National Cyber and Crypto Agency


National Cyber and Crypto Agency, is Indonesia's primary signal intelligence agency, as well as cyber intelligence, cyber threat intelligence, cyber defense, and cyber security agency.
WWW bssn.go.id𝕏 BSSN_RIFB badansiberdansandinegaraYT badansiberdansandinegara_...IG bssn_ri

History

The National Cyber and Crypto Agency originates from two preceding agencies, the National Crypto Agency and the Cyber Information Defense and Security Desk.

''Lembaga Sandi Negara'' (Lemsaneg)

Lemsaneg was Indonesia's primary signal intelligence agency. It was founded by Lieutenant colonel Dr., a medical doctor assigned to Indonesia's intelligence department at that time, Section B of the Ministry of Defense. At that time, this section was mainly responsible for strategic intelligence analyses during the Indonesian National Revolution. He was assigned to the department by Amir Sjarifuddin, Ministry of Defence at that time, to build a unit for signal intelligence. As a result, Code Service was founded on 4 April 1946. As a medical doctor, he had no background or formal training in intelligence and signal intelligence. However, during his assignment, he completed various crash courses in intelligence and signal intelligence. In 1949, during the Dutch-Indonesian Round Table Conference period, he completed a signal intelligence course from the Dutch Ministry of Foreign Affairs and developed various cryptography methods. His cryptography methods proved useful to secure the transmission of encrypted messages and government communications, during wartime and peacetime.
On 2 September 1949, the Code Service was renamed to the Crypto Bureau, Jawatan Sandi ), through Ministry of Defense Decree Number 11/MP/1949 and placed under the Ministry of Defense. On 16 January 1950, based on Presidential Decree 65/1950, the Crypto Bureau separated from the Ministry of Defense to directly under the Office of The Prime Minister of Indonesia.
On 22 February 1972, through Presidential Decree 7/1972, the Crypto Bureau was renamed to the National Crypto Agency. The name was used until 2017.

''Desk Ketahanan dan Keamanan Informasi Cyber Nasional'' (DK2ICN)

DK2ICN was a coordinating desk under 7th Deputy of Coordinating Ministry for Political, Legal, and Security Affairs, created through Decree 24/2014. The coordination desk was a consortium and membered by representatives from the, the , the Indonesian Telematic Society, Association of Indonesia Internet Provider, Indonesian Internet Domain Name Registry, and independents. Along with the decree, the proposal of a future National Cyber Agency drafted by the National Security Council was also included. Until the agency formed, DK2ICN was still responsible for cyber defense and cyber intelligence.
The predecessor of DK2ICN was the National Cyber Security Desk under Wantannas in 2013. DK2ICN was later renamed the National Cyberspace Desk under Coordinating Ministry for Political, Legal, and Security Affairs in 2016.

Pre-BSSN period state cyber activities

Prior to the BSSN's formation, state cyber activities were carried out by the military intelligence agency and Cyber Operations Unit, the national police force, the State Intelligence Agency, the Coordinating Ministry for Political, Legal, and Security Affairs, the Ministry of Defense, the Ministry of Communication and Information Technology, the Ministry of Foreign Affairs, and each ministry's Computer Security Incident Response Team. Each agency had its own interests and functions but primarily contributed for security purposes and protecting their own cyber infrastructure.

Formation of BSSN

President Joko Widodo, however, seemed displeased with BCN proposal. Widodo believes that the proposed BCN is still lacking something important: infrastructure and human resources. Due to the infeasibility of forming a new agency like BCN, he later chose to upgrade Lemsaneg, which has preexisting infrastructure and readily available human resources. He subsequently combined Lemsaneg and DK2ICN into a new agency: BSSN. On 19 May 2017, Presidential Decree 53/2017, the constituting document of BSSN, was signed by him. The decree also ordered that Ministry of Communication and Information Technology's Directorate of Information Security, and ID-SIRTII/CC to be handed to BSSN to provide BSSN access to state IT infrastructure security and state network protection. The decree, however, decreed that the BSSN become subordinate of Coordinating Ministry for Political, Legal, and Security Affairs for temporary coordinating purposes. On 16 December 2017, Widodo signed Presidential Decree 133/2017. The decree took out the BSSN from Coordinating Ministry for Political, Legal, and Security Affairs to be directed under the President.

