Agency prepares ISO-aligned safeguards to protect digital halal services and certification data.
Indonesia’s Halal Product Assurance Agency (BPJPH) is preparing an information security management system based on SNI ISO/IEC 27001:2022 to strengthen the security and continuity of its digital halal certification services. The agency’s Principal Secretary, Mr. Muhammad Aqil Irham, outlined the initiative in Jakarta on 5 November 2026, saying staff training, risk assessments and formal security controls would support preparations for a future certification audit.
Strengthening Security Across Digital Halal Services
The initiative responds to BPJPH’s expanding use of digital services, particularly its Sistem Informasi Halal (Sihalal), or Halal Information System. According to the agency, stronger information security is needed to protect data and strategic information used in halal certification and to maintain the continuity of public services.
The agency’s announcement said an in-house training programme on preparing information security management system documentation was held at BPJPH headquarters in Jakarta. It involved dozens of employees from all BPJPH work units and featured Mr. Akbar Aryanto, a Pranata Komputer Ahli Madya (mid-level expert computer analyst) at Indonesia’s National Standardization Agency (BSN), and Mr. Daya Aruna Bratajaya, a Widyaiswara Ahli Muda (junior expert instructor). BPJPH’s announcement did not identify Bratajaya’s institutional affiliation.
Principal Secretary Irham said information security should become part of BPJPH’s organisational governance and working culture, rather than being treated only as an administrative or certification requirement. He highlighted three core principles: confidentiality, integrity and availability. These principles are intended to ensure that information is accessed only by authorised parties, remains accurate and complete, and is available when needed.
He also stressed that responsibility for information security extends beyond the agency’s Data and Information Centre. Every work unit and employee must protect information in accordance with their respective duties and authority.
Preparing for the ISO 27001 Certification Audit
Mr. Nurhanudin, Head of BPJPH’s Data and Information Centre, said the agency would refine its information security management system documentation following the training. The work includes policies, procedures, guidelines, work instructions, forms and implementation records.
The next steps include identifying information assets, assessing security risks, preparing risk-treatment plans and developing a Statement of Applicability (SoA), which sets out the information security controls selected for implementation.
BPJPH also plans to strengthen internal communication, implementation, monitoring, evaluation and periodic audits. The completed documentation and evidence of implementation will support the certification audit under SNI ISO/IEC 27001:2022.
The standard, adopted by Indonesia as a national standard, sets requirements for an information security management system. BPJPH’s current announcement describes preparations for implementation and certification, not the completion or award of certification. The initiative is intended to strengthen the security, reliability and trustworthiness of the digital services supporting Indonesia’s halal certification system.
