Cybersecurity Wake-Up Call: Strategic Electronic Data Backups Now Mandatory for IIV Organizers

Following the mandates introduced under Regulation of the Government No. 71 of 2019 on the Organization of Electronic Systems and Transactions (“Regulation 71/2019”),[1] which apply to institutions that are in control of strategic electronic data (Data Elektronik Strategis – “DES”)[2] across a wide range of sectors (e.g. financial, health, energy and so forth) and that address the formulation of electronic backups and the connection of said data to certain data centers,[3] the National Cyber and Crypto Agency (Badan Siber dan Sandi Negara – “BSSN”) has now decided to issue Regulation of the National Cyber and Crypto Agency No. 10 of 2024 (“Regulation 10/2024”), which has been in force since 20 November 2024.[4]