Organization structure

Latest organization structure of BSSN was established through Presidential Decree 28/2021. The structure later expanded by Chief of BSSN Decree 4/2023, 6/2024, and 1/2025:
  1. Office of the Chief of BSSN
  2. Office of the Vice Chief of BSSN
  3. Main Secretariat
  4. #Bureau of Planning and Finance
  5. #Bureau of Organization and Human Resource
  6. #Bureau of Law Affairs and Public Communication
  7. #*Division of Strategic Support and Central Leadership Administration
  8. #*#Subdivision of Administration of the Office of the Chief of BSSN
  9. #*#Subdivision of Administration of the Office of the Vice Chief of BSSN
  10. #*#Subdivision of Administration of the Office of Main Secretariat of BSSN
  11. #*#Subdivision of Administration of the Office of Deputy I
  12. #*#Subdivision of Administration of the Office of Deputy II
  13. #*#Subdivision of Administration of the Office of Deputy III
  14. #*#Subdivision of Administration of the Office of Deputy IV
  15. #Bureau of General Affairs
  16. #*Household and State Property Section
  17. #*#Subdivision of Household Affairs and Security
  18. #*Goods/Services Procurement Section
  19. Deputy for Strategy and Policy of Cyber Security and Crypto
  20. #Directorate of Cyber Security and Crypto Strategy
  21. #Directorate of Cyber Security and Crypto Policies on Government Affairs
  22. #Directorate of Cyber Security and Crypto Policies on Technological Affairs
  23. #Directorate of Cyber Security and Crypto Policies on Human Resource Affairs
  24. Deputy for Cyber Security and Crypto Operations
  25. #Directorate of Cyber Security Operations
  26. #Directorate of Information Security and Control Operations
  27. #Directorate of Crypto
  28. Deputy for Government Cyber Security and Crypto and Human Resource Development
  29. #Directorate of Central Government Affairs on Cyber Security and Crypto
  30. #Directorate of Regional Governments Affairs on Cyber Security and Crypto
  31. #Directorate of Cyber Security and Crypto Human Resource Development
  32. Deputy of Cyber Security and Signal Intelligence in Economy
  33. #Directorate of Cyber Security and Crypto for Finance, Trading, and Tourism Affairs
  34. #Directorate of Cyber Security and Crypto for Energy and Natural Resources Affairs
  35. #Directorate of Cyber Security and Crypto for Information Technology, Communication, Media, and Transportation Affairs
  36. #Directorate of Cyber Security and Crypto for Industrial Affairs
  37. Office of Inspectorate General
  38. Centers
  39. #Center of Cyber Technologies and Crypto Technologies Certification
  40. #Center of Data, Information Technology, and Communication
  41. #Center of Human Resource Development
  42. Technical Units
  43. # Electronic Certification Institute, Jakarta
  44. # Batam Signal Detection Center, Batam
  45. # Crypto Museum, Yogyakarta
  46. # Digital Identity Hub Center, Jakarta

Training

The BSSN, since was developed from Lemsaneg, it inherited Lemsaneg's primary training facility, STSN, which now become PoltekSSN.

History

In the past, during the Indonesian National Revolution, the Dinas Code held internships for those interested in being signal intelligence operators. During its formation period in peacetime, in the 1950s–1960s, Djawatan Sandi relied on a special training program called Pendidikan Sandiman dan Juru Sandi. In 1969, the program was elevated into Pendidikan Ahli Sandi Gaya Baru. In 1973, the program was later upgraded with many resources, becoming a school under the name AKSARA. The school was later formally established in 1974, gaining approval by the Department of Education and Culture in 1975. AKSARA subsequently became STSN in 2002 and was formally established as an official state school by Presidential Decree 22/2003. STSN became PoltekSSN in 2019, after Ministry of Research, Technology, and Higher Education Decree 03/M/I/2018 on upgrading STSN to Polytechnics. It was later approved through Ministry of State Apparatuses and Bureaucratic Reform Decree B/1007/M.KT.01/2019, and Chief of BSSN Decree 12/2019.
Aside from PoltekSSN's rigorous education to train future BSSN members, BSSN also held less rigorous training for field and applied operators from another institutions. This program is called Diklat Sandiman, which is available in 2 levels: Level II and Level I.