BSSN Pushes Stronger Singkawang Electronic System Security

That brings pressure. Systems need more than installation and routine use. They need controls, updates, clear responsibilities, and records that show who manages what. One careless password or outdated application can create a problem that spreads quickly.

Danang told participants that cybersecurity sits at the base of digital governance. He said digital transformation must move together with stronger protection for systems and data so public services remain safe, reliable, and sustainable.

“Cybersecurity must be a shared responsibility. Every regional agency needs to understand the risks and make sure the electronic systems they use are properly managed to protect data and public services,” Danang Jaya, Director of Regional Government Cyber Security and Cryptography at BSSN, said.

His point was direct. The job does not belong only to Diskominfo technicians. It also falls on the agencies that run the services and handle the data.

What the audit looks for

A Digital Government Security Audit examines the real condition of government electronic system providers, or PSE. The process helps agencies see which parts are secure, where the weak spots sit, and what needs fixing before trouble arrives.

Danang said the audit is designed to identify vulnerabilities, check whether security controls work well, and test compliance with information security standards and regulations. It is more than an administrative formality. There is technical substance behind every step.

One of the first tasks is IT asset mapping. Agencies need to know which applications they use, who manages them, where the data is stored, and how access is granted. Without that map, gaps often stay hidden until a disruption exposes them.

Access control also matters. Employee accounts that are never revoked, reused passwords, and broad permissions can all create openings for abuse. So can systems that go unpatched for too long. A single delay can become an invitation.

Governance documentation is another part of the check. Agencies need policies, standard operating procedures, role assignments, and incident response workflows. When a security problem hits, documentation helps teams move faster instead of improvising under pressure.

Why the security culture angle matters

Danang also pressed agencies to build a stronger culture of information security awareness. That point often gets less attention than software or hardware, but it is where many incidents begin.

Cyberattacks do not always rely on sophisticated tools. A fake link, a careless click, an email attachment opened too fast, or a password reused across services can be enough. Small mistakes. Big damage.

In government offices, staff habits shape how safe public data stays. Employees need to know when to report suspicious messages, how to store files containing personal information, and why system access should never be shared casually, even with a colleague.

For residents, the stakes are immediate. Population records, health information, and administrative documents are sensitive. If a system goes down or data leaks, the impact reaches daily life, from delayed services to lost trust in digital government.

Head of Singkawang Communication and Informatics Department Chantal Novyanti said the session was part of the city government’s effort to improve information technology governance. She added that Singkawang also wants stronger cyber resilience to support the Electronic-Based Government System, or SPBE.

The event was interactive, with participants discussing cybersecurity challenges, system management, risk mitigation, and readiness for audit. The questions were practical. Who owns the system? Who can enter it? Who updates it? Who responds when something breaks?

Different agencies face different risks. The population office handles large volumes of resident data. The hospital manages health information. Bappeda works with planning data. The Inspectorate needs systems that support accountability. The protections overlap, but the pressure points are not identical.

Still, the basics stay the same: map the assets, control access, update the systems, organize the documents, and train staff. No shortcuts. The Singkawang Media Center said the socialization aimed to strengthen regional cyber resilience and prepare agencies for security audits before the inspection schedule gets close.

That preparation now matters more than ever. One overlooked account, one delayed patch, one missing record. Enough said.

The next test for Singkawang’s agencies will be whether that warning turns into daily discipline before the audit team arrives.