Beyond ISO 27001 Certification: Are Your Security Controls Actually Working?

27-08-2026

Online on Zoom

Register now to get the zoom link

15:00–16:00 WIB

This Webinar Starts In

27-08-2026

About This Webinar

Getting ISO 27001 certified is a milestone. It’s also not the same thing as having security controls that work when it matters.

In many organisations, controls that look solid on paper, such as access control, incident response, supplier security, and risk treatment, quietly stop functioning the way they’re supposed to. The certificate stays valid. The gap stays hidden until something goes wrong.

This session looks at what ISO 27001 certification actually demonstrates, what it doesn’t guarantee, and where the common breakdowns happen. It also covers how ISO 27001 fits alongside Indonesia’s Personal Data Protection Law (UU PDP), as context for your security posture, not a substitute for legal and governance obligations.

What You’ll Learn:

What ISO 27001 actually requires, and what certification does (and doesn’t) guarantee

Where controls commonly break down in practice: access control, incident response, supplier security, and risk treatment

How ISO 27001 supports the security side of UU PDP, and where it stops

Speaker

Dea Saka Kurnia Putra

BSSN (Industrial Cybersecurity & Crypto) Indonesia Representative, ISO/IEC JTC1/SC27 Editor & Drafter, Indonesian National Standards (SNI) on Information Security

Dea Saka Kurnia Putra works in industrial cybersecurity and crypto at BSSN (Badan Siber dan Sandi Negara), Indonesia's national cyber and crypto security agency. He represents Indonesia at ISO/IEC JTC1/SC27, the international committee responsible for information security standards, and serves as an editor and drafter of Indonesia's national standards (SNI) on information security. Drawing on this standards background, Dea will unpack the difference between having an ISMS on paper and having security controls that hold up operationally, and what that means for organisations navigating both ISO 27001 and UU PDP requirements.

Secure Your Spot for Our Webinar

Certified doesn't always mean protected. Understand where controls like access control, incident response, and supplier security tend to break down in practice, and what to check in your own organisation first.

Register Now

About Mitrais

Mitrais is a world-class technology company based in Indonesia and is part of the global CAC Holdings group. Founded in 1991, we have developed and implemented software for more than 700 clients. We are committed to building long-term and trusting relationships.

Learn More