REPUBLIC INDONESIA STATE NEWS

No. 318, 2011 STATE POLICE OF THE REPUBLIC OF INDONESIA. Interpol Network. An Aseanapol Network. USE.

REGULATION OF THE Indonesian REPUBLIC OF INDONESIA STATE POLICE

NUMBER 5 YEAR 2011

ABOUT

USE OF THE INTERPOL NETWORK (I-24/ 7)

AND THE NETWORK OF ASEANAPOL (e-ADS) IN INDONESIA

WITH THE GRACE OF GOD YANG MAHA ESA

CHIEF OF THE INDONESIAN REPUBLIC OF INDONESIA,

DRAWS: A. That the advancement of science and technology in the era of globalization in addition to the speed of the flow of information that makes the world unrestricted (borderless), has also been negatively affected by the development of the world. National, regional and international crime;

b. that national, regional and international crime developments are so fast that it has encouraged countries and agencies to increase cooperation in the areas of information exchange and data through the I-24/7 and e-ADS; communication networks;

c. that under consideration as referred to in letter a and letter b, it is necessary to establish the Rule of the Head of the State Police of Indonesia on the Use of the Interpol Network (I-24/ 7) and the Aseanapol Network (e-ADS) in Indonesia;

www.djpp.kemenkumham.go.id

2011, No. 318 2

Given: 1 Law Number 2 Year 2002 on the State Police of Indonesia (Indonesian Republic of Indonesia Gazette 2002 No. 2, additional Gazette of the Republic of Indonesia Indonesia Number 4286);

2. Law No. 11 of 2008 on Information and Electronic Transactions (State Sheet of the Republic of Indonesia 2008 No. 58, Additional Gazette of the Republic of Indonesia Number 4843);

3. ICPO-Interpol General Assembly Resolution 2 of 2002 on Interpol Global Communication System 24/7;

4. Memorandum of Understanding of the Aseanapol Database System, dated 27 May 1998.

DECIDED:

Establish: REGULATIONS OF THE HEAD OF STATE POLICE OF THE REPUBLIC OF INDONESIA ON THE USE OF THE INTERPOL NETWORK (I-24/ 7) AND THE ASEANAPOL NETWORK (e-ADS) IN INDONESIA.

BAB I

provisions of UMUM

Article 1

In this rule referred to:

1. The Indonesian National Police (Indonesian: Indonesia), also known as Polri, is a tool of the state responsible for maintaining security and public order, enforcing the law, as well as providing protection, screening and service to the community in the United States. It's a domestic security guard.

2. I-24/7 is the INTERPOL global communications network (Interpol Global Police Communications System) that works for 24 (twenty-four) hours a day and 7 (seven) days a week, which is used as a means of exchange of information between the countries ICPO-Interpol members are fast, precise, accurate and secure.

3. Electronic ASEANAPOL Database System which further abbreviated e-ADS is a database system built on the agreement of the ASEAN Police Chiefs as a means of exchange for criminal intelligence/criminal intelligence between members of the ASEANAPOL member state in the United States. The framework for the cooperation of international/transnational crime, especially in the ASEAN region.

www.djpp.kemenkumham.go.id

2011 No. 3183

4. User is the parties given the authority to access the I-24/7 network and the e-ADS network, including National Central Bereau (NCB-Interpol) Indonesia, Satker in the headquarters of the Polri Mabes, the Polri Regional Unit and law enforcement agencies Otherwise, it is affiliated with the Interpol Coordinating Team.

5. User Account further abbreviated to UA is the username and password given to users who have access rights to use the I-24/7 network and the e-ADS network.

6. User Profile is a user profile containing the UA and user access rights to the I-24/7 network and the e-ADS network.

7. Access Rights is the right given to the user for access and performs data processes on the I-24/7 network and the e-ADS network in accordance with the International Criminal Police Organitation (ICPO-Interpol) and ASEANAPOL provisions, which are restricted by the authority and the role it provides.

8. National Security Officer later abbreviated NSO is an NCB official designated as Administrator I-24/7 given the authority to manage the I-24/7 network in NCB-Interpol Indonesia.

9. Supervisor is an official who is authorized by the NSO to perform monitoring, system evaluations and make trail audits as well as redistribute it to the user.

10. System Administrators are officials who are authorized to perform network system operational and database operational settings as well as other IT (IT) information technology equipment.

11. Site Manager is the official responsible for the I-24/7 network operations and the e-ADS on its territory.

12. Audit Trail is a network-use monitoring process I-24/7 or e-ADS which contains a statistical login, data entry record and searching database performed by the user.

13. E-mail Account Interpol is e-mail address with interpol.go.id domain provided to the user and site manager.

14. Notices is an international notification issued by the ICPO-Interpol that contains information records according to the type Notice available on the I-24/7 network.

www.djpp.kemenkumham.go.id

2011, No. 318 4

15. E-mail is an electronic information transmission via mail protocol.

16. Demilitary Zone which is later abbreviated to the DMZ is firewall for the security of the local area network configuration which is next abbreviated LAN.

