Core documents
- KUTIM-CSIRT RFC 2350 (version 1.1 in HTML and the PGP-signed PDF version 1.0)
- Service Standards and SLA
- Privacy and Cookie Policy
- Vulnerability Disclosure Program
Standard Operating Procedures (SOPs)
- SOP for Receiving and Handling Cyber Incident Reports SOP-KUTIMCSIRT-01 · v1.0
- SOP for Incident Reporting by Regional Government Agencies SOP-KUTIMCSIRT-02 · v1.0
- SOP for Handling Vulnerability Reports (VDP) SOP-KUTIMCSIRT-03 · v1.0
- SOP for Security Service Requests SOP-KUTIMCSIRT-04 · v1.0
Technical guides
- Technical Guide to Handling Defacement and Online Gambling Spam (Judol)
- PGP Guide for Sending Encrypted Reports
- Emergency steps "I've Been Hit…"
- Guide library (PDF)
Letter and form templates
- Security service request letter (from the head of the regional government agency) DOCX
- Security testing agreement (rules of engagement) for VA / pentest DOCX
- Cyber incident report form (offline) DOCX
- Vulnerability finding report form (VDP) DOCX
Legal basis and regulations
- East Kutai Regent Decree Number 555/K.557/2024 on the Establishment of the East Kutai Computer Security Incident Response Team (KUTIM-CSIRT). A copy can be requested at csirt@kutaitimurkab.go.id.
- Law Number 27 of 2022 on Personal Data Protection
- Law Number 1 of 2024 on the Second Amendment to Law Number 11 of 2008 on Electronic Information and Transactions
- Government Regulation Number 71 of 2019 on the Operation of Electronic Systems and Transactions
- Presidential Regulation Number 95 of 2018 on Electronic-Based Government Systems
- Presidential Regulation Number 47 of 2023 on the National Cyber Security Strategy and Cyber Crisis Management
- National Cyber and Crypto Agency (BSSN) Regulation Number 1 of 2024 on Cyber Incident Management
- National Cyber and Crypto Agency (BSSN) Regulation Number 4 of 2021 on Guidelines for Information Security Management in Electronic-Based Government Systems and Technical Standards and Procedures for Electronic-Based Government System Security
- National Cyber and Crypto Agency (BSSN) Regulation Number 8 of 2020 on Security Systems in the Operation of Electronic Systems