STRUCTURAL VULNERABILITY AND INDONESIA'S DIGITAL SOVEREIGNTY AMID TRANSNATIONAL CYBERCRIME: A SYSTEMATIC LITERATURE REVIEW Eng
Indonesia Indonesia Indonesia Indonesia 
Abstract
Indonesia faces an exponential surge in cyber threats, evidenced by a 714 percent rise in incidents in 2025 (BSSN) and cases including the Bank Jambi breach, the Brain Cipher ransomware attack on the Temporary National Data Center, and the relocation of regional scam networks from Cambodia, Myanmar, Laos, and Vietnam into Indonesia. This study aims to map the characteristics of these threats and Indonesia's structural vulnerability, evaluate the effectiveness of its cybersecurity oversight and law enforcement policies, and formulate strategies for strengthening digital sovereignty. A systematic literature review following the PRISMA 2020 protocol was employed, searching Scopus, SINTA, Google Scholar, DOAJ, SSRN, and authoritative institutional reports, yielding 50 studies from 370 initially identified records. Results show that structural vulnerability is multidimensional, spanning geographic, demographic, technological, regulatory, and institutional dimensions; policy effectiveness is constrained by institutional fragmentation and weak international legal cooperation; and strengthening digital sovereignty requires integrating structural reform, institutional capacity, regulatory harmonization, and international cooperation. The novelty lies in integrating structural vulnerability, digital sovereignty, and transnational crime theory into one analytical framework for Indonesia, with the implication of guiding future empirical research based on primary stakeholder data.
Full text article
References
Aji, M. P. (2022). Sistem keamanan siber dan kedaulatan data di Indonesia dalam perspektif ekonomi politik (Studi kasus perlindungan data pribadi). Jurnal Politica: Dinamika Masalah Politik Dalam Negeri dan Hubungan Internasional.
Al Ghiffari, A. (2025). Kejahatan siber dan tantangan penegakan hukum di Indonesia. Jurnal Penelitian Ilmiah Multidisipliner, 2(2).
Alfi, M., Yundari, N. P., & Tsaqif, A. (2023). Analisis risiko keamanan siber dalam transformasi digital pelayanan publik di Indonesia. Jurnal Kajian Stratejik Ketahanan Nasional, 6(2). https://doi.org/10.7454/jkskn.v6i2.10082
ASEAN Secretariat. (2022). ASEAN cybersecurity cooperation strategy 2021–2025. ASEAN.
ASEAN–Australia Counter Trafficking. (2024). Compound crime: Cyber scam operations in Southeast Asia. ASEAN-ACT Programme.
Badan Siber dan Sandi Negara. (2025). Lanskap keamanan siber Indonesia 2025. BSSN.
Badan Siber dan Sandi Negara. (2026). Ringkasan tren insiden siber Januari-April 2026. BSSN.
Barrinha, A., & Turner, R. (2023). Strategic narratives and the multilateral governance of cyberspace: The cases of European Union, Russia, and India. Contemporary Security Policy. https://doi.org/10.1080/13523260.2023.2266906
Castells, M. (2000). The rise of the network society (2nd ed.). Blackwell Publishers.
Castle, A. (1997). Transnational organized crime and international security (Working Paper No. 19). Institute of International Relations, University of British Columbia.
Catota, F. E., Morgan, M. G., & Sicker, D. C. (2019). Cybersecurity education in a developing nation: The Ecuadorian environment. Journal of Cybersecurity, 5(1). https://doi.org/10.1093/cybsec/tyz001
Center for Strategic and International Studies. (2026). Cyber scamming goes global: Unveiling Southeast Asia's high-tech fraud factories. CSIS.
Chotimah, H. C. (2019). Tata kelola keamanan siber dan diplomasi siber Indonesia di bawah kelembagaan Badan Siber dan Sandi Negara. Jurnal Politica: Dinamika Masalah Politik Dalam Negeri dan Hubungan Internasional.
Clough, J. (2015). A world of difference: The Budapest Convention on Cybercrime and the challenges of harmonisation. Monash University Law Review, 40(3), 698–736.
Council of Europe, Cybercrime Convention Committee (T-CY). (2023). T-CY assessment report: The mutual legal assistance provisions of the Budapest Convention on Cybercrime. Council of Europe.