17. Diffusion is the delivery of information requests for the search for criminal suspects, a person associated with criminals, victims, witnesses, missing persons and people dying to all members of the ICPO-Interpol member state.

18. Digital Subscriber Line further abbreviated DSL is one form of internet technology, where data is transfered in a different speed from one side to the other.

19. Virtual Private Network next is abbreviated to VPN service-service access closed user group to support voice, data and/or video services.

20. Dashboard is a front page for accessing data or information from I-24/7 and e-ADS networks.

21. Interpol Secretariat General later abbreviated IPSG is the headquarters of the ICPO Interpol based in Lyon, France.

Article 2

The purpose of this regulation:

a. as guidelines and directions in the use of the I-24/7 and e-ADS networks to acquire information services;

b. It is the uniformity of the installation procedure, use, security, and exposure of the I-24/7 and e-ADS network systems and describes the information more detail; and

c. The use of the I-24/7 network and network e-ADS are consistent and controlled according to the mechanisms and procedures applicable.

Article 3

Principles in this regulation:

a. accountability, i.e. the use of systems, data, and I-24/7 networks and e-ADS networks can be accounted for;

b. utilities, i.e. optimizing the use and utilization of systems, data, and I-24/7 networks and e-ADS;

www.djpp.kemenkumham.go.id

2011 No. 3185

c. clarity of purpose, i.e. the use of data available on the I-24/7 network and the e-ADS network must be clear and limited to law enforcement interest;

d. application, i.e. the use of systems, information, and network data I-24/7 and e-ADS networks may assist in law enforcement for users; and

e. effectiveness and efficiency, that is the use of the I-24/7 network and the e-ADS network is safer, fast, accurate, and cheap.

BAB II

INTERPOL I-24/7 NETWORK

Part Parts

I-24/7 Technology Architecture

Article 4

(1) In exchange of information and data, Interpol uses a closed network system architecture that connects the entire Interpol member state through a database centered on the General Secretariat of ICPO-Interpol, Lyon France.

(2) Closed network system architecture as referred to in paragraph (1) technology based The internet is encrypted and equipped with a user security system.

The Second Section

The I-24/7 Network Device

Section 5

(1) The Interpol I-24/7 Network Device is made up of:

a. hardware;

b. software; and

c. network system.

(2) Hardware as referred to in paragraph (1) the letter includes:

a. Internet-capable computer;

b. one printer is connected to one or more computers;

c. one scanner is connected to one computer;

d. VPN devices; and

e. server.

www.djpp.kemenkumham.go.id

2011, No. 318 6

(3) Software as referred to in paragraph (1) the letter b includes:

a. operating system uses the latest version of the system's recommended operating system;

b. browser uses the latest recommended version browser;

c. office software tools using office software tools the latest recommended version;

d. antivirus; and

e. remote maintenance is provided through remote management of IPSG, via VPN.

(4) The network system as referred to in paragraph (1) of the letter c includes:

a. The I-24/7 network connection in Indonesia uses the intranet Polri network;

b. network access using DSL or leased line for local Internet providers;

c. VPN equipment using DMZ options; and

d. network system for connection outside Polri using Secure Online Network (SON).

Section 6

(1) Server as referred to in Section 4 of the paragraph (2) the letter e is the recommended technology tool.

(2) For security reasons, the NCB-Interpol Indonesia connection with other law enforcement agencies must go through the DMZ architecture on the VPN.

Third Section

Application I-24/7

Article 7

The type of application available in the I-24/7 network includes:

a. database application;

b. dashboard;

c. interpol Notice; and

d. webmail.

www.djpp.kemenkumham.go.id

2011 No. 3187

Article 8

Application Database as referred to in Article 7 of the letter a includes:

a. nominal information (photographs, fingerprints, Notices, etc.);

b. fraudulent payment cards;

c. stolen motor vehicles (SMV), with update options and cancel;

d. stolen administrative documents;

e. stolen or lost travel and identity documents (SLTD);

f. stolen and recovered works of art;

g. automatic fingerprint identification system (AFIS); and

h. The DNA Gateway, Interpol's database of DNA profiles.

Article 9

(1) Dashboard as referred to in Article 7 of the letter b, among others it contains information about Interpol's profile, international crime, news, database, Interpol's regional and international activities.

(2) Dashboard can be accessed in 4 languages-Arabic, English, French, and Spanish.

(3) Dashboard can be used to acquire:

a. information and data available in dashboards to be read, uploaded, and downloaded by the user; and

b. information relevant to the needs of the user, which will appear on the monitor screen automatically according to the request.

(4) Data/information dashboard is used in accordance with the ICPO-Interpol provisions.

(5) Management dashboard is an access rights setting by National Security Officer (NSO) to the user.

