Risk