Indonesian organisations place data trust and cyber resilience at the centre of business strategy: PwC

• Data protection and data trust remain the leading cybersecurity priorities for Indonesian organisations, with 71% of respondents identifying them as key investment areas over the next 12 months, compared with 55% across Asia Pacific and 51% globally.
• Indonesian organisations favour a balanced approach to AI-powered cyber defence, with 62% of respondents supporting partial AI autonomy, compared with 41% across Asia Pacific and 38% globally. Only 11% of Indonesian respondents would authorise fully autonomous AI agents, versus 21% in Asia Pacific and 22% globally, reflecting the importance placed on governance, accountability and human oversight.
• Investment in AI-enabled tools and cybersecurity talent is accelerating in Indonesia, with 76% of respondents prioritising workforce development and AI adoption, significantly higher than Asia Pacific (55%) and global respondents (53%).

Jakarta, 13 October 2026 — Organisations are adjusting their cybersecurity investment priorities in response to an increasingly complex threat landscape. Over the next 12 months, data protection and data trust are expected to remain the leading cyber spending priorities globally (51%) and across Asia Pacific (55%). In Indonesia, this focus is even more pronounced, with 71% of respondents identifying data protection and data trust as a key priority. Indonesian organisations are also placing significant emphasis on modernising cyber infrastructure (69%). These findings come from PwC’s 2027 Digital Trust Insights Survey: Indonesia's cyber priorities in an era of AI, which captured the views of 3,934 business and technology leaders across 71 territories, including Indonesia, and highlights the growing importance of cybersecurity at the executive level.

Subianto, PwC Indonesia Chief Digital & Technology Officer, said, “The findings highlight how organisations increasingly view trust and cybersecurity as business priorities rather than purely technology concerns. As digital transformation accelerates, protecting sensitive data and maintaining stakeholder confidence are becoming critical to long-term business resilience. We are also seeing growing recognition that cyber risk should be embedded in leadership discussions and broader business decision-making, with 47% of Indonesian respondents reporting that cyber risk is a standing agenda item in executive leadership meetings, compared with 45% of respondents globally and across Asia Pacific.”

Unlocking AI’s defensive potential

As cyber threats continue to evolve at machine speed, organisations are increasingly exploring the role of AI in strengthening cyber defence capabilities. However, while organisations recognise the potential of AI to strengthen cyber defences, many remain cautious about allowing AI agents to operate without human intervention.

Globally, 22% of respondents would authorise fully autonomous AI agents to execute cyber defence actions without human approval, compared with 21% across Asia Pacific. In Indonesia, only 11% of respondents would be comfortable adopting a fully autonomous approach. Instead, Indonesian organisations show a stronger preference for partial execution autonomy, with 62% supporting AI agents independently carrying out low-risk actions while requiring human approval for medium- and high-impact decisions, compared with 38% globally and 41% across Asia Pacific.

When asked about barriers to increasing AI agent autonomy for security operations, concerns about the reliability and maturity of current AI technology rank highest globally (55%) and across Asia Pacific (56%). In Indonesia, however, accountability, explainability in decision-making and liability concerns emerge as the leading challenge, cited by 62% of respondents.

Avinash Rajeev, PwC US Global Cyber, Data & Tech Risk Leader, said, “AI is changing both sides of the cyber equation. It is creating new risks and expanding the attack surface, but it can also transform how organisations defend themselves. The opportunity is to build the trust, governance and human oversight that allow organisations to use AI more confidently to secure the enterprise and create value.”

Bolstering cyber resilience in the age of AI

As organisations navigate a rapidly evolving cyber risk landscape, many are reassessing their cyber strategies and resilience priorities.
Geopolitical developments continue to shape cybersecurity planning worldwide. Half of global respondents (50%) and Asia Pacific respondents (50%) report making changes to vendor and third-party supply chain risk management. In contrast, Indonesian organisations are placing greater emphasis on expanding threat intelligence capabilities, selected by 53% of respondents, compared with 49% in Asia Pacific and 47% globally.

At the same time, organisations are investing in their cyber workforce to address increasingly sophisticated threats. Globally, 53% of respondents identify investment in AI-enabled tools and training cybersecurity professionals to work alongside them as a key talent strategy over the next 12 months, rising to 55% across Asia Pacific. In Indonesia, this figure increases significantly to 76%, highlighting the growing importance of AI in strengthening workforce capabilities and supporting cyber resilience.

Subianto, PwC Indonesia Chief Digital & Technology Officer, added, “As cyber threats become more complex and evolve at greater speed, organisations are strengthening their focus on both technology and talent. The growing emphasis on threat intelligence and AI-enabled tools reflects a more proactive approach to cybersecurity, while also recognising the importance of governance, accountability and human oversight in building long-term resilience.”

Preparing for the quantum era

While artificial intelligence remains a near-term priority, most organisations are still in the early stages of preparing for quantum-related cybersecurity risks. Globally, 31% of respondents report that their organisations are piloting and testing quantum-resistant security measures, increasing to 35% across Asia Pacific. In Indonesia, 31% of respondents are at the same stage, suggesting that organisations are moving beyond awareness towards early-stage preparation for the quantum era.

Preparing for the quantum era is also becoming a governance priority. More than one-third of Indonesian respondents (36%) report that their organisations have established dedicated ownership or assigned responsibility for quantum readiness, comparable with global organisations (36%) and ahead of Asia Pacific (32%). This suggests that some organisations are beginning to incorporate quantum-related considerations into their longer-term cybersecurity planning.