Search

The rapid digitalization of commerce in Indonesia has positioned Tokopedia as a central marketplace that facilitates large-scale transactions while managing vast amounts of sensitive user data. This reliance on digital infrastructures, however, exposes the platform to escalating cyber threats that jeopardize both operational continuity and consumer trust. This study evaluates Tokopedia’s cybersecurity strategies by applying the Risk Assessment Framework derived from ISO 27001 and ISO 31000. Using a qualitative descriptive design, the research draws exclusively on secondary sources such as peer-reviewed journals, industry reports, and case studies published between 2015 and 2025. The analysis identifies five dominant risks: large-scale data breaches, phishing and identity theft, ransomware attacks, insider threats, and system misconfigurations. Risk assessment results indicate that data breaches pose the most critical threat, with phishing and ransomware classified as medium but persistent risks. Tokopedia has implemented several protective measures, including encryption, multi-factor authentication, e-KYC verification, and privacy policies. Nevertheless, gaps remain in governance, routine audits, and employee awareness, leaving the platform vulnerable to recurring incidents. A comparative analysis with global platforms highlights the importance of proactive governance, systematic risk documentation, and continuous training, areas where Tokopedia is still underdeveloped. The findings underscore that cybersecurity should be recognized not merely as a technical safeguard or financial burden but as a strategic investment essential for resilience, consumer confidence, and sustainable growth in Indonesia’s competitive digital economy.

This study examines the development and implementation of Your Favorite Shirt, a web-based platform designed to modernize thrift shop operations through digital transformation. Many thrift businesses in Indonesia still rely on manual processes or social media, leading to inefficiencies in inventory management, transaction tracking, and reporting. To address these challenges, a prototype-based development method was applied, involving requirement analysis, initial design, prototype construction, user testing, and iterative refinement. The system integrates key features such as multi-role login, product catalogues, transaction management, payment options, and order tracking. Evaluation through functional testing and the PIECES framework demonstrated positive results across performance, efficiency, control, and service dimensions, with an average system response time of under one second. User Acceptance Testing (UAT) with a Likert-scale questionnaire produced a mean score of 1.85, indicating strong user satisfaction. Beyond improving operational efficiency, the platform also supports sustainable fashion practices by curating quality secondhand products and reducing textile waste. However, risk assessment identified several areas requiring improvement, including the absence of a Business Continuity Plan, limited access control mechanisms, and lack of systematic documentation. Future development should focus on integrating social media APIs, implementing product recommendation systems, enhancing layered security, and deploying analytical dashboards to support data-driven decision-making.