Jakarta. The Indonesia Commodity & Derivatives Exchange (ICDX) and the Indonesia Clearing House (ICH) have officially received ISO 27001:2022 certification for Information Security Management Systems from SGS Indonesia.

For ICH, ISO 27001:2022 is an upgrade from ISO 27001:2015, which the entity secured in 2020. ICDX and ICH are corporations within a single commodity futures and derivatives trading ecosystem, with ICDX acting as the exchange. The ICH acts as the clearing, guarantee, and transaction settlement institution.

"This ISO 27001:2022 certification demonstrates our commitment to maintaining the highest level of data and information security for ICDX. Especially with the rise in cyberattacks, ISO 27001:2022 certification is a crucial part of data security. As part of the commodity futures trading ecosystem, we naturally collect a lot of data, both transactions and other data related to trading on the Exchange, and we view this data as a critical asset that must be protected," ICDX President Director Fajar Wibhiyadi said.

"With the advancement of information technology, including the use of cloud computing and remote work, this is also the basis for this certification. For us, data security has become a crucial part of our business processes. ICDX's efforts are not solely about maintaining data security and protection. The ISO 27001:2022 demonstrates our commitment to improving the quality of the commodity futures and derivatives trading ecosystem in Indonesia," said Fajar Wibhiyadi.

Waras Putri Andrianti, the director for business assurance at SGS Indonesia, highlighted how security was no longer an option, but a necessity amidst growing cyber threats.

"ISO 27001:2022 is a global standard that ensures companies have a robust and structured information security management system. As an international certification body, SGS believes that implementing ISO 27001:2022 is not just about compliance, but about building trust. This certification helps companies protect sensitive data from the risk of breaches, minimize information leaks, and provide a commitment to information security to partners and customers," she said.

"When organizations like ICDX and ICH are ISO 27001:2022 certified, the benefits extend to external parties and stakeholders. They gain a company commitment to maintaining information security, transparency, and reducing business risks, creating a safer and more sustainable business ecosystem. We at SGS are committed to supporting companies in Indonesia to adopt this standard for a more trusted and competitive business future."

ISO 27001 is an international standard for Information Security Management Systems (ISMS) published by the International Organization for Standardization (ISO). This standard establishes best practices in data and information protection, including security risk management, access control, encryption, and protection against cyber threats.

ISO 27001:2022 is now the minimum standard required for technology-based companies. This standard emphasizes updating and refining risk management, such as cybersecurity and threat response. ISO 27001:2022 emphasizes several aspects, including personal data protection in accordance with Law No. 27 of 2022 concerning Personal Data Protection; additional controls including data masking and threat intelligence; cloud computing approaches, remote work, and the complexity of modern security threats; strengthening Data Leakage Prevention (DLP) and Identity & Access Management; and web filtering to prevent access to malicious sites.