Cybersecurity continues to pose a significant challenge for both individuals and organisations globally. With the increasing sophistication and frequency of cyber threats, businesses across all sectors need to continuously innovate to effectively mitigate these risks.
In the current business environment in Indonesia, the banking and financial services industry (BFSI) has become a prime target for cyber attacks due to the sensitive nature of the data and the high value of financial transactions. According to Indonesia’s Financial Services Authority, cyber incidents impact the FSI nearly three times more than other industries in the country.
While the financial services industry frequently receives the most attention for cyber attacks, advancing cybersecurity is essential across all sectors, including public services, healthcare, and retail. Cyber threats are becoming more sophisticated and widespread, impacting any industry that manages sensitive data and depends on digital infrastructure.
Strong cybersecurity measures are vital for safeguarding against data breaches, financial losses, and operational disruptions, thereby ensuring the protection and integrity of information and services across various sectors.
One prominent solution to advancing security postures in the era of advanced threats is Zero Trust. In recent years, Zero Trust has gained significant traction across sectors, a recent study found that the adoption of this advanced security framework is on the rise, with more than 86% of respondents beginning the transition to Zero Trust.
The prevalent adoption of Zero Trust is mainly due to its effectiveness in mitigating sophisticated cyber threats by eliminating implicit trust and continuously verifying every access request. This approach significantly enhances security by ensuring that all users, whether inside or outside the organisation, are authenticated, authorised, and continuously validated before being granted access to critical resources.
In the context of Indonesia, the adoption of Zero Trust is particularly pertinent given the nation’s track record of cyber-attacks. Implementing this security framework allows Indonesian organisations to enhance the protection of sensitive data and maintain the integrity of their digital operations. This, in turn, strengthens their overall cybersecurity posture and ensures compliance with regulatory requirements.
Furthermore, organisations in Indonesia can enhance the capabilities of Zero Trust by integrating Generative AI into the framework. This integration can improve threat detection and response times, enabling more proactive and adaptive security measures to protect sensitive data and critical systems.
In addition to enhancing the capabilities of Zero Trust, AI also streamlines the process by introducing behaviour-based user risk scoring. By analysing real-time data, AI detects unusual user behaviour, offering organisations customised security recommendations.
Despite the promising potential of Zero Trust and Generative AI, adopting these solutions is often daunting. Implementing Zero Trust and AI in large networks requires meticulous planning and coordination across multiple teams. Additionally, integrating these principles into legacy systems can be difficult due to compatibility issues, often necessitating significant upgrades or replacements.
So, how can organisations effectively implement Zero Trust and AI models to enhance their security posture? What strategies can they employ to navigate the inherent complexities?

