Cyber Resilience and Digital Operational Resilience for Banks
Cyber Resilience and Digital Operational Resilience for Banks
Deskripsi
Transformasi digital perbankan yang semakin masif telah meningkatkan ketergantungan terhadap teknologi informasi, layanan digital, cloud computing, open banking, API ecosystem, serta pemanfaatan Artificial Intelligence (AI). Di sisi lain, ancaman siber yang semakin kompleks, risiko gangguan operasional digital, serangan ransomware, kebocoran data, kegagalan sistem pihak ketiga, dan gangguan layanan kritikal menuntut bank untuk membangun ketahanan siber (Cyber Resilience) dan ketahanan operasional digital (Digital Operational Resilience) yang kuat.
Pelatihan ini dirancang untuk memberikan pemahaman komprehensif mengenai kerangka kerja, strategi, tata kelola, manajemen risiko, pengendalian keamanan, respons insiden, pemulihan layanan kritikal, serta penguatan ketahanan operasional digital sesuai praktik terbaik internasional dan regulasi yang berlaku. Peserta akan mempelajari bagaimana memastikan layanan perbankan tetap berjalan secara aman, andal, dan berkelanjutan meskipun menghadapi gangguan teknologi maupun serangan siber.
Tujuan
- Memahami konsep Cyber Resilience dan Digital Operational Resilience di industri perbankan.
- Mengidentifikasi risiko siber dan risiko operasional digital yang berdampak pada layanan kritikal bank.
- Menyusun strategi ketahanan siber dan operasional digital yang efektif.
- Mengembangkan kerangka tata kelola keamanan informasi dan ketahanan digital.
- Mengelola insiden siber secara sistematis dan terstruktur.
- Menyusun Business Continuity Plan (BCP) dan Disaster Recovery Plan (DRP).
- Mengelola risiko pihak ketiga dan layanan berbasis cloud.
- Mengukur tingkat kematangan ketahanan siber dan operasional digital bank.
Materi
- Strategic Cyber Resilience and Digital Operational Resilience
- Tren ancaman siber perbankan tahun 2026
- Evolusi cyber resilience dalam industri keuangan
- Konsep Digital Operational Resilience
- Hubungan cyber risk dan operational risk
- Ketahanan operasional pada layanan kritikal bank
- Peran manajemen dan dewan komisaris dalam pengawasan risiko digital
- Regulatory Framework and Industry Standards
- Regulasi keamanan siber dan teknologi informasi sektor perbankan
- Tata kelola risiko teknologi informasi
- Kerangka kerja Digital Operational Resilience
- Standar internasional cyber resilience
- Integrasi regulasi, kepatuhan, dan manajemen risiko
- Benchmark praktik terbaik industri perbankan global
- Cyber Risk Management Framework
- Identifikasi aset informasi kritikal
- Cyber risk assessment methodology
- Risk appetite dan risk tolerance
- Penyusunan cyber risk register
- Analisis ancaman dan kerentanan
- Prioritas mitigasi risiko siber
- Continuous cyber risk monitoring
- Governance, Risk and Compliance (GRC)
- Tata kelola keamanan informasi
- Three Lines Model dalam pengelolaan risiko siber
- Peran unit bisnis, IT, risk management, dan audit
- Kebijakan dan prosedur keamanan informasi
- Pengawasan kepatuhan keamanan TI
- Cyber governance dashboard
- Critical Business Services and Operational Resilience
- Identifikasi layanan bisnis kritikal
- Mapping proses bisnis dan ketergantungan teknologi
- Service dependency assessment
- Impact tolerance framework
- Operational resilience mapping
- Pengukuran tingkat ketahanan layanan digital
- Security Architecture and Zero Trust Framework
- Modern security architecture
- Zero Trust Security Model
- Identity and Access Management (IAM)
- Multi-Factor Authentication (MFA)
- Privileged Access Management (PAM)
- Endpoint security management
- Secure network architecture
- Cloud Security and Third-Party Risk Management
- Risiko penggunaan cloud computing
- Cloud governance framework
- Shared responsibility model
- Third-party cyber risk management
- Vendor security assessment
- Outsourcing technology risk
- Continuous monitoring vendor kritikal
- Cyber Threat Intelligence and Threat Hunting
- Cyber threat landscape perbankan
- Threat intelligence framework
- Threat hunting methodology
- Attack surface management
- Ransomware preparedness
- Fraud dan advanced cyber attack
- Early warning indicator
- Security Operations Center (SOC) Management
- Fungsi dan peran SOC
- Security monitoring framework
- Log management dan SIEM
- Security event correlation
- Incident detection dan alerting
- SOC maturity assessment
- KPI SOC effectiveness
- Cyber Incident Response Management
- Cyber incident lifecycle
- Incident response framework
- Incident classification dan escalation
- Digital forensics overview
- Crisis communication management
- Stakeholder reporting
- Lessons learned process
- Business Continuity Management (BCM)
- BCM framework untuk perbankan
- Business Impact Analysis (BIA)
- Recovery Time Objective (RTO)
- Recovery Point Objective (RPO)
- Penyusunan Business Continuity Plan
- Crisis management team
- Uji coba dan evaluasi BCM
- Disaster Recovery Planning (DRP)
- Disaster Recovery Framework
- Data center resilience
- Backup dan recovery strategy
- High availability architecture
- Recovery procedures
- DRP testing methodology
- Continuous improvement DRP
- Data Protection and Cyber Security Controls
- Data classification framework
- Data Loss Prevention (DLP)
- Database security management
- Encryption management
- Privacy protection framework
- Secure data lifecycle management
- Monitoring dan audit data security
- Digital Resilience Testing and Simulation
- Cyber resilience testing
- Penetration testing overview
- Red Team dan Blue Team exercise
- Tabletop exercise
- Crisis simulation
- Operational disruption simulation
- Evaluasi hasil pengujian
- AI, Emerging Technology and Future Risk
- Risiko AI dalam perbankan
- AI governance framework
- Quantum computing dan cyber security
- Open banking security risk
- API security management
- Emerging technology assessment
- Future cyber resilience roadmap
- Cyber Resilience Maturity Assessment and Roadmap
- Cyber resilience maturity model
- Operational resilience maturity model
- Gap analysis
- Penyusunan target maturity level
- Strategic improvement roadmap
- Key Risk Indicator (KRI)
- Key Performance Indicator (KPI)
- Continuous monitoring dan reporting
Peserta
Divisi Cyber Security
Divisi Information Security
Divisi IT / TI
Divisi Risk Management
Divisi Business Continuity Management (BCM)
Divisi Digital Banking
Divisi Compliance
Metode
• Pre Test
• Presentasi Materi
• Diskusi
• Studi Kasus
• Post Test
Fasilitas
• Training Amenities
• Peralatan Pelatihan (Tas, Hand Out, Flashdisk, Block Note, Pulpen, Watermark)
• Sertifikat
• Souvenir
• 2x Coffee Break, 1x Lunch