DESIGNING REFERENCE ARCHITECTURE FOR KYC DATA PROTECTION TO MINIMIZE DATA BREACH RISK IN ORGANIZATION XYZ

Abstract

This thesis aims to design a reference architecture for data protection to reduce data breach risk in organization XYZ, a software development company, with a specialization in KYC (Know Your Customer) data with an expected result of a risk management reference architecture. The reference architecture takes translated controls from PCI DSS, POJK and UU PDP that is specifically chosen for organization XYZ’s needs, this aligns the business goals and risk appetite in order to comply with Undang-Undang No. 27 Tahun 2022 Tentang Perlindungan Data Pribadi. With this reference architecture, it is expected that XYZ’s maturity level would grow as currently there are no existing measures that are specially made to cover data protection in XYZ.