ANALISIS EFEKTIVITAS PENERAPAN CYBER THREAT INTELLIGENCE DALAM UPAYA PENCEGAHAN SERANGAN SIBER DI LINGKUP BADAN PENGUSAHAAN BATAM (BP BATAM)

Abstract

The increasing complexity of cyber threats targeting government institutions has driven the need for a more proactive and intelligence-based defense approach. Batam Indonesia Free Zone Authority (BP Batam), as a strategic governmental agency, has faced a significant rise in cyber threats, particularly spyware, phishing, and DNS-based exploitation. This study analyses the effectiveness of Cyber Threat Intelligence (CTI) implementation using the OpenCTI platform in enhancing BP Batam’s cybersecurity operations. A qualitative method with a phenomenological approach was used, involving in-depth interviews with cybersecurity professionals at BP Batam and observations of the customized OpenCTI system. The findings indicate that CTI implementation significantly improves threat detection, incident response speed, and contextual awareness of threat actors and attack techniques. The integration of OpenCTI supported by external threat feeds and visual correlation of Indicators of Compromise (IOC) has shifted BP Batam’s security posture from reactive to intelligence driven. Although system integration is still partially manual, CTI usage has enhanced threat hunting capability and risk management strategies by aligning with the MITRE ATT&CK framework. The study concludes that OpenCTI supports the development of a more adaptive and data driven cybersecurity strategy in the public sector.