Article 10

Interpol Notice as referred to in Article 7 of the c letter includes:

a. red Notice, is a Notice that Interpol uses as a notification to the entire Interpol member state on the search and arrest attempt/defendant or convict to be exicted;

www.djpp.kemenkumham.go.id

2011, No. 318 8

b. blue Notice, is a Notice that Interpol uses as a notification to the entire Interpol member state about the collection and dissemination of information related to the identity of a person who has committed a criminal offence;

c. green Notice, is a Notice that Interpol uses as a warning to the entire Interpol member state about the perpetrators of the crime who are likely to commit similar crimes in other countries;

d. yellow Notice, is a Notice that Interpol uses as a notification to the entire Interpol member state about missing persons or identifying people who do not know themselves (memory loss);

e. Black Notice, is a Notice that Interpol uses as a notice to all Interpol member states on the information discovery of an unknown corpse/unidentified identity;

f. orange Notice, is Notice that Interpol uses as a notice to all Interpol member states on alert to police, public institutions and other international organizations related to possible threats Secret weapons, bomb packs and other dangerous objects;

g. stolen works of art Notice, is a Notice that Interpol uses as a notification to the entire Interpol member state about the search for an art object or cultural object worth stolen or to identify items found in suspicious circumstances; and

h. UN Special Notice, is a Notice that Interpol uses as a notification to all members of Interpol's member states on the terrorism involvement of the AL-Qaeda network at the request of the United Nations.

Article 11

(1) Webmail I-24/7 as referred to in Section 7 of the letter d is connected between Setjen ICPO-Interpol with NCB-Interpol Indonesia, and between NCB-Interpol Indonesia with NCB-Interpol the other country.

(2) Webmail I-24/7 aims to accelerate and streamline information exchange securely, appropriately and accurately in the handling of problems related to crime, law enforcement and police services.

(3) Email network I-24/7 is using the I-24/7 private network with an igcs.int domain.

www.djpp.kemenkumham.go.id

2011 No. 3189

BAB III

NETWORK ASEANAPOL e-ADS

Part Kesatu

Technology architecture e-ADS

Article 12

(1) Internet-based e-ADS information systems are built on the basis of an agreement Member states of Aseanapol are using I-24/7 network, with a database centered on the Singapore police.

(2) The database stored on e-ADS can beshare to I-24/7 on the approval of the data owner.

(3) The database filer I-24/7 Interpol can be done through an e-ADS system including:

a. stolen travel documents or reported missing/stolen and lost travel document (SLTD);

b. stolen vehicle/stolen motor vehicle (SMV); and

c. a person's crime data/nominal data.

The Second Section

The Network Device e-ADS

Article 13

(1) The e-ADS device is the same as the device on I-24/7 under the Setjen ICPO-Interpol agreement with ASEANAPOL.

(2) The e-ADS network uses the I-24/7 network facility.

The Third Section

Application e-ADS

Article 14

The application module available in the e-ADS network includes:

a. Aseanapol database;

b. forum;

c. document and image;

d. report;

e. other;

f. publication; and

g. member's sites.

www.djpp.kemenkumham.go.id

2011, No. 318 10

Article 15

Aseanapol database as referred to in Article 14 of the letter a includes:

a. person, loading on the biodata of people involved in cross-country crime (transnational crime);

b. >, contains about the type of crime that includes: Murder/culpable homicide, Kidnapping for ransom, Arms & explosive offences, Drug trafficking, Commercial and financial offences, Maritime offences, Rape, Robbery, Housebreaking and theft, Motor vehicle theft, Smuggling, Crimes involving syndicates/gangs/secret societies, Terrorism, Pedophilia, Corruption, Illegal Logging, Environmental crimes, Trafficking in persons, and other crimes agreed upon by the ASEAN Ministerial Meeting on Transnational Crimes (AMMTC);

c. syndicate, loading intelligence information about a syndicate that is in the interests of Aseanapol and Interpol;

d. modus operandi, contains information on how to commit crimes of cross-country traffic and is in the interests of Aseanapol and Interpol;

e. stolen property, contains information on the theft of historic art objects (works of art), of state wealth (national treasures), cultural relics (cultural heritage) and other properties;

f. maritime misconduct, containing intelligence information on crime at sea, among other piracy, smuggling and the maritime fraud;

g. stolen motor vehicle (SMV), loading information about theft and motor vehicle smuggling;

h. Stolen and Lost Travel Document (SLTD), contains information about travel document data reported missing or stolen.;

i. nominal data, containing information about personal data (biodata) of the person sought published on "red Notice" Interpol.

Section 16

(1) Biodata as referred to in Article 15 of the letter a at least included name, gender, age, nationality, address, physical identity such as skin color, face shape, eye shape, eye color.

www.djpp.kemenkumham.go.id

2011 No. 31811

(2) The person data can be associated with other data, such as:

a. Wanted Person, if the person is an object to be sought for engaging in serious crimes;

b. Arrested Person, if the wanted crime offender was already arrested; and

c. Missing Person, if the person is reported missing.

