Computer and Internet Security Frameworks

writen by Adi Apriyanto
Indonesia Bogor, 14 April 2025
This project now Opensource, 15 Mei 2025

Prologue

Project ini bertujuan untuk membantu UKM dalam memahami kepatuhan dasar dalam dunia keamanan cyber, ada 5 fondasi dalam kerangka kerja ini yaitu Informasi, Organisasi, Perawatan, Pemeliharaan dan Perlindungan.

Information

From Advisories

• CVE/CWE/CVSS

From News

• New Products
• Incident Reports
• Platform Update & Patch
• Vulnerable Bugs & Exploit

From CTI

• Attacking Info
• ZeroDay

Organization

Business Logic
eg. Risk Management

Application Logic
eg. Workflow, Secure by Design

Supply chain Management
eg. SCM

Customer Relationship Management
eg. CRM

Corporation or IT Department

• Data Regulation
  eg. UUD PDP (ID), GDPR,
• Human Resources
  
  • Competition
    eg. Corporation or Vendor BugBounty Programs
  • Certification
    eg. CEH,

Corporation or IT Management
eg. ISO 27001, CIS, NIST,

IT Development
by IT or Vendor

• Authorization
• Databases

IT Security
by IT or Vendor
eg. SOC, SOAR,

IT Networking
by IT or Vendor
eg. Mikrotik, Cisco,

IT Server
by IT or Vendor
eg. SysAdmin

Offices

• Email Services
  eg. 365,
• Data Sharing
  eg. NAS, AD,
• Meeting Conference
  eg. Teams,

Maintenance

Backup

• Cloud Backup
  eg. OneDrive, GoogleOne,

• Local Backup

  • Schedule Backup
  • Encrypted Backup

• Update

  • Firmware

• Upgrade

• Restoration

  • Devices
  • Peripheral

• Configuration

Sustenance

System

• OS
  eg. Windows Server, Ubuntu Server,

• VM
  eg. KVM

• Orchestration
  eg. Kubernetes

• Container
  eg. Docker

• Application
  Api, Frameworks

• Server

  • Virtual Private Server
  • Dedicated Server
  • Hosting
  • Paas

• Networking

  • Static or Dedicated Ip
  • Shared or Dynamic Ip
  • Switch Managable
  • Router Firewall
  • VPN

• Development

  • CI / CD
  • SDLC
  • PenTesting

• Ai

  • Ai-Driven
  • Ai-Agent
    eg. Gemini, Copilot, Grok,
  • MCP

Machine

• OT
  • ICS / DCS
  • SCADA
  • PLC
  • IoT

Protection

Endpoint Security
eg. SIEM, XDR, IPS / IDS

Reverse Proxy
eg. Cloudflare

Forward Proxy
eg. Squid

Networking

• Topology Isolation
• DDos Protection

Development

• WAF
• ZTA
• MFA

Strike Conditions

• Mitigation
• Reaction
• Recovery
• Response
• Reports