Silahkan ikuti intruksi di bawah ini:
1. Mengikuti perkuliahan BD307 di Zoom maupun Offline (Absen Hadirkugo)
2. Membaca Materi BD307 – Business Financial Technology yang telah diberikan pada email masing-masing dan mengerjakan Modul 10.
3. Berikan dokumentasi mengenai pengerjaan progress jurnal Business Financial Technology.

Berikan bukti dokumentasi jika sudah dikerjakan melalui CerMi di Web BisGen.
Semangat ^^

Status: 100%

Keterangan: Saya sudah mengerjakan dengan baik dan benar

Bukti:

Module 10: Digital Identity and Cybersecurity

This module addresses one of the most critical aspects of fintech: securing digital transactions and identities. It explores technologies like biometric authentication, multifactor authentication, and decentralized identity solutions, highlighting their importance in building trust and preventing fraud.

Suggested Materials:
- Online articles on biometric authentication (e.g., face ID, fingerprints).
- NIST Cybersecurity Framework overview.
- Case studies on recent data breaches in the financial sector.
Checklist of Questions:
- Why is a robust digital identity framework crucial for the fintech ecosystem?
- Describe at least two methods for securing online transactions and their respective strengths.
- What is the difference between a phishing attack and a man-in-the-middle attack?

Answer:

A robust digital identity framework is absolutely essential for the Fintech ecosystem due to three core pillars: Security, Access, and Compliance.

1. Security & Fraud Prevention
- It ensures only legitimate users can access services and conduct transactions.
- It drastically minimizes the risk of financial crimes like identity theft, money laundering, and transaction fraud.
- Verified Digital Identity is the Fintech industry’s primary defense against financial loss.
2. Access & Customer Experience
- It enables fast, seamless customer onboarding (e.g., signing up in minutes instead of days).
- It facilitates efficient Know Your Customer (KYC) and Anti-Money Laundering (AML) processes, thereby expanding financial inclusion to those who may lack traditional physical documentation.
3. Regulatory Compliance
- A solid framework helps Fintech companies adhere to strict legal and regulatory requirements (like KYC/AML).
- It builds trust with regulators, which is critical for operating legally and sustainably in the financial sector.

SSL/TLS Encryption (Secure Sockets Layer/Transport Layer Security)

This is a standard protocol that encrypts the data exchanged between a user’s web browser and the server hosting the website. When data is encrypted, it is converted into an unreadable code during transit.

Strengths:

Data Confidentiality: It prevents unauthorized parties (like hackers) from reading sensitive information, such as credit card numbers and personal details, as it travels across the internet.
Data Integrity: It ensures the data is not altered or tampered with during transmission.

Two-Factor Authentication (2FA)

This method requires users to provide two different forms of verification to complete a transaction or access an account. This typically involves something the user knows (a password) and something the user has (a code sent to their mobile phone or a physical token).

Phishing is an attack that relies on psychological manipulation to trick you into voluntarily giving away sensitive data. MitM is an eavesdropping attack where the attacker inserts themselves into the communication link between two parties without either party knowing.