On April 13, 2021, President of the Republic of Indonesia Joko Widodo signed Presidential Regulation (Perpres) Number 28 of 2021 concerning the National Cyber and Crypto Agency (BSSN). The issuance of this regulation was driven by the need to restructure BSSN in order to ensure national cyber security, protection, and sovereignty, as well as to enhance national economic growth. The regulation aims to optimize the implementation of duties and functions in the field of cyber and crypto security within BSSN, allowing them to be carried out more effectively and efficiently.

BSSN is a government agency that is under and directly responsible to the President. Its organizational structure and working procedures are further regulated under BSSN Regulation Number 6 of 2021 on the Organization and Working Procedures of BSSN.

BSSN is not a newly established agency, but a transformation resulting from the merger of pre-existing government institutions responsible for information security—namely, the State Crypto Agency (Lembaga Sandi Negara or Lemsaneg) and the Directorate of Information Security under the Directorate General of Informatics Applications, Ministry of Communication and Information Technology (Kominfo)—as stipulated in Presidential Regulation Number 53 of 2017 concerning BSSN, subsequently amended by Presidential Regulation Number 133 of 2017.

With the establishment of BSSN, all duties and functions in the field of cryptography previously carried out by Lemsaneg, as well as those related to information security, the secure use of internet protocol-based telecommunications networks, and the security of telecommunications networks and infrastructure previously handled by the Ministry of Communication and Information Technology, are now executed by BSSN.