(3) The syndicate data padding as referred to in Article 15 of the letter c, performed by user contains about the name of the syndicate of criminal offenders both international syndicates and national.

Article 17

(1) The Forum as referred to in Article 14 of the letter b is used as a discussion and sharing information between user operating the e-ADS.

(2) The Forum is used in connection with the operation of e-ADS and police/law enforcement tasks, not used for personal information.

Section 18

(1) Document and Image as referred to in Article 14 of the letter c contains documents and images to share information with member states Aseanapol.

(2) Documents may be regulations or provisions, training manures, system documents related to e-ADS, etc.

(3) The size of the document or a loaded image is no more than 300 kilobytes.

Article 19

(1) Report as referred to in Article 14 of the d it contains information about the data already made all user, which can be Viewed by all levels of user.

(2) The data on the biodata of the suspect or those involved in the already recorded case in the e-ADS database can be viewed and updated according to the development of the case.

(3) Information Report was published in a trail audit for monitoring and evaluation of e-ADS usage.

Article 20

(1) Other as referred to in Section 14 of the letter e contains information about the profile, level and permissions of user on e-ADS.

(2) The user profile as referred to in paragraph (1) at least contains the username, the home country, the user level, and the access rights.

www.djpp.kemenkumham.go.id

2011, No. 318 12

Article 21

(1) Publication as referred to in Article 14 of the letter f contains information among others:

a. important events;

b. actual print and electronic media news; and

c. success story in case handling (success story).

(2) The information as referred to in paragraph (1) is loaded at least 6 (six) months and will automatically be erased after the loading deadline.

(3) The file size publication is no more than 1000 kilobytes.

(4) Data padding for publication performed by system administrator.

Article 22

(1) Member's sites as referred to in Article 14 of the letter g contains the website profile of each ASEANAPOL member state.

(2) Display and content of site, fully submitted to each ASEANAPOL member state and for loading on e-ADS performed by System Security Administrators (SSA).

BAB IV

NETWORK INTRANET POLRI

Part Kesatu

Network Device

Article 23

(1) Working unit in the Polri environment and regional units that will access the I-24/7 and e-ADS networks, using the network intranet Polri.

(2) Connection workstation of satker/satwil using the Polri intranet network to access I-24/7 and/or e-ADS via gateway NCB-Interpol Indonesia.

(3) Management gateway NCB-Interpol Indonesia and its connections to the I-24/7 Lyon French and e-ADS Singapore databases are carried out by NCB-Interpol Indonesia.

(4) Management of the intranet Polri network is implemented by Div TI Polri and Bid TI Polda.

(5) For access to the I-24/7 and e-ADS network, user must perform VPN tunneling to NCB-Interpol " Indonesia.

www.djpp.kemenkumham.go.id

2011 No. 31813

Second Part

Webmail Interpol

Article 24

(1) Webmail Interpol Indonesia uses the interpol.go.id domain name.

(2) Webmail Interpol Indonesia can be accessed through public internet network or the I-24/7 VPN network.

(3) The purpose of the webmail Interpol Indonesia to accelerate and streamline information exchange for safe and flexible information in dealing with police and law enforcement problems between and user I-24/7 and e-ADS Indonesia.

(4) User I-24/7 and e-ADS are required to use email interpol.go.id to receive and send information from and to the Indonesian NCB-Interpol Indonesia.

(5) Webmail Interpol Indonesia is used for delivery and acceptance of information related to the use of I-24/7 network and e-ADS network as well as activities related to international police and law enforcement cooperation.

(6) Webmail Interpol Indonesia can be accessed from website www.interpol.go.id by using recommended software.

BAB V

USER NETWORK I-24/7 AND NETWORK E-ADS

Parts Kesatu

Classification

Article 25

User network I-24/7 and the e-ADS network are classified as follows:

a. NSO;

b. system administrator;

c. NCB Contact Officer;

d. supervisor;

e. site manager; and

f. operator.

www.djpp.kemenkumham.go.id

2011, No. 318 14

Article 26

(1) the NSO as referred to in Article 25 of the letter a role:

a. as contact officer NCB-Interpol Indonesia in the management of I-24/7 network in Indonesia;

b. as security administrator network I-24/7; and

c. as system administrator network I-24/7.

(2) The NSO in carrying out the role as referred to in paragraph (1) has the task and authority:

a. inform the ICPO's Secretary General of Interpol with respect to the I-24/7 network management;

b. provide training to users in the use of the I-24/7 and e-ADS; network;

c. Monitor and evaluate the use of the I-24/7 and e-ADS;

network. enforce Interpol regulations and standards in the use of the I-24/7 and e-ADS;

e networks. create and remove user accounts network I-24/7 and e-ADS;

f. provide access rights to users networks I-24/7 and e-ADS; and

g. guarantee and maintain the security of the I-24/7 and e-ADS network systems.

