Cybersecurity Law and National Digital Resilience in The Fourth Industrial Revolution

The Fourth Industrial Revolution has transformed the landscape of state governance, the economy, and national defense through the convergence of cyber-physical technologies, artificial intelligence, the Internet of Things, and big data interconnected within a single digital ecosystem. This transformation brings significant opportunities for bureaucratic efficiency and digital economic growth, but simultaneously expands the attack surface, threatening vital information infrastructure, citizens' personal data, and the stability of government systems. This article aims to analyze the position of cybersecurity law as a normative instrument in building national digital resilience amidst the disruptions of the Fourth Industrial Revolution, focusing on the Indonesian legal framework in comparison with regulatory practices in the European Union, the United States, and several other developing countries. This research uses a normative juridical method with a statutory approach, a conceptual approach, and a comparative legal approach, supported by a literature review of laws and regulations, recent scientific journals, and official policy documents of state institutions. The research results show that Indonesia's cybersecurity legal framework, consisting of the Electronic Information and Transactions Law, the Personal Data Protection Law, the Presidential Regulation on the Protection of Vital Information Infrastructure, and the Draft Cyber ​​Security and Resilience Law, is still sectoral, responsive, and not fully oriented towards systemic resilience as mandated by the resilience-by-design paradigm in European Union regulations. This article recommends a reorientation of the legal paradigm from a repressive approach based on criminal prosecution to a preventive-adaptive approach that integrates cyber risk management, mandatory incident reporting, standardization of digital product security, and strengthening the institutional capacity of the National Cyber ​​and Crypto Agency, as a legal foundation for sustainable national digital resilience.

1. Alrumaih, Thuraya, Mohammed Alenazi, Nouf Alsowaygh, Abdulmalik Humayed, and I. Alablani. "Cyber Resilience in Industrial Networks: A State of the Art, Challenges, and Future Directions." Journal of King Saud University – Computer and Information Sciences 35 (2023): 101781. https://doi.org/10.1016/j.jksuci.2023.101781.
2. Aulianisa, Sarah Safira, and Indirwan. "Critical Review of the Urgency of Strengthening the Implementation of Cyber Security and Resilience in Indonesia." Lex Scientia Law Review (2020). https://doi.org/10.15294/lesrev.v4i1.38197.
3. Badan Siber dan Sandi Negara. Peraturan Presiden Nomor 53 Tahun 2017 tentang Badan Siber dan Sandi Negara, sebagaimana diubah dengan Peraturan Presiden Nomor 28 Tahun 2021.
4. Bramantyo, Hutama Arif. "Enhancing Cybersecurity in Indonesia's National Data Center Post-Ransomware Attack." Poster, Syracuse University, 2024. https://surface.syr.edu/eli/257.
5. Chiara, P. "The Cyber Resilience Act: The EU Commission's Proposal for a Horizontal Regulation on Cybersecurity for Products with Digital Elements." International Cybersecurity Law Review 3 (2022): 255–272. https://doi.org/10.1365/s43439-022-00067-6.
6. Chiara, P. "Understanding the Regulatory Approach of the Cyber Resilience Act: Protection of Fundamental Rights in Disguise?" European Journal of Risk Regulation 16 (2025): 469–484. https://doi.org/10.1017/err.2025.9.
7. European Union. Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on Horizontal Cybersecurity Requirements for Products with Digital Elements (Cyber Resilience Act). Official Journal of the European Union L 2024/2847, 20 November 2024.
8. Fauziyyah, Ghina. "Strategic Planning of Cybersecurity Governance in Supporting National Digital Infrastructure Resilience." International Journal of Social Research (2025). https://doi.org/10.59888/insight.v3i5.104.
9. Gaba, Gurjot Singh, Alparslan Sari, Ismail Butun, Parminder Singh, Andrei Gurtov, and Madhusanka Liyanage. "A Survey on Security and Privacy of Industry 4.0 and Beyond: Technical Aspects, Use Cases, Challenges, and Research Directions." IEEE Open Journal of the Communications Society 6 (2025): 8865–8929. https://doi.org/10.1109/OJCOMS.2025.3616289.
10. García-Pérez, A., J. Cegarra-Navarro, M. Sallos, Eva Martínez-Caro, and A. Chinnaswamy. "Resilience in Healthcare Systems: Cyber Security and Digital Transformation." Technovation (2022). https://doi.org/10.1016/j.technovation.2022.102583.
11. Hadana, Farid Al, Tashekal, S. Sukarman, and Farhan Margono. "Constitutionalizing Cybersecurity: Indonesia–Malaysia Regulatory Convergence through a Maqasid al-Sharia Framework." Journal of Islamic Law on Digital Economy and Business (2026). https://doi.org/10.20885/jildeb.vol1.iss2.art2.
12. Ibitamuno, Pamela Victor. "Legal Frameworks for Cybersecurity in Nigeria – Adapting the Fourth Industrial Revolution." Advances in Multidisciplinary and Scientific Research Journal Publication (2023). https://doi.org/10.22624/AIMS/CSEAN-SMART2023P12.
13. Irfandi. "The Role of Law Enforcement in Upholding Privacy Regulations to Strengthen National Resilience in the Digital Era." Multidisciplinary Indonesian Center Journal (MICJO) (2026). https://doi.org/10.62567/micjo.v3i1.1790.
14. Kamara, Irene. "European Cybersecurity Standardisation: A Tale of Two Solitudes in View of Europe's Cyber Resilience." Innovation: The European Journal of Social Science Research 37 (2024): 1441–1460. https://doi.org/10.1080/13511610.2024.2349626.
