Who We Are

One consulting team, two entities, two jurisdictions

Whitesec ID was founded in Jakarta in 2024. Since 2026 the same services have been available in Australia through Whitesec AU — the same methodology and the same consultants, mapped to each country's regulation.

Our Journey

From Jakarta to the Australian market

Our growth follows client need: more and more organisations must prove security readiness in more than one jurisdiction.

2024

Whitesec ID founded in Jakarta

PT Topi Putih Siberindo is incorporated and begins trading as Whitesec ID: a consultancy in cyber security, records and information management, and compliance training for the Indonesian market.

2026

Whitesec AU opens in Australia

A second entity opens in West Perth, Western Australia, bringing the same methodology to the Australian regulatory framework — Essential Eight, APRA CPS 234, and the SOCI Act.

Today

One group, two markets

The same consulting team serves clients in Indonesia and Australia, supported by the whitesec.one compliance platform that keeps audit evidence in one place.

Group Structure

Two legal entities sharing one standard of work

Each entity stands on its own legally and answers to its country's regulation, but they use the same framework, templates, and quality control.

Whitesec ID

Founded 2024

PT Topi Putih Siberindo

Office: Jakarta, Indonesia
Market served: Indonesia & Southeast Asia

The group's founding entity. It guides financial institutions, fintechs, telecommunications providers, and government agencies through international standards and national regulation alike.

ISO/IEC 27001, 27701, 42001, and ISO 31000
Vulnerability Assessment, Penetration Testing, and SOC
Compliance with Law No. 27 of 2022 on Personal Data Protection
Licensing support and IT risk management for OJK, Bank Indonesia, AFPI
Records and information management plus PECB-certified training

See the service portfolio

Whitesec AU

Operating 2026

Whitesec group entity

Office: West Perth, Western Australia
Market served: Australia

The group's Australian entity, established for clients asked to prove security readiness before a corporate contract or tender can proceed.

ISO 27001 readiness and certification support
Essential Eight uplift following ACSC guidance
APRA CPS 234 alignment
SOCI Act compliance and vendor assurance
vCISO, VAPT, and audits for cyber insurance requirements

Visit whitesec.au

How We Work

One standard of work, mapped to two regulatory frameworks

A single methodology
The framework, templates, and quality control used in Jakarta are the same ones used in Perth. Clients operating across both countries never have to learn two ways of working.
Internationally certified consultants
The same team covers both markets — CISSP certified, ISO/IEC 27001 Lead Auditors, with audit experience across industries.
Regulation mapped per jurisdiction
The PDP Law, OJK, and Bank Indonesia for Indonesia; Essential Eight, APRA CPS 234, and the SOCI Act for Australia. Controls are mapped once and used against both frameworks.

Leadership

Led by practitioners who work on the ground

Both lead client engagements day to day, not merely names on a proposal document.

Galang Muthohhari

Founder & CEO

Founded Whitesec ID in 2024 after more than a decade in information security and GRC across banking, telecommunications, Big Four consulting, and fast-growing technology companies.

His focus is management systems that genuinely operate rather than stopping at documentation: risk assessment, control design, security testing, and certification audit support for clients across Indonesia and the Asia Pacific.

He also initiated whitesec.one, the integrated compliance platform clients use to gather audit evidence and monitor controls from one place.

Education

Cyber Security — De Montfort University, United Kingdom

Expertise

CISSP
ISO/IEC 27001 Lead Auditor
eWPTX

Hani Qonitah

Co-Founder & Principal Consultant

Leads the records and information management practice at Whitesec ID: classification, retention schedules, and document governance so compliance evidence is there when the audit arrives.

Her career was built across international organisations and major corporations — among them the United Nations, the Asian Development Bank Indonesia, and ExxonMobil Cepu Limited — as well as teaching Library & Information Science at Universitas Indonesia.

Education

Master of Information Management & Systems, Records Management — Monash University, Australia
Library & Information Science — Universitas Indonesia
Chair of P3RI (Indonesian Records Management Professionals Association), 2023–2028

Expertise

Records & Information Management
Information Governance
Retention & Classification

Explore our areas of expertise

Ready to build stronger security?

Talk your organisation's needs through with our team. Free, and without obligation.

Free Consultation +62 878-7666-6016