(3) NSO NCB-Interpol Indonesia is served by the International Communications Section (Kabagkominter) Divhubinter Polri set under the Decree of Kapolri.

Article 27

(1) System Administrators as intended in Article 25 of the letter b has the task and authority:

a. manage user;

b. maintain and operationalize IT systems;

c. keep network security I-24/7 and e-ADS;

d. developing the I-24/7 and e-ADS; access network;

e. provide access rights to the e-ADS network to user by confirming to the Application Director in Singapore; and

f. provide a proposal for system development andupgrade hardware and software.

(2) System Administrator is set with the Kapolri Warrant.

www.djpp.kemenkumham.go.id

2011 No. 31815

Article 28

(1) NCB Contact Officer as referred to in Section 25 of the letter c has the task and authority:

a. receive and provide services to the information transmitted by user of Satker/Satwil and other law enforcement agencies; and

b. receive and provide services to information submitted by NCB-Interpol other countries.

(2) NCB communication Media Contact Officer I-24/7 operates 24 hours a day and 7 (seven) days a week through:

a. email: ncb-jakarta@interpol.go.id;

b. fax: 021-7201402 and 021-7269203;

c. phone: 021-7218467, 021-72798261 and 021-7218609;

d. office address (shipping via post):

Polri International Relations Division,

TNCC Building Floor 11,

Trunojoyo 3 Road, New Kebayoran Baru, Jakarta, 12110

e. website NCB-Interpol Indonesia: http://www.interpol.go.id.

Section 29

(1) Supervisor as referred to in Section 25 of the letter d has the task and authority:

a. create documents, read, modify and delete data;

b. implement the data administration policies and procedures in accordance with the agreement in ADSTC;

c. submit a service request to ADSTC;

d. submitted a request to create and revoke the user account to the NSO NCB-Interpol Indonesia and perform update user profile;

e. submitted the creation/modification/deletion of code table to SSA in Singapore;

f. carrying out a weekly trail audit of e-ADS usage and distributing via an Interpol email to user, site manager, NSO and Administrator;

www.djpp.kemenkumham.go.id

2011, No. 318 16

g. create quarterly reports to NSO and SA about data and e-ADS; usage statistics;

h. propose the creation of user account to NSO and SA; and

i. propose to NSO NCB-Interpol Indonesia to stop and revoke user access rights which do not use user accountsfor more than 3 months, abusing e-ADS or other reasons agreed upon by the Chief of Police Aseanapol.

(2) Supervisor is set with the Kapolri Warrant.

Section 30

(1) Site Manager as referred to in Article 25 of the letter e is in charge:

a. Doing surveillance on the I-24/7 and e-ADS network operations, in particular about the user activity (among others login, data charging and utilization system (searching database));

b. The audit trail audits submitted by e-mail to increase the activity user; and

c. create a monthly report on the activity of the I-24/7 system and e-ADS to Kasatker/Kasatwil The Kadivhubinter Polri u.p. Secretary of NCB-Interpol Indonesia via email Interpol.go.id (ncb-jakarta@interpol.go.id).

(2) Site Manager is embed ex officio by:

a. level Mabes Polri:

1. Barescream Polri by Director II of the Special Economy;

2. Baintelkam Polri by the Director of Homeland Security;

3. Renewkam Polri by Director Polair; and

4. Korri Polri by Kabidregident;

b. regional level:

1. Director of General Rescream;

2. Special Rescream Director;

3. Drug Director;

4. Director of Intelkam;

5. Director of Polair; and

6. Director Then.

www.djpp.kemenkumham.go.id

2011 No. 31817

(3) Site Manager on law enforcement agencies outside Polri are designated by the agencies concerned.

(4) Site Manager on law enforcement agencies outside of Polri is on duty:

a. Conduct surveillance of the I-24/7 and e-ADS network operations, specifically regarding user activities, including login, data charging and system utilization (searching database));

b. Examine the audit trail supervisor by e-mail to improve the user; and

c. create a monthly report on the activity of the use of I-24/7 and e-ADS to its internal leaders with the Kadivhubinter busan. Polri.

(5) Access rights Site Manager:

a. obtaining information services on I-24/7 and e-ADS databases via user I-24/7 and e-ADS; and

b. coordination with supervisor subject to the request of user I-24/7 and e-ADS and things related to the use of both systems.

Section 31

Operator as referred to in Article 25 of the letter f has a task and authority:

a. perform data input against existing databases on the I-24/7 network and e-ADS related to international/transnational crime cases;

b. provide data searching for officials/satker/satwil/ agencies each;

c. relay information from the Indonesian NCB-Interpol sent by e-mail to the officers/satk/satwil/ agencies each associated with the use of the I-24/7 network and e-ADS as well as in the framework of law enforcement and policing duties; and

d. delivered a publishing request Notice from investigators to NCB-Interpol Indonesia using e-mail.

