Telkomsel Cyber Security Incident Response Team (CSIRT)

Telkomsel's Cyber Security Incident Response Team (CSIRT) organization has a member structure Based on the Circular of the Vice President of ICT Security Management concerning the Establishment of the Telkomsel Cyber Security Incident Response Team Number: 0011/IS.01/IB-01/IV/2024. Telkomsel's CSIRT is currently under the auspices of the National Cyber and Crypto Agency (BSSN). Telkomsel-CSIRT is a Cyber Incident Response Team or Computer Security Incident Response Team (CSIRT) of PT Telkomsel led by the Chairperson of Telkomsel-CSIRT and assisted by the Deputy Chairperson of Telkomsel-CSIRT and Contact Person and team members from the field of Handling, Response and Recovery of Cyber Incidents in the Information Technology Sector, the field of Handling, Response and Recovery of Cyber Incidents in the Telecommunications Sector, and Data Protection Officer.

Vision

Telkomsel CSIRT's vision is to maintain the integrity, confidentiality, and availability of information and organizational systems.

Mission

To build, coordinate, collaborate and operate the process of mitigation, crisis management, response, and recovery of cyber incidents in the system environment, as well as to build cooperation in the context of response and recovery of cyber incidents in the system environment.

Telkomsel-CSIRT (Computer Security Incident Response Team) aims to improve resilience and response to cybersecurity incidents in Telkomsel's environment by protecting digital infrastructure from cyber threats, detecting and responding to incidents quickly and effectively, and improving security capabilities and awareness across the organization. In addition, Telkomsel-CSIRT plays a role in coordinating with regulators and system partners to share threat intelligence and implement system-recovery and mitigation measures to prevent similar incidents in the future. This team also ensures compliance with regulations and security standards, such as ISO 27001 and government policies related to data protection, in order to maintain customer trust and ensure the continuity of system operations safely and reliably.

Telkomsel CSIRT has the task of building, coordinating, collaborating and operationalizing the mitigation process, crisis management, response and recovery of cyber incidents in the Company's environment, as well as building cooperation in the context of response and recovery of cyber incidents in the Company's environment.

Telkomsel CSIRT's cyber incident response services including:

1. Main services consisting of:
   1. Providing warnings regarding cyber security
   2. Handling cyber incidents
   3. Receiving cyber incident complaints
2. Additional services consisting of:
   1. Handling electronic system vulnerabilities
   2. Notification of potential threat observation results
   3. Detection of cyber attacks
   4. Analysis of cyber security risks
   5. Consultation regarding readiness to handle cyber incidents
   6. Building awareness and concern for cyber security

1. Web Defacement
2. DDoS
3. Malware
4. Ransomware
5. Phishing