
































Microsoft Word - 74-83_272


(Online) ISSN 2744-1741 
Defense and Security Studies  Original Research 
Vol. 5, No. 2, 2024, pp. 74-83 
https://doi.org/10.37868/dss.v5.id272 

This work is licensed under a Creative Commons Attribution License (https://creativecommons.org/licenses/by/4.0/) that allows others 
to share and adapt the material for any purpose (even commercially), in any medium with an acknowledgement of the work's 
authorship and initial publication in this journal. 

 74 

 

Formation of the TNI cyber force: A strategic and policy analysis 
 
Aris Sarjito1* 
1 Faculty of Defense Management, Republic of Indonesia Defense University, Indonesia  
 
 

*Corresponding author E-mail:  arissarjito@gmail.com   

Received: Oct. 13, 2024 
Revised: Nov. 13, 2024 
Accepted: Nov. 15, 2024 
Online: Nov. 20, 2024 

Abstract 
The increasing cyber threats in Indonesia require strengthening the country's defense 
strategy. This study focuses on the formation of the Indonesian National Army (TNI) 
Cyber Force as part of efforts to strengthen the country's cyber security in facing 
increasingly complex threats. The purpose of this study is to analyze the policy and 
strategy for the formation of the TNI Cyber Force and evaluate the synergy between 
institutions, especially with the National Cyber and Crypto Agency (BSSN). This study 
uses a qualitative method with a secondary data analysis approach, including reports from 
Fortinet, AwanPintar.id, and national policy documents related to cybersecurity. The 
research findings show that the TNI Cyber Force has a crucial role in protecting Indonesia's 
critical infrastructure from the threat of botnets, ransomware, and other cyber-attacks. The 
synergy between the TNI and BSSN is key to building an effective cyber defense system. 
Although there has been an increase in cyber readiness, this study found that challenges 
still exist, including in terms of human resources and the technology used. In conclusion, 
the formation of the TNI Cyber Force is an important step in dealing with cyber threats, but 
there needs to be further strengthening in cross-sector coordination and adoption of the 
latest technology. 

© The Author  2024. 
Published by ARDA. 

Keywords:  BSSN; cyber security; national defense; synergy between 
institutions; TNI Cyber Force 

1. Introduction  

Research on the formation of the Indonesian National Army (TNI) Cyber Force is rooted in the growing 
global cyber security threats, which have become a primary focus in modern defense strategies. The rapid 
development of information and communication technology has created a new dimension in warfare—cyber 
warfare— requiring the military to adopt more responsive strategic measures. According to White [1], 
cyberattacks have increased in both volume and severity, prompting many countries, including Indonesia, to 
integrate cyber defense into their military structures. 

At the international level, countries like the United States and Russia have pioneered the establishment of 
specialized military units dedicated to cyber defense [2]. This has inspired Indonesia to take similar steps with 
the formation of the TNI Cyber Force, aimed at securing the nation's digital sovereignty from external threats. 
Recent research by Mahendra [3] suggests that Indonesia is currently at a critical juncture in strengthening its 
cyber security policies through military structural reforms, particularly by integrating cyber defense strategies 
into national policies. 

Indonesia has faced a significant rise in the number of cyberattacks in recent years. According to reports from 
Fortinet [4] and AwanPintar.id [5], cyberattacks in Indonesia have been increasing in both quantity and 
complexity. Local companies and critical infrastructure have been the main targets of various types of attacks, 
including ransomware, botnets, and vulnerability exploits. This data underscores the importance of proactive 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

75 

measures and robust policies to strengthen Indonesia's cyber defense systems. 

The following Table 1 presents key data from these reports. 

Table 1. Cyberattack Data in Indonesia (2021-2024) [6,7,8,9] 
Category 2021 2022 2023 2024 (H1) 

Number of cyberattacks 320,000,000 347,172,666 500,000,000 2,499,486,085 
Dominant type of attack Ransomware Ransomware Ransomware Admin access 

takeover 
Botnet duration (days) 7 10 83 83 

Botnet attacks 19,104,200 35,911,749 35,911,749 126% increase 
Ransomware attacks Decreased 13% Decreased 13% Decreased 

13% 
- 

Detected viruses in 
Indonesia 

JS/Agent.CY!tr 
(4.8%) 

MSOffice CVE_2018_0798 
(2.5%) 

- - 

Cyber Security Score 
(NCSI) 

38.96 (rank 83) 63.64 (rank 49) - - 

The data above shows that the number of cyberattacks in Indonesia surged drastically, from 320 million in 
2021 to more than 2.4 billion in the first half of 2024 alone. The most dominant attacks in recent years have 
been ransomware, though its detection has decreased by 13% over the past five years. However, the more 
concerning type of attack in 2024 is the takeover of admin access, indicating an increase in hackers’ ability to 
control victims' systems. 

