Strengthen the human layer BSSN guidance emphasizes

Badan Siber dan Sandi Negara (BSSN) is Indonesia's National Cyber and Crypto Agency. Rather than a single numbered statute, BSSN issues guidance, technical standards, and maturity expectations that shape how government bodies and operators of critical information infrastructure defend their electronic systems. Its remit spans security awareness, incident response readiness, and the protection of national data assets. For most organizations, BSSN guidance is the practical reference point for what a credible cyber security posture looks like in Indonesia.

A recurring theme across BSSN guidance is that people are both the most targeted and the most improvable part of any defence. Phishing and social engineering remain the primary way attackers gain an initial foothold, so workforce awareness and the ability to report suspicious activity quickly are treated as core capabilities, not optional extras. BSSN also encourages organizations to stand up incident response functions such as Computer Security Incident Response Teams (CSIRTs) that can triage and contain threats. Fast human reporting is what feeds those teams the early signal they need, often well before automated tooling would flag the same activity. In an Indonesian context, where attacks frequently use local language and locally relevant pretexts, awareness content that reflects those tactics matters a great deal.

BSSN guidance further emphasizes continuous improvement: measuring where you are, closing gaps, and demonstrating that controls actually work over time. This favours programs that generate evidence, such as awareness metrics, simulation results, and reporting rates, rather than one-off training that is hard to verify. Resilience is framed as an ongoing discipline across people, process, and technology, with the human layer often being the fastest to strengthen and the easiest to neglect.

This page is general information to help you plan a human-risk program aligned to BSSN guidance; it is not legal advice. BSSN expectations evolve and can be interpreted alongside sector rules, so confirm the current requirements with official BSSN publications and qualified counsel. Claro supports the awareness, simulation, reporting, and evidence controls that BSSN guidance emphasizes, but a tool alone does not make an organization compliant; that depends on how you operate people, process, and technology together.