15. Le Nguyen, C., and W. Golman. "Diffusion of the Budapest Convention on Cybercrime." Computer Law & Security Review 40 (2021): 105521. https://doi.org/10.1016/j.clsr.2020.105521.
16. Lezzi, M., A. Corallo, M. Lazoi, and Aldo Nimis. "Measuring Cyber Resilience in Industrial IoT: A Systematic Literature Review." Management Review Quarterly 76 (2025): 1107–1161. https://doi.org/10.1007/s11301-025-00495-8.
17. Ludvigsen, K., and Shishir Nagaraja. "The Opportunity to Regulate Cybersecurity in the EU (and the World): Recommendations for the Cybersecurity Resilience Act." arXiv:2205.13196 (2022). https://doi.org/10.48550/arXiv.2205.13196.
18. Majeed, Yasir, Anas Majeed, and Muhammad Tahir Minhas. "Cybersecurity Governance in the Digital Era and IT: Integrating Regulatory Oversight, Risk Management, and Organisational Resilience in Pakistan." Social Science Review Archives (2026). https://doi.org/10.70670/sra.v4i1.1711.
19. Malatji, Masike, A. Marnewick, and S. von Solms. "Cybersecurity Capabilities for Critical Infrastructure Resilience." Information & Computer Security 30 (2021): 255–279. https://doi.org/10.1108/ICS-06-2021-0091.
20. Nadriana, L., and H. T. Sukmana. "Cybersecurity Policy and Implementation in Indonesia: Current State and Future Directions." Digital Policy, Regulation and Governance 24, no. 3 (2022): 270–285.
21. Peraturan Presiden Republik Indonesia Nomor 82 Tahun 2022 tentang Pelindungan Infrastruktur Informasi Vital.
22. Rahmat, R. F., A. H. Aziira, S. Purnamawati, Y. M. Pane, S. Faza, Al-Khowarizmi, and F. Nadi. "Classifying Indonesian Cyber Crime Cases under ITE Law Using a Hybrid of Mutual Information and Support Vector Machine." International Journal of Safety and Security Engineering 13, no. 5 (2023). https://doi.org/10.18280/ijsse.130507.
23. Rai, I Nyoman Aji Suadhana, Dudy Heryadi, and Asep Kamaluddin. "The Role of Indonesia to Create Security and Resilience in Cyber Spaces." Jurnal Politica: Dinamika Masalah Politik Dalam Negeri dan Hubungan Internasional 13, no. 1 (2022): 43–66.
24. Ramadanti, Nadira Karisma. "Strategi Pemberantasan Cybercrime Lintas Batas: Implementasi Mekanisme Mutual Legal Assistance Berdasarkan Permenkumham Nomor 12 Tahun 2022." Padjadjaran Law Review 12, no. 2 (2024): 184–195.
25. Ramli, Ahmad, Sigid Suseno, R. Mayana, Ramalinggam Rajamanickam, and Rubben Denova Rohmana. "The Urgency of Regulating Artificial Intelligence in Relation to Cybersecurity and Cyber Resilience." Cogent Social Sciences (2026). https://doi.org/10.1080/23311886.2026.2632977.
26. Rizaldi, M. Zaki, Rizki Dwi Putra, and Asmak Ul Hosnah. "Analisis Kasus Cybercrime Dengan Studi Kasus Hacker Bjorka Terhadap Pembocoran Data." JUSTITIA Jurnal Ilmu Hukum dan Humaniora 6, no. 2 (2023): 619–627.
27. Rumata, Vience Mutiara, and Ashwin Sasongko Sastrosubroto. "The Paradox of Indonesian Digital Economy Development." In E-Business – Higher Education and Intelligence Applications. London: IntechOpen, 2021. https://doi.org/10.5772/intechopen.92140.
28. Santos Wanderlei, Marcos Cícero. "Legislative Impact Assessment of the Brazilian National Digital Security and Resilience Program: A Law and Economics Perspective." REMUNOM (2026). https://doi.org/10.66104/re2nmt33.
29. Soekanto, Soerjono. "Penelitian Hukum Normatif." Hukum 1, no. 1 (2019): 4.
30. Sulubara, S. M. "Legal Protection Against Cybercrime from Ransomware Attacks and Evaluation of the 2025 Cyber Security and Resilience Bill in Indonesia's Defense." DE LEGA LATA: Jurnal Ilmu Hukum (2025).
31. Szpor, G. "The Concept of Cyber Resilience in the European Union Law." Review of European and Comparative Law (2026). https://doi.org/10.31743/recl.19198.
32. Toussaint, M., Sylvère Krima, and Hervé Panetto. "Industry 4.0 Data Security: A Cybersecurity Frameworks Review." Journal of Industrial Information Integration 39 (2024): 100604. https://doi.org/10.1016/j.jii.2024.100604.
33. Undang-Undang Republik Indonesia Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik, sebagaimana telah diubah terakhir dengan Undang-Undang Nomor 1 Tahun 2024.
34. Undang-Undang Republik Indonesia Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi.
35. Yu, Jia, Alexey Shvetsov, and Saeed Hamood Alsamhi. "Leveraging Machine Learning for Cybersecurity Resilience in Industry 4.0: Challenges and Future Directions." IEEE Access 12 (2024): 159579–159596. https://doi.org/10.1109/ACCESS.2024.3482987.