The rise in botnet duration from 7 days in 2021 to 83 days in 2023-2024 indicates that botnets are becoming 
more persistent and harder to detect. Another important finding is the significant increase in malware variants 
and vulnerability exploits, especially viruses like JS/Agent.CY!tr and vulnerabilities in MSOffice 
CVE_2018_0798. 

Indonesia's Cyber Security Score also improved, from 38.96 in 2022 to 63.64 in 2023, demonstrating an 
enhancement in national cyber readiness. However, many challenges remain, particularly regarding the surge 
of attacks originating domestically, as found by AwanPintar [5], with most attacks coming from the Jakarta 
and Depok areas. 

These findings highlight the urgency for both the government and private sectors to take proactive steps in 
protecting Indonesia's digital infrastructure, given the increasing risks of more targeted and sophisticated 
attacks. 

The formation of the TNI Cyber Force, as outlined by Arianto & Anggraini [10], is also a response to the 
rising domestic cyber security threats, with hacking incidents against critical infrastructure such as energy and 
transportation spiking sharply. This study shows that the Cyber Force will function not only as a protector of 
digital infrastructure but also as a diplomatic instrument in addressing escalating international cyber conflicts 
[11]. 

Therefore, this research explores the strategies and policies behind the formation of the TNI Cyber Force, as 
well as how the TNI can position itself to address global cyber challenges. The focus of this study is to 
understand the policy dynamics implemented by Indonesia's Ministry of Defense and the TNI in developing 
cyber capacity and to analyze the relevance and effectiveness of the adopted cyber defense strategies. 

The empirical problem in this study concerns the implementation of strategies and policies in forming the TNI 
Cyber Force in Indonesia. Although the TNI has established a cyber unit, there is no comprehensive data on 
the operational effectiveness of the Cyber Force in addressing real cyber threats. Hacking incidents targeting 
critical national infrastructure, such as the transportation system and energy sector in recent years, indicate 
that Indonesia’s cyber defense efforts still have significant weaknesses [10]. Additionally, challenges such as 
limited human resources with technical expertise in cybersecurity and lack of coordination between 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

76 

institutions in responding to cyberattacks reveal a gap between the designed policies and actual 
implementation [12]. 

Normatively, the issues arising from the formation of the TNI Cyber Force not only touch on national security 
aspects but also relate to broader ethical and legal issues. The use of cyber forces within a military context 
raises questions about the boundaries of technology use in cyber warfare, particularly concerning human 
rights and digital sovereignty. The regulations and legal frameworks underpinning the TNI Cyber Force must 
address these questions while balancing national security with individual freedoms in the digital realm. 

Below are several national and international regulations that serve as the legal framework for the formation of 
the TNI Cyber Force: 

 Law no. 3 of 2002 on state defense [13] 

Article 1, paragraph (1) defines state defense as efforts to maintain the sovereignty of the country, 
territorial integrity, and the safety of the nation from threats, including cyber threats. This law serves 
as the primary legal basis for the formation of the TNI, including the development of the Cyber Force 
to protect Indonesia's digital sovereignty. In the context of increasing cyber threats, the TNI must 
expand its operational scope to cyberspace in accordance with its national defense mandate. 

 Law no. 34 of 2004 on the Indonesian National Armed Forces (TNI) [14] 

Article 7, paragraph (2) explains the TNI’s main tasks in maintaining the integrity of the Republic of 
Indonesia, including through military operations other than war (MOOTW), which can encompass 
cyber defense. This law mandates the TNI to engage in unconventional military operations, such as 
cyber warfare, to protect the nation's strategic assets in cyberspace. 

 Presidential regulation no. 82 of 2022 on the National Cyber and Encryption Agency (BSSN) [15] 

Articles 2 and 3 outline BSSN’s authority in maintaining information and cyber security and its 
cooperation with other institutions, including the TNI, to protect critical infrastructure. BSSN is a key 
partner in the formation and operation of the TNI Cyber Force, requiring close coordination between 
the two agencies to holistically address cyber threats. 

