Cybersecurity glossary

Business Email Compromise

BEC is a targeted fraud where an attacker impersonates an executive or supplier over email to redirect a payment or sensitive data. It relies on deception rather than malware, so it often bypasses technical filters.

DevSecOps builds security checks into the software development pipeline so issues are caught as code is written, not after release. It shifts security left, closer to the developer.

Data Protection Officer

A DPO is the person accountable for an organisation's personal-data compliance. Under UU PDP, many organisations that process data at scale are expected to appoint one.

Endpoint Detection and Response

EDR watches laptops and servers for malicious behaviour and can isolate a compromised device. It succeeds traditional antivirus by focusing on what a threat does, not just known file signatures.

The GDPR is the European Union's data protection regulation. Indonesian companies encounter it when they handle the personal data of people in the EU, and it heavily influenced UU PDP.

Industrial Control Systems · Supervisory Control and Data Acquisition

ICS and SCADA are the control systems that monitor and operate industrial equipment. They were built for reliability in isolated networks, which makes securing them as they connect to IT a distinct challenge.

IEC 62443 is the international standard series for securing industrial automation and control systems. It defines security levels and requirements tailored to OT rather than IT environments.

IR

Incident response is the structured process of containing, investigating, and recovering from a security incident. A tested IR plan is what separates a contained event from a public breach.

ISO 27001 is the international standard for an information security management system (ISMS). Certification demonstrates that security is managed by a documented, audited process rather than ad hoc effort.

Managed Detection and Response

MDR is a service that combines threat detection with active response, not just alerts. Where a basic managed service tells you something happened, MDR takes agreed containment actions on your behalf.

Managed Security Service Provider

An MSSP runs security operations on behalf of a company, usually including monitoring, detection, and response. Indonesian firms use an MSSP when building an in-house SOC is too slow or too costly to staff.

Cybersecurity Framework

The NIST Cybersecurity Framework organises security work into a common set of functions such as identify, protect, detect, respond, and recover. It gives teams a shared language for measuring maturity.

Operational Technology security

OT security protects the systems that run physical operations, such as manufacturing lines and utilities. Uptime and safety come first, so IT security playbooks rarely transfer without change.

pentest

A penetration test is an authorised, simulated attack on a system to find and prove real weaknesses before a genuine attacker does. The output is a prioritised list of findings with evidence.

Phishing is a social-engineering attack where criminals impersonate a trusted sender to trick people into revealing credentials, transferring money, or installing malware. It is the starting point for most breaches.

POJK 34/2025 extends structured IT and cyber-resilience obligations to rural banks (BPR/BPRS), with a compliance deadline that many smaller banks must still prepare for.

Ransomware is malware that encrypts an organisation's data and demands payment to restore it, often with a threat to leak the data too. It remains one of the costliest incidents for Indonesian companies.

A red team runs a goal-driven, adversarial exercise that tests people, process, and technology together, not just one application. It measures how an organisation detects and responds under realistic pressure.

Security Information and Event Management

A SIEM collects and correlates log data from across an organisation so analysts can spot patterns that a single system would miss. It is the data backbone most SOCs are built on.

Security Operations Center

A SOC is the team, process, and tooling that monitors an organisation for security threats around the clock. It collects signals from across the network, investigates suspicious activity, and coordinates the response when something is wrong.

SOC 2 is a reporting standard that evaluates how a service provider protects customer data across controls such as security and availability. It is frequently requested by enterprise buyers before signing.

UU No. 27/2022 · Undang-Undang Pelindungan Data Pribadi

UU PDP is Indonesia's personal data protection law, which sets obligations for how organisations collect, process, and protect personal data, with real penalties for breaches. It is the closest Indonesian equivalent to the GDPR.

Vulnerability Assessment and Penetration Testing

VAPT pairs a broad scan for known weaknesses with hands-on testing that tries to exploit them. It is the phrase Indonesian regulators and tenders most often use for security testing.

A vulnerability assessment is a systematic scan that catalogues known weaknesses across systems and ranks them by severity. It shows breadth of exposure rather than proving exploitability.

Extended Detection and Response

XDR extends EDR beyond the endpoint to correlate signals across email, network, cloud, and identity in one view. The goal is to see a whole attack rather than isolated fragments.

A zero-day is a vulnerability that attackers exploit before the vendor has released a fix. Defence depends on detection and containment rather than patching, because no patch yet exists.