What's Happening?
Indonesia's National Cyber and Crypto Agency (BSSN) is advocating for human oversight as a critical component in managing the cybersecurity risks associated with the rapid adoption of Artificial Intelligence (AI). Sulistyo, Deputy for Government Cybersecurity
at BSSN, highlighted that despite the 'AI tsunami' driven by new AI models, human involvement remains central to securing these systems. He stressed the importance of strong governance, human oversight, and the ability to detect and handle cyber incidents, especially as AI adoption outpaces organizational readiness. This perspective was shared during the National Cyber Security Connect (NCC) 2026 event in Jakarta. The BSSN has also launched a technical guidance program for 35 central government agencies to enhance their preparedness and response capabilities to cyber incidents. This program aims to improve understanding of attack patterns, equip teams with analytical tools, and teach digital investigation techniques to support incident response.
Why It's Important?
The BSSN's emphasis on human oversight in AI security is crucial given the increasing sophistication of cyber threats, some of which are now AI-accelerated. Recent incidents, such as a ransomware attack in Japan affecting 53 companies, an AI-assisted intelligence system in the U.S. mistakenly identifying cargo as nuclear weapon components, and an AI agent breaching Australia's Medicare portal, underscore the urgent need for robust security measures. These events demonstrate that the ability to harness AI must be coupled with the ability to secure it. The BSSN's approach, which includes 'Securing AI' (ensuring the technology itself is safe) and 'Using AI to secure' (leveraging AI for cyber defenses), provides a framework for managing these complex risks. The program for government agencies is vital for strengthening national cyber resilience and protecting critical infrastructure and data from evolving threats.
What's Next?
The BSSN's technical guidance program for central government agencies is expected to continue, aiming to bolster their Cyber Incident Response Teams (CSIRTs). This initiative will likely lead to improved technical preparedness and capabilities across various government sectors in Indonesia. The agency will continue to promote its two-pronged approach to AI adoption: securing AI systems through data protection, system integrity, and accountability, and utilizing AI to enhance cyber defenses. Furthermore, BSSN will advocate for different levels of human oversight—human in the loop, human on the loop, and human in command—depending on the autonomy of AI systems. The adoption of frameworks like NIST SP 800-61 and local regulations will further solidify Indonesia's cybersecurity posture, encouraging a multi-stakeholder approach involving government, industry, academia, and communities to build cyber resilience.
Beyond the Headlines
The discussion around human oversight in AI security extends beyond immediate incident response to broader ethical and governance considerations. The BSSN's framework highlights the ongoing tension between technological advancement and human control, particularly as AI systems become more autonomous. The incidents cited, especially the U.S. case of an AI-assisted system nearly triggering a military operation, underscore the profound implications of AI errors and the necessity of human judgment in critical decision-making processes. This push for human oversight reflects a growing global recognition that while AI offers immense benefits, it also introduces new vulnerabilities that require careful management. The emphasis on 'security by design' and 'privacy by design' in innovation processes, as noted by the Ministry of Creative Economy, suggests a shift towards embedding security considerations from the outset, rather than as an afterthought, which is crucial for fostering trust in the digital economy.