 The Geneva conventions and additional protocols (1949 and 1977) [16] 

Although the Geneva Conventions do not explicitly regulate cyber warfare, the principles regarding 
the protection of civilians and critical infrastructure during armed conflicts also apply in the context of 
cyber warfare. The TNI Cyber Force must operate within an international legal framework that 
upholds civil protection rights, especially regarding cyberattacks that could impact civilian 
infrastructure such as power grids or communication systems. 

 Tallinn manual on the international law applicable to cyber warfare (Tallinn Manual 2.0) [17] 

This manual explains the application of international law, including the laws of war, in the context of 
cyberattacks. The Tallinn Manual provides guidelines on how cyber operations can be conducted by 
states during conflict, including by military forces. The TNI Cyber Force must ensure that its 
operations stay within the bounds of international law, particularly regarding acts of cyber aggression. 

 Law No. 11 of 2008 on Electronic Information and Transactions (ITE Law) [18] 

Articles 29 through 31 regulate information security, prohibitions against illegal access, and electronic data 
protection. The TNI Cyber Force must also comply with the ITE Law, especially concerning the use of cyber 
technology in a military context that may involve accessing sensitive or electronic data. 

In forming the TNI Cyber Force, there must be alignment between national and international legal 
frameworks to ensure that all forms of cyber operations are conducted in accordance with applicable legal 
principles. While national defense remains a priority, transparency, accountability, and the protection of 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

77 

human rights in the digital world must always be upheld. These regulations form the foundation for 
determining the operational boundaries of the TNI Cyber Force and ensuring that its military activities do not 
violate international legal principles or civil rights in cyberspace. 

2. Research method 

To ensure reproducibility, this research on "The Formation of the TNI Cyber Force: A Strategic and Policy 
Analysis" adopts a qualitative research method using secondary data, following the approach outlined by 
Creswell [19]. Specifically, content analysis was employed, as described by Krippendorff [20], to 
systematically analyze the selected data sources, focusing on policy documents, cybersecurity reports, and 
relevant regulations, including the Defense Law, the TNI Law, and global cybersecurity threat reports from 
Fortinet [4] and the National Cyber and Encryption Agency (BSSN). 

Content analysis was conducted to identify key themes related to cybersecurity strategies, such as the 
effectiveness of collaboration between the TNI and BSSN and the challenges encountered in implementing 
cyber defense policies. The analysis followed a structured coding process based on pre-defined categories that 
align with cybersecurity policy and strategy evaluation frameworks. 

The use of secondary data is central to this study due to the availability of comprehensive policy documents, 
legal regulations, and national and international cybersecurity reports. Key sources include the Fortinet [4] 
Global Threat Report, BSSN’s cybersecurity policy documents, and relevant Indonesian cybersecurity 
regulations. These sources provide detailed insights into the formulation and implementation of policies in 
response to evolving cyber threats. 

To ensure that findings were reliable and valid, content analysis was conducted in stages. First, a thorough 
review of documents was performed, followed by open coding to identify recurring themes. This was 
followed by axial coding to group-related themes, enabling a more focused analysis of challenges and 
successes in the TNI’s formation of the Cyber Force. Modifications of Krippendorff [20] method included a 
case study approach to assess specific incidents of cyberattacks on Indonesia’s critical infrastructure. This 
case study method allowed for the exploration of strategic and policy implications in real-world contexts. 

3. Results and discussion 

3.1   Research findings 

This study found that the formation of the TNI Cyber Force is a response to the increasing complexity of 
cyber threats in Indonesia and globally. According to data from Fortinet [4], Indonesia experienced over 35 
million botnet attacks in the first quarter of 2023, with a significant increase in attack duration, reaching up to 
83 days. Botnets like Ghost Rat and Mirai were frequently used for Distributed Denial of Service (DDoS) 
attacks and data theft. These findings highlight the importance of strengthening the military's cyber units to 
protect the country’s critical infrastructure. 

Additionally, data from AwanPintar.id [5] indicates that the number of cyberattacks in Indonesia during the 
first half of 2024 reached 2.4 billion, a drastic increase compared to 347 million attacks in the same period the 
previous year. This further emphasizes the need for the establishment of the TNI Cyber Force as part of the 
national defense strategy to counter these threats. 