Second Section

Rights and Oblicity

Paragraph 1

User Rights User On I-24/7 and e-ADS Networks

Section 32

(1) User's access rights on I-24/7 network include:

www.djpp.kemenkumham.go.id

2011, No. 318 18

a. access the Integrated Automatic Fingerprint Identification System (IAFIS) database, DNA, Wanted Person, Notice, Disaster Victim Identification (DVI), SMV, SLTD, Travel Document Associated With Notice (TDAWN), Stod administrative documents, stolen and recovered works works of art, fraudulent payment cards, nominal information (photographs, fingerprints, Notices, etc.); and

b. access the dashboard I-24/7.

(2) User's access rights on the e-ADS network include:

a. Basic Access Rights, which is user can only read Homepage, Forum, Documents, Images and Publication, and cannot access to the database and System Administration modules;

b. Screening Local, which is user can only do searching to local data and cannot perform modifications and delete data on the other user data;

c. Screening Overseas, which is user can search for other ASEANAPOL state data and is not given the right to modify and delete data on other Aseanapol state data;

d. Data Entry Owner, which is user can only create, read, modify their own data on the local database; and

e. Data Entry Others, which is user has access rights to create, read, and modify its own data, as well as read and modify data created user others on the local database.

Section 33

(1) User access the I-24/7 network and the e-ADS network via the Polri intranet network with a given login identifier and password VPN on workstation.

(2) Password VPN is made by NSO NCB-Interpol Indonesia and will be distributed as well as reimbursed every 3 (three) months.

(2) Login Identifier and password have the following provisions:

a. user has access rights to I-24/7 network and e-ADS network after being given user accounts and passwords;

b. password is made at least 8 (eight) characters, which is a mixture of letters and numbers (alphanumeric);

c. the password for 90 (ninety) days with a middle term to renew password for 180 days;

www.djpp.kemenkumham.go.id

2011 No. 31819

d. if it passes through the middle time limit, then it automatically portals INSYST will remove user accounts;

e. user login identifier created by NSO NCB-Interpol Indonesia with the format: xx.yyyyyy.zz and format xx and yyyyyy are used for the username, while the zz is the country code (e.g. ncb.ind.id or feroz.ncb.id);

f. user is prohibited from giving/sharing his account to another person;

g. user must change its password, after first login to I-24/7 and e-ADS and replace it every 90 (ninety) days;

h. If user forgets the password, then can report to NCB-Interpol Indonesia (ncb-jakarta@interpol.go.id) and NSO will provide the new password ; and

i. if user violates rules related to direct access, download or interconnect, then NSO will revoke the user's permissions.

Paragraph 2

Liability

Article 34

(1) In using the network I-24/7, user obliged:

a. change /replace password every 90 (ninety) days;

b. locked access (log off) before leaving the computer;

c. did back-up routinely;

d. performing anti-virus scanning on hard disks, flash disks and other media before use;

e. inform to NSO or IT technicians if detected there is a virus on workstation; and

f. Maintain security and privacy/information privacy.

(2) In using an e-ADS network, user is obligated:

a. do access to the e-ADS network every day.

b. performing searching to the e-ADS database, either through the enquiry or B2B search facility (Bussiness to Bussiness Search);

c. performing entry data into the e-ADS system if there are cases encountered/handled related to with cross-country crime;

www.djpp.kemenkumham.go.id

2011, No. 318 20

d. perform a review of trail audit sent via email by Supervisor e-ADS or NCB-Interpol Indonesia weekly;

e. Reports the activity of the IBM Cloud Service Manager on a monthly level of use for the Cloud Service. carry out the transfer knowledge to user/operator/operator e-ADS; and

g transfer. report to the e-ADS/Supervisor of the NCB-Interpol Technical Team of Indonesia in the event of a technical or operational e-ADS problem in the first opportunity by email.

Third Section

Prohibition

Article 35

In use network I-24/7 and e-ADS, user banned:

a. recorded password;

b. Split or show password;

c. opening another person's chance to see while working on the job/secret;

d. using shareware or freeware (download software from the Internet or PC magazine), without the approval of the NSO;

e. duplicating orcopy software;

f. Install software on the machine or configure it, this work can only be performed by authorized staff; and

g. using workstation for interests other than I-24/7 and e-ADS.

BAB VI

USE OF NETWORKED I-24/7 AND E-ADS

Part Parts

I-24/7 Information Services

Article 36

I-24/7 information services include:

a. database service;

b. service dashboard;

c. services Interpol Notices; and

d. email I-24/7 Interpol service.

www.djpp.kemenkumham.go.id

2011 No. 31821

Article 37

The database service as referred to in Section 36 of the letter a, is used with the provision as follows:

a. database is used by user which has been granted access rights;

b. user access rights to the database are provided by NSO NCB-Interpol Indonesia;

c. database is only used for police and law enforcement cooperation purposes; and

d. database management is regulated by NSO NCB-Interpol Indonesia in accordance with the provisions of the ICPO-Interpol via Rule of Processing Information (RPI).

