Towards a safer cyberspace with the Product Security Baseline

A joke says, cybersecurity is like protecting against asteroids. Everyone thinks cybersecurity is a waste of time and effort, but they quickly change their minds when an attack occurs.

In this all-converging era, there's no such thing as being overly cautious. The complacency that an organization is deemed secure enough should be thrown away, considering that attackers need just one small loophole to gain control.

Various daily activities carried out online since the COVID-19 pandemic have also become a gold mine for irresponsible parties. As companies, government agencies, and organizations adopt increasingly sophisticated technology, attackers are no less rapidly upgrading their capabilities.

These are some of the main reasons why cybersecurity should be a priority and an integral part of other business functions, said Syarbeni, Cybersecurity and Privacy Protection Officer at Huawei Indonesia.

As a global ICT solutions provider, Huawei has been consistently committed to cybersecurity since day one.

In this interview session, Syarbeni will discuss in more depth the issue of cyber security in Indonesia, how Huawei's approach is, and the important role that all parties play in helping to strengthen the security and resilience of the nation and state against new threats that arise from the cyber world.

Q&A

Q1:

What motivates Huawei to play an active role in raising awareness of cybersecurity standards in the ecosystem through various programs, including support for CyberHub Fest which is the result of collaboration with BSSN and ACCI?

A1:

As digital technologies are being studied and implemented further in different parts of the world, cybersecurity is becoming much more important than ever. On the other hand, due to the pandemic, many parties are spending more time in cyberspace. This is the new normal.

Cyber security and protection of personal data are important social issues for every individual, household, organization and even country. Thus, creating a healthy and safe cyberspace is more critical than ever.

Huawei has supported the CyberHub Fest for the second year in a row. Our support for CyberHub Fest is part of our commitment for more than 22 years of Huawei's presence in Indonesia to actively contribute to the development of the ICT ecosystem in Indonesia and create a safer cyberspace.

Q2:

What role does Huawei play in improving cybersecurity? What are the reasons that prompted Huawei to release the Product Security Baseline?

A2:

Improving product security is the key to mitigating cybersecurity incidents that occur frequently around the world.

Ensuring that security management is included in the product development process, and making cybersecurity a fundamental product capability are two fundamental approaches.

Therefore, we must develop and implement a Baseline, namely the most commonly found security provisions, so that each product can be ensured to meet the same requirements. Quality will also improve by itself, because the Baseline is also constantly modified to meet new challenges.

Baseline is part of Huawei's comprehensive cybersecurity framework. Various quality management measures, including Baseline, are strictly implemented to ensure product safety quality, and prevent the risk of unwanted incidents from occurring.

In its application, Baseline is not only applied to Huawei products, but also the supply chain as a whole.

Our best practices over the past 10 years have shown that Baseline is an effective way to ensure product quality and security and Huawei Baseline has an excellent track record in our customer network.

Through the release of Huawei's Product Security Baseline, we hope to be able to communicate and discuss the Baseline with every stakeholder, including operators, companies, upstream and downstream supply partners, as well as regulators and governments.

Items to discuss include security management, technical specifications, and test and verification solutions. We are sure that we can continue to improve the overall quality of cybersecurity in the supply chain.

Q3:

What are the main contents of the Huawei Product Security Baseline?

A3:

Huawei's baseline was developed with the following philosophy in mind: results-oriented, universal, applicable to all, and constantly being optimised. This makes it effective, easy to implement, verifiable, and consistently improves the security level of Huawei products.

https://public.flourish.studio/visualisation/8775639/

https://public.flourish.studio/visualisation/8775675/

https://public.flourish.studio/visualisation/8776076/

https://public.flourish.studio/visualisation/8776108/

https://public.flourish.studio/visualisation/8776838/

https://public.flourish.studio/visualisation/8776855/

https://public.flourish.studio/visualisation/8777259/

https://public.flourish.studio/visualisation/8777274/

https://figshare.com/s/446052834b6bb1907309

https://figshare.com/s/b18ee2c085467e2f300b

https://figshare.com/s/9c85d2ae7dd10f34f12f

https://figshare.com/s/d3cef1b3171b3bdd60d7