In terms of policy, Presidential Regulation No. 82 of 2022 on the National Cyber and Encryption Agency 
(BSSN) regulates the coordination between BSSN and the TNI in the protection of cyber infrastructure. This 
research found that synergy between BSSN and the TNI Cyber Force is crucial in addressing the growing 
challenges in cybersecurity. As highlighted by Chotimah [12], closer collaboration between these agencies 
will enhance the effectiveness of national cyber defense, especially in anticipating both domestic and 
international cyber threats. 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

78 

Regarding international law, the implementation of the Tallinn Manual 2.0 provides guidelines on how 
military cyber operations must comply with the laws of war. The TNI Cyber Force needs to ensure that its 
operations remain within the boundaries of international law, especially concerning attacks that may impact 
civilian infrastructure.  

White [1] also underscores the importance of coordination between the military and civilian sectors in 
safeguarding a nation's digital sovereignty, as cyber threats can easily target vital civilian sectors. 

The research also revealed that Indonesia ranks 49th globally in the National Cybersecurity Index (NCSI) 
2023, with a score of 63.64. Although this ranking has improved from 83rd place in 2022, Indonesia still 
needs to increase its cybersecurity readiness, particularly as attacks on critical infrastructure, such as the 
National Data Center (PDN), have been rising, with a ransomware attack by LockBit 3.0 occurring in mid-
2024 [9]. 

This study uncovers several critical facts regarding the formation of the TNI Cyber Force and the 
cybersecurity challenges faced by Indonesia. The following Table 2 summarizes the key findings: 

Table 2. Key Research Findings on the Formation of the TNI Cyber Force 
Category Data Source 

Number of Botnet Attacks in 
Indonesia (Q1 2023) 

35,911,749 attacks, with Ghost Rat leading (19.87% 
growth) 

Fortinet [4] 

Botnet Duration Botnet duration increased to 83 days (2023), 1,000x 
longer than in previous years 

Fortinet [4] 

Number of Cyberattacks in 
Indonesia (H1 2024) 

2.4 billion attacks (up from 347 million attacks in the 
same period the previous year) 

AwanPintar.id [5] 

BSSN and TNI Coordination Synergy between BSSN and the TNI Cyber Force is 
needed to protect national cyber infrastructure 

Presidential 
Regulation No. 82 of 

2022 [21] 
Indonesia’s Cybersecurity 

Ranking 
Indonesia ranked 49th globally in the NCSI 2023 with a 

score of 63.64 
NCSI [22] 

Ransomware Attack on PDN LockBit 3.0 ransomware attack targeted the National Data 
Center in mid-2024 

tirto.id [9] 

International Law on Cyber 
Warfare 

TNI Cyber Force operations must comply with 
international law, as outlined in the Tallinn Manual 2.0 

White [1] 

(Sources: Fortinet [4]; AwanPintar.id [5]; Presidential Regulation No. 82 of 2022 [21]; NCSI [22]; tirto.id 
[9], White [1].) 

The table shows that the significant number of cyberattacks in Indonesia, particularly botnet and ransomware 
attacks, underscores the urgency of forming the TNI Cyber Force. Data from Fortinet (2023) highlights the 
sharp increase in botnet attack duration, leaving Indonesia's digital infrastructure vulnerable for extended 
periods. Moreover, with over 2.4 billion cyberattacks in the first half of 2024 [5], the creation of a military 
cyber unit becomes a strategic step in tackling these massive threats. 

Coordination between BSSN and the TNI Cyber Force is crucial to ensure the protection of national cyber 
infrastructure, as stipulated by Presidential Regulation No. 82 of 2022. One of the challenges includes 
ensuring that the TNI operates within the framework of international law, as explained in the Tallinn Manual 
2.0 [23]. 

Despite Indonesia’s significant improvement in cybersecurity rankings, rising from 83rd place in 2022 to 49th 
place in the NCSI 2023, more intensive efforts are required to reach a higher level of cyber readiness. The 
ransomware attack on the National Data Center (PDN) also highlights the need to bolster the security of 
strategic data, particularly in government institutions [9]. 

These findings confirm that the TNI Cyber Force is not only a crucial instrument in national defense but also 
requires cross-sector synergy and adherence to international law in conducting cyber operations. 