Firdaus, R. A. (2025). Efektivitas ketentuan pidana UU ITE dan peran preventif UU PDP dalam kerangka hukum kejahatan siber Indonesia. Staatsrecht: Jurnal Hukum Kenegaraan dan Politik Islam, 4(1), 79–104. https://doi.org/10.14421/cf582q68
Fratini, S., Hine, E., Novelli, C., Roberts, H., & Floridi, L. (2024). Digital sovereignty: A descriptive analysis and a critical evaluation of existing models. Digital Society, 3. https://doi.org/10.1007/s44206-024-00146-7
Galeotti, M. (2001). Underworld and upperworld: Transnational organized crime and global society. In D. Josselin & W. Wallace (Eds.), Non-state actors in world politics (pp. 203–217). Palgrave Macmillan.
Galfadillah, K. M., Zabril, A., & Nabila, G. (2026). Implementasi mutual legal assistance (MLA) pada alat bukti elektronik yang telah dilakukan forensik digital dalam cyber crime antara Indonesia–RRT. RIGGS: Journal of Artificial Intelligence and Digital Business, 5(1). https://doi.org/10.31004/riggs.v5i1.7927
Global Initiative Against Transnational Organized Crime. (2023). Compound crime: Cyber scam operations in Southeast Asia. GI-TOC.
Gonzaga, K., Serra, S., Gomes, M., & Malta, S. (2026). AI-powered social engineering: Emerging attack vectors, vulnerabilities, and multi-layered defense strategies. Computers, 15(2), 128. https://doi.org/10.3390/computers15020128
Hansen, L., & Nissenbaum, H. (2009). Digital disaster, cyber security, and the Copenhagen School. International Studies Quarterly, 53(4), 1155–1175.
Hwang, J. (2025). Digital sovereignty in an era of cyber threats and global connectivity. International Journal of Multidisciplinary Research Updates, 9(2), 012–023.
INTERPOL. (2021). ASEAN cyberthreat assessment 2021. INTERPOL.
Jabir, R., Le, J., & Nguyen, C. (2025). Phishing attacks in the age of generative artificial intelligence: A systematic review of human factors. AI, 6(8), 174. https://doi.org/10.3390/ai6080174
Jeselyn, & Goh, D. L. (2025). Transnational crime in Cambodia and Indonesia: Strengthening regional and national responses (RSIS Commentary CO25134). S. Rajaratnam School of International Studies.
Khan, N. F., Ikram, N., & Saleem, S. (2023). Effects of socioeconomic and digital inequalities on cybersecurity in a developing country. Security Journal, 37(2), 214–244. https://doi.org/10.1057/s41284-023-00375-4
Krishnamurthy, V. (2025). Anchoring digital sovereignty. Chicago Journal of International Law, 25(2).
Li, J. (2025). Governing high-risk technologies in a fragmented world: Geopolitical tensions, regulatory gaps, and institutional barriers to global cooperation. Fudan Journal of the Humanities and Social Sciences, 19(1), 113–137. https://doi.org/10.1007/s40647-025-00445-4
McCusker, R. (2006). Transnational organised cyber crime: Distinguishing threat from reality. Crime, Law and Social Change, 46, 257–273.
Meiryani. (2023). Exploration of potential money laundering crimes with virtual currency facilities in Indonesia. Journal of Money Laundering Control, 27(6), 985–994. https://doi.org/10.1108/JMLC-01-2023-0010
Moreno Junior, W. (2026). Cyber sovereignty and state power in the 21st century: A theoretical-methodological proposal for understanding sovereignty in cyberspace. International Journal of Scientific Research and Management, 14(5), 153–164.
Mori?, Z., Urošev, S., & Kopal, R. (2026). Network position in global trade systems and cyberattack risk: Evidence from country-level trade networks, 2010–2020. Systems, 14(4), 367. https://doi.org/10.3390/systems14040367
Nelson, F. M., Prosperiani, M. D., Ramadhan, C. R., & Andini, P. P. (2024). Cracking the code: Investigating the hunt for crypto assets in money laundering cases in Indonesia. Journal of Indonesian Legal Studies, 9(1), 89–130. https://doi.org/10.15294/jils.vol9i1.4534
Neumann, I. (2026). It is complicated: Cyber into the civil–military relationship. Journal of Cybersecurity, 12(1).
Nyonyoh, R. (2025). Ransomware and the vulnerability of critical infrastructure: A national security and economic analysis. Asian Journal of Economics, Business and Accounting, 25(4). https://doi.org/10.9734/ajeba/2025/v25i41759
Pacific Forum, & Department of Foreign Affairs and Trade Australia. (2024). Cyber ASEAN: Advancing cyber resiliency and capacity in Southeast Asia. Pacific Forum.