Section 38

The dashboard service as referred to in Section 36 of the letter b, is used with the following conditions:

a. information available in the dashboard menu can be accessed via the INSYST portal;

b. user can only access the information on the dashboard according to the access rights granted by NSO;

c. user can perform menu display settings on the dashboard as needed; and

d. the latest news and results of regional and international meeting related cooperation in the framework of cross-country crime handling.

Article 39

Service Interpol Notices as referred to in Article 36 of the letter c, used with the provision as follows:

a. publishing request, extension and revocation Notice to ICPO-Interpol can only be done by NCB-Interpol Indonesia at the approval of the Chief of the Polri International Relations Division;

b. Police officers, law enforcement agencies, and PPNS through police investigators as Korwas PPNS can submit the publication of Notice which the Director/Head signed to Kadivhubinter Polri;

c. for speed purposes in publishing Notice then the request document can be sent by email ncb-jakarta@interpol.go.id and follow up by sending an official letter according to the publishing procedure Notice;

www.djpp.kemenkumham.go.id

2011, No. 318 22

d. Polri investigators, law enforcement agencies, and PPNS can see directly publishing Notice on the I-24/7 network via the designated user or through the public Interpol website (www.interpol.int); and

e. Notice that is accessible by user only Notice has been published by ICPO-Interpol and can be printed for the police and law enforcement interests.

Article 40

email email I-24/7 Interpol as referred to in Section 36 of the d, used with the provisions as follows:

a. email I-24/7 Interpol is only used by the NCB-Interpol community and IPSG;

b. access to email I-24/7 Interpol is restricted in accordance with the access rights granted by NSO NCB-Interpol Indonesia; and

c. IPSG monitors the use of the email system to guarantee the security of both the system and its information/data.

Second Section

The e-ADS Information Service

Article 41

(1) The information available in e-ADS is accessible via the e-ADS portal and I-24/7 network, specifically the SLTD, SMV and Nominal databases.

(2) User can access e-ADS is a user that has been granted access rights by the SSA.

Third Part

Indonesian Interpol Information Services

Section 42

(1) The Indonesian Interpol information service can be accessed via the www.interpol.go.id website.

(2) The information services as referred to in paragraph (1) contains features of other veranda, news, transnational crimes, laws and laws, meetings and events, media releases, and DPO.

Fourth Quarter

Special Information Services

Article 43

(1) Polri Investigators, law enforcement agencies and PPNS can submit requests for information about: a person 's journey (exit/entry), person' s address, matching identity, phone number, number

www.djpp.kemenkumham.go.id

2011 No. 31823

account, company profile, criminal record, email address, medical record, by email ncb-jakarta@interpol.go.id or letter to the Chief of the Polri International Relations Division.

(2) Investigations request Polri, law enforcement agencies and PPNS will be actionable by the NCB-Interpol Indonesia to the NCB-Interpol of the intended state, and the results will be passed on to Polri investigators, law enforcement agencies and PPNS by email/mail.

(3) Request matching a person ' s identity through fingerprints on the I-24/7 database can be sent to the Indonesian NCB-Interpol via mail or email ncb-jakarta@interpol.go.id, provided:

a. the least 500 pixel/inch; and

b fingerprint image resolution. image format in JPEG form.

Fifth Section

Network Installation

Paragraph 1

Installation Installation in the Polri Environment

Article 44

(1) Installation and derailment of Polri's intranet network is carried out by the IT Polri Division/Bid TI Polda.

(2) The computer and supporting equipment are prepared by Satker users with technical specifications according to the standards recommended by NCB-Interpol Indonesia.

Paragraph 2

Installation of Installation outside Polri

Article 45

(1) Law enforcement agencies that will use the I-24/7 network and e-ADS network should submitted a written request to the Kapolri u.p. Head of the Polri International Relations Division.

(2) Before the installation is exercised, it needs to be equipped with a legal umbrella by making cooperation (Memorandum Of Understanding) between Polri with the institution the law enforcement.

www.djpp.kemenkumham.go.id

2011, No. 318 24

Sixth Section

Security System

Paragraph 1

Data Security/Information I-24/7

Article 46

(1) The terms and requirements of the INTERPOL information usage as follows:

a. data is only used for police and law enforcement purposes;

b. data must be protected from unauthorized use, access, alteration and distribution; and

c. data must be maintained in a security system with limited access only used for Police and enforcement purposes. law.