 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

79 

3.2   Interpretation of research findings 

The findings of this research reveal the importance of establishing the TNI Cyber Force as part of a national 
defense strategy that is responsive to the increasing cyber threats in Indonesia. The sharp rise in cyberattacks, 
particularly botnet and ransomware attacks, indicates significant vulnerabilities to the country's critical 
infrastructure. The data presented shows that more than 35 million botnet attacks were recorded in the first 
quarter of 2023, with botnet attack durations increasing to 83 days. This illustrates that cyber threats are 
becoming more persistent and require stronger and better-coordinated defense measures. 

The surge in cyberattacks from 347 million in the first half of 2023 to 2.4 billion in the first half of 2024 
represents a substantial increase, highlighting how rapidly these threats are evolving. This underscores the 
urgent need for the TNI, through the Cyber Force, to play a more active role in safeguarding the nation’s 
digital infrastructure. The coordination between BSSN and the TNI Cyber Force, as regulated by Presidential 
Regulation No. 82 of 2022, is critical to ensuring that both institutions can effectively address dynamic and 
targeted cyber threats. 

Although Indonesia has improved its cybersecurity score, rising from 83rd place in 2022 to 49th place in 2023 
on the National Cybersecurity Index (NCSI), the continuing rise of cyber threats emphasizes that efforts to 
strengthen cyber defense must be accelerated. This improvement in the score indicates progress in national 
cyber readiness, yet there remain gaps that must be addressed, especially in securing strategic government 
infrastructure, as seen from the ransomware attack on the National Data Center (PDN) in 2024. 

In an international context, the operations of the TNI Cyber Force must remain within the boundaries of 
international law governing the use of cyber force, as outlined in the Tallinn Manual 2.0. This means that any 
military actions conducted by the TNI's cyber unit, particularly regarding cyber aggression, must comply with 
the laws of war and protect civil rights as well as critical infrastructure that may be impacted. 

Overall, these findings indicate that the TNI Cyber Force has the potential to become a key instrument in 
addressing the growing cyber threats in Indonesia. However, institutional strengthening, cross-sector 
coordination, and compliance with both national and international regulations are necessary for it to function 
optimally in protecting the country’s digital sovereignty. 

3.3   Comparison with literature 

The findings of this research show that the formation of the TNI Cyber Force aligns with global trends in 
which countries are increasingly strengthening their cyber defenses as part of their national security strategies. 
Research by Hatch [2] indicates that countries such as the United States and Russia have long-established 
military cyber units to address the continuously evolving cyber threats. Similarly, the establishment of the TNI 
Cyber Force reflects Indonesia's need to adapt to new defense dynamics, particularly with the growing 
complexity of threats like botnets and ransomware. This finding is supported by the Fortinet report [4], which 
recorded a surge in botnet attack durations of up to 83 days, highlighting that these threats are becoming more 
persistent and difficult to manage with conventional defense approaches. 

Additionally, Sarjito [24] emphasizes the importance of collaboration between military and civilian agencies 
to enhance the effectiveness of cyber defense. In the context of Indonesia, the synergy between BSSN and the 
TNI Cyber Force, as regulated by Presidential Regulation No. 82 of 2022, is crucial. This research is 
consistent with the literature that stresses cross-institutional cooperation as a key element in building resilient 
cyber defense. This is further reinforced by White's study [1], which underscores the need for coordination 
between civilian and military sectors in facing cyber threats that are global and interconnected. 

From an international legal perspective, the research findings also align with the principles outlined in the 
Tallinn Manual 2.0. As explained in the manual, cyber operations conducted by the military must comply with 
international law, including the laws of war, to ensure that any cyber actions taken do not violate human rights 
or target critical civilian infrastructure. These findings are consistent with the arguments in the literature, 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

80 

which assert that legal boundaries in cyber operations are essential to maintaining the legitimacy of military 
actions in cyberspace. 

The comparison between these findings and the existing literature demonstrates that Indonesia is following the 
global trend of strengthening national cyber defenses. However, the literature also highlights that Indonesia 
still needs to enhance its cyber capabilities and infrastructure, as reflected by the significant rise in 
cyberattacks in 2024. While AwanPintar.id [5] reported a surge in cyberattacks reaching 2.4 billion in the first 
half of 2024, comparisons with other countries reveal that Indonesia's cyber readiness, though improving, still 
lags behind some neighboring Southeast Asian nations such as Malaysia and Singapore, which rank higher in 
the National Cybersecurity Index (NCSI). 

