Compliance 8 min read
What OJK POJK 11/2022 Actually Expects From Your Penetration Test
A practical breakdown of how Indonesian financial institutions can align penetration testing scope, frequency, and reporting with OJK expectations.
Field notes from the front line of Indonesian security.
Practical analysis written by the consultants who run our engagements — regulatory readiness, attack tradecraft, and the defensive engineering that actually holds.
- Compliance
- OT Security
- Offensive Security
OT Security 10 min read
IT-OT Boundary Failures in Kalimantan's Energy Sector
Field notes from assessing operational technology environments across mining and power generation sites, and the four boundary weaknesses we find repeatedly.
Offensive Security 6 min read
Red Team or Penetration Test? Choosing the Right Engagement
The two are routinely confused during procurement. Here is how to decide which one answers the question your board is actually asking.
Compliance 7 min read
UU PDP: Translating the Law Into Technical Controls
Indonesia's personal data protection law is written in obligations, not configurations. This is the control mapping we use with clients.
Need this assessed in your environment?
Our engagement leads will scope a test around your actual risk, not a generic checklist.