About PT Bank KEB Hana Indonesia
PT Bank KEB Hana Indonesia (Hana Bank) is a subsidiary of Hana Financial Group, known for its strong commitment to digital banking. The bank has been at the forefront of offering digital services to complement its branch network. With a focus on innovation, almost all of Hana Bank’s transactions are now carried out through digital channels, including MyHana Mobile Banking, Internet Banking, LINE Bank by Hana Bank, Corporate Banking System (CBS), and ATMs. Hana Bank strives to provide seamless digital banking experiences for both individuals and businesses.
The Challenges
Hana Bank’s digital transformation accelerated in 2021 with the launch of the LINE Bank by Hana Bank app, a strategic initiative with LINE Financial Plus Corporation. This venture presented several key challenges Hana Bank needed to overcome to meet its digital ambitions effectively.
“We identified the need to reinforce three crucial pillars: people-by promoting security awareness; processes- by updating internal policies; and technology, by investing in advanced cybersecurity and scalable cloud solutions” said Kristian Himawan as Department Head Information Security & Governance.
As digital readiness progressed, Hana Bank recognized the critical importance of robust cybersecurity to protect sensitive customer information. Additionally, by 2022, cloud technology was identified as essential for supporting a flexible and scalable security framework, which provided more efficient deployment compared to traditional hardware
CDT Proposed Solutions
Having previously collaborated with CDT, Hana Bank implemented AWS solutions that aligned with its vision for a digitally resilient infrastructure. CDT addressed Hana Bank’s challenges with a suite of AWS solutions tailored to enhance security, scalability, and operational efficiency.
A key component of the solution was the deployment of a Web Application Firewall (WAF) for corporate applications, offering strong protection against the risk of a malicious actor discovering vulnerable applications, filtering out viewers trying to hide their identity, blocking sources associated with bots or other threats, and providing protection against exploitation of a wide range of vulnerabilities.
Regarding protection against unauthorized access, CDT implemented AWS IAM Identity Center for centralized access controls to ensure that only authorized personnel have access to sensitive data and resources across AWS environments.
CDT also implemented Amazon GuardDuty, a threat detection service that continuously monitors Hana Bank’s AWS environment for suspicious activity. Leveraging machine learning, anomaly detection, and malware analysis, GuardDuty has ensured a secure, resilient digital environment for the bank.
To further strengthen governance, CDT deployed AWS Control Tower alongside AWS Security Hub, giving Hana Bank a centralized platform to manage its AWS environment with detective controls. This setup enabled Hana Bank to monitor compliance and security across its multi-account structure, supporting secure, compliant growth on AWS.
Results and Benefits
The partnership with CDT and deployment of AWS solutions delivered transformative outcomes for Hana Bank. The IT team at Hana Bank gained enhanced cybersecurity knowledge, allowing them to maintain a more secure digital environment with confidence.
The shift to AWS infrastructure also accelerated application development timelines by approximately 50%, enabling Hana Bank to launch new services and features to market faster and respond more effectively to customer demand. “Previously, developing an application with conventional, on-premise methods could take up to six months. With AWS, we’ve reduced development time to just two to three months” Kristian explained.
Additionally, CDT’s initial security assessments and ongoing AWS setup helped Hana Bank meet rigorous cybersecurity standards, further enhancing resilience. Through this digital transformation journey, PT Bank KEB Hana Indonesia has strengthened its position in the competitive banking sector, delivering secure, agile, and innovative banking services with enhanced digital capabilities.
