Analysis of Tokopedia Digital Security Strategy Against Cyber Threats Using the Risk Assessment Framework Approach
Abstract
The rapid digitalization of commerce in Indonesia has positioned Tokopedia as a central marketplace that facilitates large-scale transactions while managing vast amounts of sensitive user data. This reliance on digital infrastructures, however, exposes the platform to escalating cyber threats that jeopardize both operational continuity and consumer trust. This study evaluates Tokopedia’s cybersecurity strategies by applying the Risk Assessment Framework derived from ISO 27001 and ISO 31000. Using a qualitative descriptive design, the research draws exclusively on secondary sources such as peer-reviewed journals, industry reports, and case studies published between 2015 and 2025. The analysis identifies five dominant risks: large-scale data breaches, phishing and identity theft, ransomware attacks, insider threats, and system misconfigurations. Risk assessment results indicate that data breaches pose the most critical threat, with phishing and ransomware classified as medium but persistent risks. Tokopedia has implemented several protective measures, including encryption, multi-factor authentication, e-KYC verification, and privacy policies. Nevertheless, gaps remain in governance, routine audits, and employee awareness, leaving the platform vulnerable to recurring incidents. A comparative analysis with global platforms highlights the importance of proactive governance, systematic risk documentation, and continuous training, areas where Tokopedia is still underdeveloped. The findings underscore that cybersecurity should be recognized not merely as a technical safeguard or financial burden but as a strategic investment essential for resilience, consumer confidence, and sustainable growth in Indonesia’s competitive digital economy.
Article Discovery & Scholarly Lookup
DOIAuthor Biographies
Information Study Program, Universitas Merdeka Malang, Malang City, East Java Province, Indonesia.
Information Study Program, Universitas Merdeka Malang, Malang City, East Java Province, Indonesia.
Information Study Program, Universitas Merdeka Malang, Malang City, East Java Province, Indonesia.
How to Cite
License & Copyright
This work is licensed under a Creative Commons Attribution 4.0 International License.
This is an open-access journal. All articles are distributed under the terms of the Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
Creative Commons Attribution 4.0 International (CC BY 4.0)Under this license, you are free to:
- Share: copy, distribute, and transmit the work in any medium or format.
- Adapt: remix, transform, and build upon the work for any purpose, even commercially.
You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
Copyright and Retention Copyright & Retention Authors retain copyright without restrictions and grant this journal the right of first publication under an open-access model. The journal retains non-exclusive publishing rights for archiving, indexing, and scholarly dissemination.References
Total: 16 References- Ayu, S. S., & Nasution, M. I. P. (2023). Analisis kebocoran data privacy pada e-commerce Tokopedia. JUEB: Jurnal Ekonomi dan Bisnis, 2(3), 21–24. https://doi.org/10.57218/jueb.v2i3.716
- Bestari, Q., Putri, D. A., & Kurnia, K. A. (2024). Analisa kasus kebocoran data pengguna Tokopedia. Jurnal Hukum Progresif, 7(1), 45–60. https://law.ojs.co.id/index.php/jhp/article/view/130
- Derliana, & Yulhendri. (2024). Analisis manajemen risiko berbasis ISO 27001 pada aspek keamanan sistem informasi pada perusahaan Tokopedia. Scientica: Jurnal Ilmiah Sains dan Teknologi, 2(2), 139–151.
- Fadillah, F., Adelya, H. N. K., & Shahira, R. (2022). Dampak Cyber Attack bagi ekonomi perdagangan elektronik: Studi pada bocornya data di platform Tokopedia. Jurnal Hukum Statuta, 1(2), 122–136.
- Kehista, A. P., Fauzi, A., Tamara, A., Putri, I., Fauziah, N. A., Klarissa, S., & Damayanti, V. B. (2023). Analisis keamanan data pribadi pada pengguna e-commerce: Ancaman, risiko, strategi keamanan (literature review). Jurnal Ilmu Manajemen Terapan, 4(5).
Similar Articles
Explore related articles published in this journal.