About KUTIM-CSIRT
KUTIM-CSIRT (Kutai Timur Computer Security Incident Response Team) is the cyber incident response team established within the East Kutai Regency Government, East Kalimantan Province. KUTIM-CSIRT is the unit responsible for preventing, receiving, analyzing, and responding to cyber security incidents affecting electronic systems and information technology infrastructure owned by the East Kutai Regency Government.
The establishment of KUTIM-CSIRT is part of the effort to strengthen information security governance in implementing Electronic-Based Government Systems (SPBE) in East Kutai Regency. As the use of digital government services grows, preparedness and rapid response to cyber threats become increasingly important to protect the confidentiality, integrity, and availability of data and public services. KUTIM-CSIRT operates as part of the national cyber incident response ecosystem and coordinates with Gov-CSIRT Indonesia under the National Cyber and Crypto Agency (BSSN).
KUTIM-CSIRT was formally established by East Kutai Regent Decree No. 555/K.557/2024 on the Establishment of the Kutai Timur Computer Security Incident Response Team (KUTIM-CSIRT), issued in Sangatta on 17 September 2024. KUTIM-CSIRT is coordinated by the Communication, Informatics, Statistics and Cryptography Office (Diskominfo) of East Kutai Regency.
Vision and Mission
Vision
Reliable and professional cyber resilience and security in implementing Electronic-Based Government Systems within the East Kutai Regency Government.
Mission
- Improves the preparedness and response capability of regional government agencies for cyber security incidents.
- Coordinates the handling and recovery of cyber incidents quickly, accurately, and measurably.
- Builds awareness and an information security culture among civil servants and electronic system operators.
- Strengthens collaboration with Gov-CSIRT Indonesia, BSSN, and the national cyber security community.
Legal Basis
The establishment and operation of KUTIM-CSIRT are based on the following laws and regulations:
- Law No. 11 of 2008 on Electronic Information and Transactions, as amended several times, most recently by Law No. 1 of 2024.
- Law No. 47 of 1999 on the Establishment of Nunukan Regency, Malinau Regency, West Kutai Regency, East Kutai Regency, and Bontang City, as amended by Law No. 7 of 2000.
- Law No. 23 of 2014 on Regional Government, as amended several times, most recently by Law No. 6 of 2023.
- Presidential Regulation No. 95 of 2018 on Electronic-Based Government Systems (SPBE), in particular Articles 40 and 41.
- BSSN (National Cyber and Crypto Agency) Regulation No. 1 of 2024 on Cyber Incident Management.
- East Kutai Regent Regulation No. 6 of 2021 on Guidelines for Implementing Cryptography to Secure Information within the Regional Government.
- East Kutai Regent Regulation No. 22 of 2022 on the Implementation of Electronic-Based Government Systems.
- East Kutai Regent Decree No. 555/K.557/2024 on the Establishment of the Kutai Timur Computer Security Incident Response Team (KUTIM-CSIRT), issued on 17 September 2024.
Duties and Functions
In carrying out its role, KUTIM-CSIRT has the following duties and functions:
- Receives, logs, and triages reports of suspected cyber security incidents from constituents.
- Performs technical analysis of incidents, vulnerabilities, and digital artifacts.
- Coordinates the response to and recovery from cyber incidents on affected electronic systems.
- Issues early warnings, security bulletins, and security advisories to constituents.
- Raises information security awareness and capacity through outreach, education, and technical assistance.
- Supports vulnerability assessments and strengthens the security posture of regional government agency electronic systems.
- Coordinates and shares threat information with Gov-CSIRT Indonesia, BSSN, and other incident response teams.
- Prepares post-incident documentation, reports, and remediation recommendations.
Constituency
Under East Kutai Regent Decree No. 555/K.557/2024, the constituency of KUTIM-CSIRT consists of all information and communication technology users within East Kutai Regency, including regional government agencies (Organisasi Perangkat Daerah/OPD) — offices, agencies, secretariats, sub-districts — and other work units that operate government electronic systems.
The scope of service covers electronic systems, applications, and information technology infrastructure under the *.kutaitimurkab.go.id domain, as well as other digital assets owned or managed by the East Kutai Regency Government.
Organizational Structure
The composition and personnel of KUTIM-CSIRT are set out in the Annex to East Kutai Regent Decree No. 555/K.557/2024. The team's organizational structure consists of the steering and responsible elements, the leadership, and the technical incident response and recovery team, as follows:
Steering Committee
Provides strategic policy direction for running KUTIM-CSIRT.
Regent and Vice Regent of East Kutai
Person in Charge
Responsible for running KUTIM-CSIRT and providing its resources.
Regional Secretary of East Kutai Regency
Chair
Leads the team's work, provides the Point of Contact, and coordinates operations and inter-CSIRT cooperation.
Head of the Communication, Informatics, Statistics and Cryptography Office
Secretary
Handles secretarial and administrative functions, documentation, and coordination meetings.
Secretary of the Communication, Informatics, Statistics and Cryptography Office
Coordinator of the Incident Response and Recovery Team
Leads the technical incident response and recovery team, overseeing three technical sub-teams.
Head of ICT Infrastructure and Cryptography Division
Incident Response and Recovery Team
The technical team is led by a coordinator and consists of three sub-teams, each led by a coordinator:
Network and Server Management Sub-team
Prepares network documentation, monitors traffic and logs, detects intrusions, and takes corrective action on networks and servers.
Information Security Sub-Team
Detects and identifies attacks, triages incidents, analyzes security flaws, performs hardening, and analyzes artifacts and risks.
Website Administration and Applications Sub-team
Manages website and information system content, performs regular data backups, and takes corrective action on applications after incidents.