Advanced Cybersecurity for Banking & Financial Services
Advanced Cybersecurity for Banking & Financial Services
09 – 10 April 2026 Surabaya Hotel Santika Pandegiling
Description
Sektor perbankan dan jasa keuangan menjadi target utama serangan siber karena:
- Nilai transaksi dan aset yang besar
- Tingginya ketergantungan pada sistem digital
- Sensitivitas data nasabah dan transaksi
Advanced Cybersecurity di banking & financial services mencakup:
- Proteksi terhadap ancaman siber modern (ransomware, phishing, APT)
- Implementasi Zero Trust Architecture
- Monitoring dan respon insiden secara real-time
- Kepatuhan terhadap regulasi keamanan siber (misal OJK, PCI DSS, ISO 27001)
Pendekatan ini menekankan pencegahan, deteksi, respons, dan pemulihan, sehingga bank dapat melindungi data, reputasi, dan kesinambungan bisnis.
Objectives
Setelah mengikuti modul ini, peserta diharapkan mampu:
- Memahami ancaman siber terkini di sektor keuangan.
- Menerapkan prinsip keamanan siber lanjutan, termasuk Zero Trust dan defense-in-depth.
- Mengidentifikasi risiko operasional dan teknis terkait infrastruktur TI bank.
- Mengimplementasikan monitoring, logging, dan threat detection secara efektif.
- Menyusun prosedur incident response dan disaster recovery.
- Memastikan kepatuhan terhadap regulasi dan best practices cybersecurity.
Course outline
A. Cybersecurity Landscape in Banking
- Tren ancaman siber terkini: ransomware, phishing, APT, insider threat
- Regulasi dan compliance: PCI DSS, ISO 27001, OJK, GDPR
- Risiko reputasi dan financial impact dari insiden siber
B. Advanced Security Frameworks
- Defense-in-Depth dan layered security
- Zero Trust Architecture: principles & implementation
- Network segmentation, micro-segmentation, dan secure access
- Endpoint security dan identity management
C. Threat Detection & Monitoring
- Security Information & Event Management (SIEM)
- Intrusion Detection / Prevention Systems (IDS/IPS)
- Threat intelligence & anomaly detection
- Monitoring cloud and hybrid environments
D. Incident Response & Recovery
- Incident response plan (IRP) dan playbook
- Disaster recovery & business continuity planning
- Cyber crisis simulation & tabletop exercises
- Forensic analysis dan reporting
E. Application & Data Security
- Secure development lifecycle (DevSecOps)
- Data encryption & tokenization
- API security dan secure integration fintech
- Vulnerability assessment & penetration testing
F. Emerging Technologies & Cyber Risk Mitigation
- AI & ML untuk threat detection
- Blockchain & DLT untuk keamanan transaksi
- Cloud security & multi-cloud strategy
- Continuous risk assessment & compliance automation
G. Case Study & Hands-On Exercise
- Analisis insiden siber nyata di banking sector
- Simulasi deteksi dan mitigasi threat
- Penilaian risiko TI dan rekomendasi kontrol keamanan
Participants
- Cybersecurity
- Information Security
- IT / System Development
- Risk Management
- Compliance
- Digital Banking
- Data Analytics
- IT Governance
- Operations
- Corporate Banking
- Retail Banking
- Management
- Top Management / Executive
Method
- Pre-test
- Presentation
- Discussion
- Case study
- Post-test
Facilities
- Ruang Meeting Representatif
- Sertifikat Pelatihan Resmi
- Instruktur Profesional & Berpengalaman
- Training Kit Eksklusif
- Souvenir
- Pick Up Participant (Yogyakarta)