Thus, the findings of this research are consistent with the existing literature but also highlight the need for 
more intensive policy reinforcement, strategic planning, and institutional synergy to ensure that the TNI Cyber 
Force can effectively address the ever-evolving cyber threats. 

3.4   Theoretical implications 

This research reinforces the importance of integrating cyber capabilities into military defense, in line with the 
concept of cyber warfare, which is increasingly recognized as a key component of modern national security 
[2]. Additionally, the theory of collective security, which involves cross-agency synergy, is highly relevant, as 
demonstrated by the coordination between the TNI Cyber Force and the National Cyber and Encryption 
Agency (BSSN) in addressing rapidly evolving cyber threats [1]. This supports the idea that cybersecurity 
requires both national and international collaboration, as outlined in the Tallinn Manual 2.0 on the regulation 
of cyber operations by states [23]. 

The formation of the TNI Cyber Force also strengthens the theory of defense systems, where cyberspace is 
considered an essential component of a nation's broader defense system, which must be integrated with air, 
land, and sea forces [3]. 

3.5   Practical implications 

This research provides several significant practical implications related to the formation of the TNI Cyber 
Force in addressing increasingly complex cyber threats. 

First, the findings emphasize the importance of enhancing human resource capacity in cyber defense. The TNI 
Cyber Force requires personnel who are specially trained to manage cyber threats, including the ability to 
detect, respond to, and mitigate technical and targeted attacks. Investment in cybersecurity training and 
certification for military personnel is a crucial step toward strengthening national cyber resilience. 

Second, the synergy between the National Cyber and Encryption Agency (BSSN) and the TNI Cyber Force 
must be reinforced through improved coordination and information sharing regarding cyber threats. The 
research indicates that inter-agency cooperation is essential to create a more holistic and integrated cyber 
defense system. This could be achieved by establishing clear cooperation protocols and a shared platform for 
real-time threat data exchange between BSSN and the TNI. 

Third, the TNI Cyber Force needs to implement advanced cybersecurity technologies and infrastructure, 
including artificial intelligence (AI)-based technology to quickly detect evolving threats, as identified in the 
Fortinet report [4]. The use of AI and machine learning technologies in monitoring cyber threats can enhance 
response speed to attacks and help prioritize vulnerability patching in defense systems. 

Fourth, the TNI Cyber Force should strengthen international relations and expand participation in global 
forums discussing cybersecurity, as recommended by the Tallinn Manual 2.0. This is necessary to ensure that 
cyber operations comply with international law and to gain access to relevant global cyber intelligence. Active 
participation in international cooperation will enable Indonesia to better protect its strategic infrastructure 
from global-scale attacks. 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

81 

Fifth, the formation of the TNI Cyber Force lays the foundation for raising cybersecurity awareness across 
government institutions and the private sector. The research shows that with the growing number of 
cyberattacks, it is vital for the government to prioritize cybersecurity not only in the military sector but also in 
other critical sectors such as energy, transportation, and finance. Implementing policies that emphasize 
preventive cybersecurity measures across all layers will strengthen overall national digital security. 

Thus, the practical implications of this research include enhancing personnel training, inter-agency 
cooperation, adopting cutting-edge technologies, fostering international collaboration, and spreading 
cybersecurity awareness nationwide. 

3.6   Research limitations and future research 

This study has several limitations that should be noted. 

First, it relies primarily on secondary data, which means it does not include direct interviews with 
policymakers or military personnel involved in the formation of the TNI Cyber Force. This limits the depth 
of understanding regarding the internal processes related to the establishment and operationalization of the 
Cyber Force. More in-depth information obtained through direct interviews or field observations could 
provide a more comprehensive picture of the institutional dynamics and challenges faced by the TNI Cyber 
Force. 

Second, the research focuses on national policy and does not thoroughly examine how international 
cybersecurity policies influence the strategies of the TNI Cyber Force. Given that cybersecurity issues are 
cross-border in nature and heavily influenced by global dynamics, this limitation results in an analysis that 
lacks consideration of the direct impact of international legal frameworks and cybersecurity strategies on 
domestic policy. 

