EduAsiaNews, YogYakarta – The rapid digital transformation across all sectors, including education, requires institutions to be well-prepared to address cybersecurity threats. The adoption of various technologies, ranging from online learning platforms to Learning Management Systems (LMS), has become integral to university services. However, behind this convenience, the education sector is increasingly considered vulnerable to cyberattacks due to the high-value information assets it manages.
As part of efforts to strengthen campus cyber resilience, Universitas Muhammadiyah Yogyakarta (UMY) has officially established a Computer Security Incident Response Team (CSIRT) and obtained a Registration Certificate (Surat Tanda Registrasi/STR) from the National Cyber and Crypto Agency of the Republic of Indonesia (BSSN). With this registration, UMY is recorded as the third Muhammadiyah and ‘Aisyiyah Higher Education Institution (PTMA) in Indonesia to formally establish a cyber incident response team.
The Head of CSIRT UMY, Dr. Nur Hayati, S.T., M.T., during the STR handover ceremony held on Thursday (12/2) at the AR Fachruddin A Building, 5th Floor, UMY, explained that the establishment of CSIRT represents a strategic step toward building a structured, professional, and integrity-based information security system.
“CSIRT UMY was formed at the end of 2025 and formally ratified in early January 2026. We are committed to realizing a reliable, professional, and integrity-driven cyber resilience framework within UMY,” she stated.
She further noted that this vision has been translated into several strategic measures, ranging from strengthening information security systems to building cross-institutional collaboration. Such collaboration extends not only within the university but also to other higher education institutions and relevant agencies.
CSIRT UMY provides two primary services: cyber incident handling and cybersecurity alerts, along with their derivative services. Incident reporting can be conducted via email, telephone, or WhatsApp, all directly connected to the CSIRT team.
Nur also revealed that internal monitoring has identified several potential security vulnerabilities, as well as incident reports that are currently under investigation. The team has expressed appreciation to individuals who have contributed by reporting potential system vulnerabilities.
Meanwhile, the Director of Cyber and Crypto Security for Human Development at BSSN, Agus Prasetyo, S.Kom., M.M., highlighted the rising trend of cyberattacks in the education sector, including recent data breach cases affecting several universities in Indonesia.
“These data breaches are highly disruptive. Recently, several higher education institutions were targeted. We recorded 15 universities affected last week, and our team assisted in the follow-up response. Therefore, every organization must anticipate threats of this nature,” he explained.
Agus emphasized that the presence of a CSIRT plays a crucial role in ensuring rapid incident response, mitigating impacts, and enhancing cybersecurity literacy within the campus environment. According to him, cybersecurity is a shared responsibility that requires cross-sector collaboration.
“The handover of this registration certificate marks an important milestone in institutional preparedness for the prevention, handling, and recovery of cybersecurity incidents in a structured and coordinated manner. We hope that collaboration among stakeholders will continue to strengthen, both in information exchange and in the enhancement of human resource capacity,” he concluded. (NF)
