Home

About MESA-CSIRT

Computer Security Incident Response Team (CSIRT) Mubadala Energy South Andaman, abbreviated as MESA-CSIRT, was established to support the cybersecurity system within Mubadala Energy Indonesia. MESA-CSIRT is classified as an Organizational Cyber Incident Response Team with operational funding sourced from the company's internal budget. This team is also part of the global corporate cybersecurity ecosystem, coordinating with the Global IT Security team at headquarters.

Vision

To become a leading cyber incident response team that is proactive, reliable, and trusted in protecting Mubadala Energy's information assets, ensuring business operational continuity, and strengthening collaboration with national regulators (BSSN and SKK Migas) to create a robust and sustainable corporate cybersecurity ecosystem.

Mission

To protect the company's information assets through effective, swift, and coordinated cyber incident handling, while supporting the implementation and continuous improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001 standards.

Team Structure

Chairman: IT Manager Indonesia

Secretary: IT GRC Indonesia Lead
Crisis Manager: HSSE & Asset Integrity Team Indonesia
Cybersecurity Manager: Manager Cybersecurity
IT Incident Service Center Sub-team: IT SOC Team
Communication Sub-team: Communication Team Indonesia
Legal Sub-team: Legal Team Indonesia
Risk Management Sub-team: HSSE & Asset Integrity Team Indonesia
Physical Security Sub-team: HSSE & Asset Integrity Team Indonesia

Contact Information

Team Name: Computer Security Incident Response Team (CSIRT) Mubadala Energy South Andaman (MESA-CSIRT)

Address: Menara Astra, 18th Floor, Jl. Jenderal Sudirman Kav. 5-6, Central Jakarta 10220

Time Zone: WIB – Western Indonesia Time (GMT+7)

Phone Number: (+62 21) 39807200 (working hours Monday–Friday, 07.00–18.00 WIB) / 24/7 On-call

Fax Number: 02139807203

Website: https://idmesa-csirt2.powerappsportals.com

Recommended Contact Method

To contact MESA-CSIRT, please use email at id[dot]csirt[at]mubadalaenergy[dot]com or via phone number (+62 21) 39807200 during working hours or 24/7 on-call.

Main Services

Cybersecurity Alerts and Warnings

Delivery of alerts and early warnings regarding the latest vulnerabilities or cyber threats to constituents. CSIRT informs about incidents or threats (new malware, zero-day threats, attack indicators) to relevant electronic system owners, including providing recommendations for necessary preventive actions.

Cyber Incident Handling

Response to cyber incidents, including coordination, analysis, technical recommendations, and direct (on-site) assistance for incident mitigation and recovery. CSIRT acts as the incident control center: receiving reports, conducting initial analysis, providing mitigation guidance, assisting with problem isolation/resolution, and ensuring system recovery steps are completed thoroughly.

Additional Services

Service	Description
Electronic System Vulnerability Handling	Receiving and following up on vulnerability reports in electronic systems owned by constituents, including analysis, verification coordination, and remediation recommendations.
Digital Artifact Handling	Analysis of digital artifacts related to incidents (suspicious files, malware, digital evidence), providing technical information, and supporting forensic processes.
Threat Intelligence Notifications	Proactive monitoring of potential cyber threats and delivery of periodic information/reports on attack trends, common vulnerabilities, or threat intelligence.
Attack Detection	Early detection of cyber attacks through 24/7 security monitoring facilities in collaboration with SOC/MSSP to monitor company networks and systems.
Cybersecurity Risk Analysis	Assessment and analysis of cybersecurity risks to information assets and IT infrastructure to understand security priorities and develop mitigation plans.
Incident Handling Readiness Consultation	Guidance on cyber incident readiness, incident response procedures, response plan development, drills/testing, and technical team competency enhancement.
Cybersecurity Awareness Building	Security awareness programs to cultivate cybersecurity awareness through socialization, campaigns, regular training, phishing simulations, and educational material distribution.

Types of Incidents Handled

MESA-CSIRT handles various types of cyber incidents affecting the company's Information Technology and Operational Technology systems, including:

Malware
Phishing
Website defacement
Distributed Denial of Service (DDoS)
Other incidents impacting confidentiality, integrity, or availability of information services

Incident Reporting

Any cyber security incident can be reported to CSIRT via email at id[dot]csirt[at]mubadalaenergy[dot]com by attaching:

CSIRT will follow up on reports according to procedures. All reports will be recorded in the CSIRT incident recording system and their confidentiality will be maintained.

Policies

Cooperation and Information Disclosure

MESA-CSIRT actively establishes cooperation and coordination with external institutions such as BSSN and other CSIRTs to support national cybersecurity efforts. CSIRT is ready to share information about cyber incidents with government agencies, regulators, law enforcement, and related constituents. In sharing information, CSIRT maintains data confidentiality in accordance with regulations. Sensitive information (state secrets, corporate secrets, personal data) will be kept confidential and only disclosed to authorized parties or constituents who need it.

Communication and Authentication

For regular/routine communication, MESA-CSIRT uses official email and telephone. Instructional communication or incident notifications are delivered via email.
For the exchange of sensitive or classified information, CSIRT implements additional authentication mechanisms and encrypted/secure communication channels. Encryption (PGP/GPG) will be used to protect message confidentiality.

Download Dokumen RFC 2350

The complete RFC 2350 document is available for download in PDF format:

📄 Download RFC 2350 PDF

MESA-CSIRT

Computer Security Incident Response Team - CSIRT

Mubadala Energy South Andaman