Third, the study is more focused on the strategic and policy aspects, with limited emphasis on the technical 
aspects of the TNI Cyber Force's formation, such as the technological infrastructure and cyber operational 
systems utilized. Further technical exploration into the technologies adopted by the Cyber Force, such as the 
use of artificial intelligence, cybersecurity systems, and protocols employed to counter cyberattacks, would 
provide deeper insights into the operational readiness of the TNI's cyber unit. 

Based on the limitations mentioned above, future research can focus on several key areas. 

First, field research using qualitative methods, involving in-depth interviews with military policymakers and 
cybersecurity experts, could provide sharper insights into the formation and operationalization of the TNI 
Cyber Force. This research could also include perspectives from the private sector that collaborates with the 
TNI to strengthen national cybersecurity. 

Second, international comparative research could be conducted to compare military cybersecurity strategies 
in Indonesia with other countries that are more advanced in developing military cyber units, such as the 
United States, Russia, and China. This would help identify best practices that Indonesia could adopt to 
strengthen its cyber defense. 

Third, future research could also focus on the technical aspects of cyber defense, such as the technologies 
used in detecting and responding to cyber threats. This could include studies on the effectiveness of artificial 
intelligence (AI) and machine learning in managing cyber threats in the military domain. 

Fourth, further studies on the international legal framework related to cyber warfare and Indonesia’s 
involvement in global cybersecurity forums could also be an important direction for future research. This 
research could explore how international regulations influence the operations of the TNI Cyber Force and to 
what extent Indonesia complies with global norms in conducting military cyber operations. 

By addressing these limitations and exploring broader and deeper research areas, future studies can 
contribute more comprehensively to understanding the role and effectiveness of the TNI Cyber Force in 
tackling cyber challenges in the modern era. 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

82 

4. Conclusions 

This study emphasizes the critical role of the TNI Cyber Force in responding to the growing complexity and 
volume of cyber threats in Indonesia. The rise in cyberattacks, particularly botnet and ransomware incidents, 
highlights the urgent need for a dedicated military cyber unit to enhance national cybersecurity, protect vital 
infrastructure, and maintain digital sovereignty. The significant increase in attacks, as indicated by data 
from Fortinet [4] and AwanPintar.id (2024) [5], underscores this necessity. 

The collaboration between the TNI Cyber Force and the National Cyber and Encryption Agency (BSSN), as 
mandated by Presidential Regulation No. 82 of 2022, is essential for effectively countering cross-border and 
dynamic cyber threats. Furthermore, ensuring compliance with international laws, such as those detailed in 
the Tallinn Manual 2.0, is vital for maintaining the legitimacy of TNI’s cyber operations within the global 
legal framework. 

While Indonesia has made progress in improving its cybersecurity, as evidenced by its rising rank in the 
2023 National Cybersecurity Index (NCSI), significant challenges remain. These include the need for 
enhanced human resources, the adoption of advanced technologies, and increased international cooperation 
to further strengthen the nation’s cyber defense capabilities. 

Declaration of competing interest 

The authors declare that they have no known financial or non-financial competing interests in any material 
discussed in this paper. 

Funding information 

No funding was received from any financial organization to conduct this research. 

Declaration of use of AI in the writing process 

The author used ChatGPT during the preparation of this work to assist with language editing and refining 
the manuscript structure. The author reviewed and edited the work as necessary and took full responsibility 
for the final version. 

References 

[1] J. White, “Cyber Threats and Cyber Security: National Security Issues, Policy and Strategies.,” 
Global Security Studies, vol. 7, no. 4, 2016. 

[2] B. Hatch, “The future of strategic information and cyber-enabled information operations,” Journal 
of Strategic Security, vol. 12, no. 4, pp. 69–89, 2019. 

[3] Y. C. Mahendra, N. K. D. S. A. Pinatih, “Cyber Security Handling Strategy in Indonesia,” Jurnal 
Review Pendidikan Dan Pengajaran (JRPP), vol. 6, no. 4, pp. 1941–1949, 2023. 

