Data security basics for companies
Data security is often seen as the IT team’s job alone. Yet many incidents start with simple things: weak passwords, overly broad access, or backups that were never tested. With Indonesia’s Personal Data Protection Law in force, this is also an obligation.
Written by the Mehuli team
01Know what data you hold
Map which personal and important data you store, where, and who can access it. You can’t protect data you don’t know you have.
02Grant only the access needed
Each person needs access only to the data their work requires. Review access rights regularly, especially when people change roles or leave.
03Protect accounts
Use strong passwords and two-step verification for important systems. This prevents many account break-ins.
04Back up, and test the restore
A backup is only useful if it can be restored. Test restoring regularly, not just the backup process.
05Have an incident plan
Decide who to contact, what to do, and how to inform those affected. A plan prepared in advance makes the response faster and calmer.