(2) The level of information privacy that can be at risk if used by an unentitled person, consists of:

a. "INTERPOL FOR OFFICIAL USE ONLY" if the non-authorized use of this information will adversely affect the enforcement actions or adverts/discrediting the organization, its staff, its members, personal or other relevant law enforcement parties. with information;

b. "INTERPOL RESTRICTED" if the person who is not entitled to use this information, may harm the act of law enforcement or cause harm to the organization or its staff, its members, personal or other law enforcement parties who Interests with information; and

c. INTERPOL CONFIDENTIAL" if the person who is not entitled to use this information, seriously endangering the enforcement action or causing serious harm to the organization or its staff, its members, the private or the law enforcement authorities others with information.

(3) Third level of information secrecy is used for the purpose of classifying information processed through the I-24/7 network.

www.djpp.kemenkumham.go.id

2011 No. 31825

(4) If NCB-Interpol has a special purpose to classify some information items with a higher level of secrecy, then IPSG assesates the outflow of information sources.

(5) Channel and The facility that is used to process information, depending on the level of confidentiality, must be equipped with security control to prevent risk of use by non-entitled parties.

Paragraph 2

Data Security/Information e-ADS

Article 47

(1) Data is only used for the benefit of the Police and law enforcement.

(2) The data must be protected from unauthorized use, access, alteration and distribution.

(3) The data must be maintained in a security system with limited access only used for the benefit of the Police and law enforcement.

(4) User must know and understand the security of the document, as well as the classification of information and ensure the incorrect information/documents of the e-ADS to be destroyed.

Paragraph 3

System Security Network I-24/7

Article 48

(1) The responsibility of IPSG in system security, as follows:

a. IPSG is responsible for the entire network of I-24/7 network, including special systems, networks and/or databases, which are required to:

1. create a security policy, based on international standards and collaboration with NCB, which aims to execute security control in a procedural, technical and administrative manner, and set the appropriate level of secrecy, the integrity and availability of systems, networks and/or databases;

2. a risk assessment; and

3. developing an appropriate control mechanism for information security;

www.djpp.kemenkumham.go.id

2011, No. 318 26

b. IPSG and NCB-Interpol Indonesia conduct privacy and security oversight of information through:

1. login audits and monitor the use of I-24/7; and

2. hardware, software and I-24/7 network.

(2) The responsibility of NCB-Interpol Indonesia in keeping the system security as follows:

a. NCB-Interpol Indonesia via NSO must inform user that the authority is used only for international police cooperation purposes, before granting authorizations to users for access to the I-24/7 network;

b. ordered user to communicate information using I-24/7 network;

c. ordered user I-24/7 in operationing the I-24/7 network must comply with the ICPO-Interpol;

d. adopt a security level already created by IPSG to be implemented in the use of the I-24/7 network by user;

e. designate one or more NSO to carry out security operations and coordinate with IPSG relating to system security; and

f. NCB-Interpol Indonesia must inform IPSG about the problem of connection use and or implementation of the I-24/7 system, in accordance with applicable regulations.

(3) The responsibility of users in the security of the I-24/7 system, as follows:

a. provide IPSG requested additional information to evaluate the possibility of processing information in INTERPOL's files or process it in accordance with applicable regulations;

b. use I-24/7 network to conduct communication with ICPO-Interpol; and

c. inform NCB-Interpol Indonesia via email: ncb-jakarta@interpol.go.id as soon as possible, at the time of the "positive hit" for a the request was accompanied by a fundamental reason regarding the request.

(4) The antivirus protection in the holding of the I-24/7 network and the e-ADS network is carried out with the following conditions:

www.djpp.kemenkumham.go.id

2011 No. 31827

a. Setjen ICPO-Interpol provides, manages andupdates antivirals regular workstations directly connected with I-24/7 network; and

b. NCB-Interpol Indonesia ensures that the systems on the server and workstation are protected with high quality antivirus software that are updated on a regular and are treated appropriately.

Paragraph 4

Security System Networks e-ADS

Article 49

(1) The supervision and security of the e-ADS network access is conducted with the following conditions:

a. the e-ADS network system security procedures are in principle the same as the I-24/7 network;

b. any user e-ADS is given login passwords by NCB-Interpol Indonesia;

c. system in-set 10 minutes for time out and if there is no activity then the system automatically will log off; and

d. user must log off of e-ADS when it is not used to prevent access by unentitled people.

(2) System Audit in the security implementation of the e-ADS network system is done with the following conditions:

A. NSO NCB-Interpol Indonesia conducted an audit to check the e-ADS account and would remove user accounts that were not active for 6 months;

b. System Administrators e-ADS NCB-Interpol Indonesia performs weekly Audit Trail evaluations, including evaluation of User activity in use of e-ADS and validation User (still valid or already pindah/mutation); and

c. In terms of no User activity in accessing the e-ADS over a period of 1 month, then Kabagkominter Divhubinter Polri may propose to Kadivhubinter Polri to carry out Site Visit and Coaching Clinic.