Blog

PT GUNATRONIKATAMA CIPTA (GASI)

Secure Personal Data Protection
for the Company's Internal
Infrastructure

PT Gunatronikatama Cipta

PT Gunatronikatama Cipta, also known as GASI, is a leading company providing payroll services. GASI believes the salary to be the central link between the company and the employee. Therefore, the provision of salaries should be done effectively and efficiently.

In facilitating the payroll process, GASI has provided a thorough system that assists in the calculation of salaries, taxes, as well as the ability to print and send payslips to the workforce. Thus, allowing companies to focus more on other crucial tasks at hand.

Until now, the payroll system provided for by GASI has been highly trusted and utilized by many companies, both multinational and local. This system has also succeeded in helping the payroll process for more than 50,000 employees every month.

BACKGROUND

As a professional payroll service provider, PT Gunatronikatama Cipta or GASI has always strived to provide the highest quality of services for its customers. GASI aims to facilitate a payroll system that utilizes strong and thorough security mechanisms, as any mishap in this crucial area can inevitably encourage distrust within the customer, resulting in serious legal pitfalls, as well as other costs.

In addition, the payroll system also possesses capabilities in processing a large amount of employee data, which includes info such as names, addresses, bank account details, social security numbers, and salary information. Such data is considered highly sensitive information and must be safeguarded from potential breaches, general misuse, loss, as well as any potential prying eyes. When a system possesses poor security, it leaves itself vulnerable to a variety of cyber-attacks ranging from malware infections, data leakages, as well as other malicious forms of digital breaching.

On this basis, GASI has decided to cooperate with LOGIQUE DIGITAL INDONESIA in performing penetration testing on the company's internal infrastructure. This way, GASI can ensure that the company's digital assets are completely secure and free from infiltration, avoiding potential losses in the process.

Challenge

The issue of privacy and data protection is a central challenge for GASI. To date, GASI has managed the payroll process for more than 50,000 employees every month. Payroll records of all such employees must of course be handled confidentially and stored on a secure infrastructure.

Within this current digital era, cyber-attacks can come from internal or external sources; attackers are constantly trying to find and exploit weak security systems.

If the attacker finds that the system possesses vulnerabilities, they can promptly perform a variety of harmful actions, most notably that of data theft. In this regard, the company will certainly incur a variety of negative consequences, which can range from losing the trust of their clients, damaging its reputation, as well as having to face legal penalties.

Therefore, pentesting one’s internal infrastructure is a priority, one GASI specializes in. In this regard, GASI ensures that the internal systems they use are truly robust and secure.

Internal Infrastructure Penetration Testing as a Solution

Internal infrastructure penetration testing assesses the overall security of a company's internal network, the network connected to the company, and the network available to the people operating within it. This security test checks these areas for vulnerabilities before attackers can potentially locate them themselves. Thus, patching or repairing these loopholes can be done immediately.

In conducting penetration testing, the LOGIQUE team uses two testing strategies. The first strategy is known as the Black Box method, where the tester will play the role of the attacker who holds no knowledge about the system being infiltrated. Then the second strategy is known as the Gray Box method, namely security testing where the tester already holds some basic knowledge needed to enter the system such as login credentials.

Through these two strategies, the LOGIQUE team can conduct comprehensive testing services in order to meet any business requirements for a secure payroll system both internally and externally.

Result Obtained

Penetration testing conducted by LOGIQUE has helped GASI in providing a more secure internal infrastructure. PT GASI also has a stronger cyber defense system, allowing them to avoid cyber-attacks, potentially leading to a wide range of legal and reputational consequences.

GASI has expressed satisfaction with the services provided for by LOGIQUE. By using LOGIQUE's pentesting services, GASI can overcome a variety of business challenges, especially those related to privacy and the protection of personal data.

Please visit LOGIQUE's pentest service page to receive detailed information about this provision.