RFC 2350

RFC 2350 KUTIM-CSIRT

Version 1.1 · 5 October 2026 · TLP:CLEAR

This document follows RFC 2350 (Expectations for Computer Security Incident Response) and contains basic information about KUTIM-CSIRT, how to contact the team, its responsibilities, policies, and the services it provides.

1. Document Information

This document describes KUTIM-CSIRT in accordance with RFC 2350. It explains the procedures, responsibilities, and services of KUTIM-CSIRT and provides contact information.

1.1 Date of Last Update: Version 1.1, 5 October 2026. Version 1.0 was published on 28 July 2024 (PDF at the bottom of this page).
1.2 Distribution List for Notifications: There is no dedicated mechanism for distributing change notifications. Questions about updates to this document may be addressed to csirt@kutaitimurkab.go.id.
1.3 Locations Where This Document May Be Found: The current version of this document is available at https://csirt.kutaitimurkab.go.id.
1.4 Authenticating This Document: The version 1.0 PDF is signed with the KUTIM-CSIRT PGP key (see section 2.8). This page contains version 1.1; where it differs from the version 1.0 PDF, version 1.1 prevails.
1.5 Document Identification: Title: RFC 2350 KUTIM-CSIRT; Version: 1.1; Publication Date: 5 October 2026; this document remains valid until a newer version is published.

2. Contact Information

2.1 Name of the Team: KUTIM-CSIRT (Kutai Timur Computer Security Incident Response Team).
2.2 Address: Jl. Prof. Dr. Sudiatmo (Ex. Dishut), Kawasan Perkantoran Bukit Pelangi, Kec. Sangatta Utara, Kabupaten Kutai Timur, Kalimantan Timur 75683, Indonesia.
2.3 Time Zone: WITA (Central Indonesia Time), UTC+08:00.
2.4 Telephone Number: (0549) 2021207 (working hours).
2.5 Facsimile Number: Not available.
2.6 Other Telecommunication: Complaint form at csirt.kutaitimurkab.go.id/lapor; the ticket number issued can be tracked on the Track Ticket page. A WhatsApp/hotline channel is not yet available; please use email and the complaint form for now.
2.7 Electronic Mail Address: csirt@kutaitimurkab.go.id is the primary email address for incident reporting. The administrative address admin@kutaitimurkab.go.id is also available for general correspondence.

2.8 Kunci Publik dan Enkripsi: KUTIM-CSIRT menggunakan PGP/GPG untuk komunikasi tersandi. Key ID: 0x57DEB6B955E94D52; Fingerprint: 3B06 64B5 16FB 69D7 1BB3 5286 57DE B6B9 55E9 4D52 (RSA 4096-bit, berlaku hingga 5 November 2027). Kunci publik dapat diunduh melalui halaman Kontak atau diperoleh atas permintaan ke alamat email di atas.

Tampilkan kunci publik PGP

Unduh berkas .asc

2.9 Team Members: The composition and personnel of KUTIM-CSIRT are established by East Kutai Regent Decree No. 555/K.557/2024. The team consists of the Steering Committee, the Person in Charge, the Chair, the Secretary, and the Coordinator of the Incident Response and Recovery Team, who oversees three technical sub-teams: the Network and Server Management Sub-team, the Information Security Sub-team, and the Website Administration and Applications Sub-team.
2.10 Operating Hours: Administrative services are available on working days, Monday–Friday, 08.00–16.00 WITA. Incidents may be reported by email at any time (24/7) and will be followed up during the next working hours, except for Critical-priority incidents. Target times per priority: Service Standards.
2.11 Other Information: The latest official information is available on the KUTIM-CSIRT website.

3. Charter

3.1 Mission Statement: KUTIM-CSIRT aims to prevent, receive, analyze, and respond to cyber security incidents affecting electronic systems of the East Kutai Regency Government, and to raise the cyber awareness and resilience of its constituents.
3.2 Constituency: All regional government agencies of the East Kutai Regency Government, covering electronic systems and IT infrastructure under the *.kutaitimurkab.go.id domain.
3.3 Sponsorship and/or Affiliation: KUTIM-CSIRT was established by the East Kutai Regency Government and is coordinated by the Communication, Informatics, Statistics and Cryptography Office (Diskominfo) of East Kutai Regency. KUTIM-CSIRT coordinates with Gov-CSIRT Indonesia under the National Cyber and Crypto Agency (BSSN).
3.4 Authority: KUTIM-CSIRT exercises coordinating authority over cyber incident handling for its constituency under East Kutai Regent Decree No. 555/K.557/2024 on the Establishment of the Kutai Timur Computer Security Incident Response Team (KUTIM-CSIRT), BSSN (National Cyber and Crypto Agency) Regulation No. 1 of 2024 on Cyber Incident Management, and other applicable laws and regulations.

4. Policies

4.1 Types of Incidents and Level of Support: KUTIM-CSIRT handles all types of cyber security incidents that affect its constituency. The level of support depends on the type, severity, and impact of the incident, as well as on available resources.
4.2 Co-operation, Interaction and Disclosure of Information: KUTIM-CSIRT keeps information received from reporters confidential. Incident information is shared only with parties concerned with handling the incident, and may be forwarded to Gov-CSIRT Indonesia/BSSN and law enforcement when necessary, always in line with personal data protection requirements.
4.3 Communication and Authentication: Encrypted email (PGP) is recommended for communications containing sensitive information. Telephone and unencrypted email are considered adequate for non-sensitive information.
4.4 Information Sharing Code: KUTIM-CSIRT uses the Traffic Light Protocol (TLP) 2.0. Information on this website is labeled TLP:CLEAR; information labeled TLP:GREEN, TLP:AMBER, TLP:AMBER+STRICT, and TLP:RED is sent only to authorized recipients.
4.5 Priorities and Target Times: The incident priority classification (Critical, High, Medium, Low) and response time targets are set out in the Service Standards.

5. Services

KUTIM-CSIRT provides the following groups of services:

Reactive Services: incident handling, incident response coordination, incident triage and analysis, and issuing security alerts and bulletins.
Proactive Services: security advisories, security awareness, vulnerability assessment, technical assistance, and threat information dissemination.
Security Quality Management Services: capacity and competency building, security governance consulting, and post-incident evaluation and recommendations.

The full service catalog is available on the Services page of the KUTIM-CSIRT website.

6. Incident Reporting Form

Incidents should be reported by email to csirt@kutaitimurkab.go.id or through the complaint channel on the KUTIM-CSIRT website. Reporters are expected to include at least the following information:

Reporter identity and contact information (name, regional government agency, email, phone number).
The date and time the incident occurred or was detected.
The affected system, application, or asset (IP address, domain name, URL).
A description of the incident and the symptoms or impact observed.
Relevant supporting evidence (screenshots, log files, error messages).
Actions already taken, if any.

Reporters are not asked to send their national ID number (NIK) or a photo of their ID card (KTP). Reporter data is managed in accordance with the Privacy Policy.

7. Disclaimer

Although prepared with care, KUTIM-CSIRT assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained in this document. Information may change at any time without prior notice.