Page, M. J., McKenzie, J. E., Bossuyt, P. M., Boutron, I., Hoffmann, T. C., Mulrow, C. D., Shamseer, L., Tetzlaff, J. M., Akl, E. A., Brennan, S. E., Chou, R., Glanville, J., Grimshaw, J. M., Hróbjartsson, A., Lalu, M. M., Li, T., Loder, E. W., Mayo-Wilson, E., McDonald, S., ... Moher, D. (2021). The PRISMA 2020 statement: An updated guideline for reporting systematic reviews. BMJ, 372, n71. https://doi.org/10.1136/bmj.n71
Pohle, J. (2024). Unthinking digital sovereignty: A critical reflection on origins, objectives, and practices. Policy & Internet.
Putri, T., Amiludin, A., Ahmad, D. N., & Hidayatulloh. (2023). Inadequate cryptocurrency and money laundering regulations in Indonesia (Comparative law of US and Germany). Yustisia, 12(2), 129–152. https://doi.org/10.20961/yustisia.v12i2.71835
Rambe, R., & Hermawan, F. F. (2025). [Tinjauan literatur sistematis serangan ransomware terhadap Pusat Data Nasional Sementara Indonesia]. Indonesian Journal on Computing, 10(1), 1–11.
Robles-Carrillo, M. (2023). Sovereignty vs. digital sovereignty. Journal of Digital Technologies and Law, 1(3), 673–690. https://doi.org/10.21202/jdtl.2023.29
Santisteban Santisteban, A., Ocares Cunyarachi, L., & Andrade-Arenas, L. (2020). Analysis of national cybersecurity strategies. International Journal of Advanced Computer Science and Applications, 11(12).
Sarjito, A. (2024). Hoaks, disinformasi, dan ketahanan nasional: Ancaman teknologi informasi dalam masyarakat digital Indonesia. Journal of Governance and Local Politics, 6(2).
Sarjito, A., & Lelyana, N. (2025). Disinformation's influence on public perception and defense policy implementation in Indonesia. Multidisciplinary Science Journal, 7(8), e2025362. https://doi.org/10.31893/multiscience.2025362
Sherman, J. (2021). Digital authoritarianism and implications for US national security. The Cyber Defense Review, 6(1).
Snyder, H. (2019). Literature review as a research methodology: An overview and guidelines. Journal of Business Research, 104, 333-339. https://doi.org/10.1016/j.jbusres.2019.07.039
Soroya, S. H., Ahmad, A. S., Ahmad, S., & Soroya, M. S. (2021). Mapping internet literacy skills of digital natives: A developing country perspective. PLOS ONE, 16(4). https://doi.org/10.1371/journal.pone.0249495
Sulistianingsih, D., Ihwan, M., Setiawan, A., & Prabowo, M. S. (2023). [Perlindungan data pribadi di era metaverse]. Jurnal Masalah-Masalah Hukum, 52(1).
Sulubara, S. M., Fauzi, H., Muslim, B., Putra, M. F. F., & Musmulyadi. (2025). Judi online sebagai cybercrime serta tantangan penegakan hukum. Jurnal Riset Rumpun Ilmu Sosial, Politik dan Humaniora, 4(2), 539–552. https://doi.org/10.55606/jurrish.v4i2.4990
Sulubara, S. M., Tasril, V., & Nurkhalisah. (2025). Legal protection of cybercrime crimes from ransomware attacks and evaluation of the Cyber Security and Resilience Bill 2025 in Indonesia's defense. DE LEGA LATA: Jurnal Ilmu Hukum, 10(2), 287–297. https://doi.org/10.30596/dll.v10i2.25786
Thumfart, J. (2023). The (il)legitimacy of cybersecurity: An application of just securitization theory to cybersecurity based on the principle of subsidiarity. Applied Cybersecurity & Internet Governance.
UNODC. (2024). Billion-dollar cyberfraud industry expands in Southeast Asia as criminals adopt new technologies. United Nations Office on Drugs and Crime, Regional Office for Southeast Asia and the Pacific.
Williams, P. (2001). Transnational criminal networks. In J. Arquilla & D. Ronfeldt (Eds.), Networks and netwars: The future of terror, crime, and militancy (pp. 61–97). RAND Corporation.