[4] Fortinet, “Global Threat Landscape Report A Semiannual Report by FortiGuard Labs,” 2023. 
Accessed: Oct. 13, 2024. [Online]. Available from: 
https://www.fortinet.com/content/dam/fortinet/assets/threat- reports/threat-report-1h-2023.pdf 

[5] AwanPintarid, “AwanPintar.id | Indonesia Alert - Digital Threat Report in Indonesia Semester 1 of 
2024,” 2024. Accessed: Oct. 13, 2024. [Online]. Available from: https://www.awanpintar.id/wp- 
content/uploads/2024/08/2024_AwanPntar.id_Laporan_Ancaman_Digital_sem1_2024_Green.pdf 

[6] CSIRT BAIS TNI, “Global Threat Report 2023: Cybersecurity and Trends in Indonesia," CSIRT 
BAIS TNI. Accessed: Oct. 12, 2024. [Online]. Available: https://csirt.bais-tni.mil.id/posts/laporan- 
ancaman-global-2023-keamanan-siber-dan-tren-di-indonesia 

[7] KumparanTECH, “Cyber Attacks on Indonesia Increase 6 Times in H1 2024, Majority from 
Domestic,” kumparanTECH. Accessed: Oct. 12, 2024. [Online]. Available 
from : https://kumparan.com/kumparantech/serangan-siber-ke-ri-naik-6-kali-lipat-pada-h1-2024-
mayoritas- dari-dalam-negeri-23PnYQpafrf/4. 



 DSS Vol. 5, No. 2, 2024, pp. 74-83 

83 

[8] Tempo.co, “BSSN: 361 million Cyber Attacks to Indonesia,” tempo.co. Accessed: Oct. 12, 2024. 
[Online]. Available from: https://bisnis.tempo.co/read/1797613/bssn-361-juta-serangan-siber-ke-
indonesia 

[9] Tirto.id, “What is the Cybersecurity Score and Rating in Indonesia?,” tirto.id. Accessed: Oct. 12, 
2024. [Online]. Available from: https://tirto.id/berapa-skor-dan-peringkat-keamanan-siber-di-
indonesia-gZ1s 

[10] A. R. Arianto, G. Anggraini, “Building Indonesia's national cyber defense and security to deal with 
global cyber threats through the Indonesia security incident response team on internet infrastructure 
(ID-SIRTII),” Jurnal Pertahanan dan Bela Negara, vol. 9, no. 1, pp. 13–30, 2019. 

[11] A. S. Waskita, H. Sidik, “Indonesia's Cyber Diplomacy in the Implementation of Capacity Building 
on National Cybersecurity Strategy Workshop 2019,” Padjadjaran Journal of International 
Relations, vol. 5, no. 2, p. 142, 2023. 

[12] H. C. Chotimah, “Cyber Security Governance and Cyber Diplomacy in Indonesia under the 
Institution of the State Cyber and Cryptography Agency [Cyber Security Governance and 
Indonesian Cyber Diplomacy by National Cyber and Encryption Agency],” Jurnal Politica 
Dinamika Masalah Politik Dalam Negeri dan Hubungan Internasional, vol. 10, no. 2, pp. 113–128, 
2019. 

[13] A. F. Lubis, “Implementation of Law Number 3 of 2002 concerning State Defense in Dealing with 
military Disturbances,” Jurnal Begawan Hukum (JBH), vol. 2, no. 1, pp. 310–319, 2024. 

[14] DataIndonesia.id, “Law No. 34 of 2004 concerning the Indonesian National Army,” 
DataIndonesia.id. Accessed: Oct. 13, 2024. [Online]. Available: 
https://dataindonesia.id/regulasi/detail/uu-no-34-tahun- 2004-tentang-tentara-nasional-indonesia 

[15] M. Rizki, “Development of Indonesia's Defense/Cyber Security System in Facing the Challenges of 
Technological and Information Development,” Politeia: Jurnal Ilmu Politik, vol. 14, no. 1, pp. 54–
62, 2022. 

[16] M. Bothe, K. J. Partsch, W. A. Solf, New rules for victims of armed conflicts: commentary on the 
two 1977 protocols additional to the Geneva Conventions of 1949. Martinus Nijhoff Publishers, 
1982. 

[17] M. N. Schmitt, Tallinn Manual on the International Law Applicable to Cyber Warfare, vol. 141. 
Cambridge University Press, 2013. 

[18] L. H. Sujamawardi, “Juridical Analysis of Article 27 paragraph (1) of Law Number 19 of 2016 
concerning Amendments to Law Number 11 of 2008 concerning Information and Electronic 
Transactions," Dialogia Iuridica, vol. 9, no. 2, 2018. 

[19] J. W. Creswell, Research Design: Qualitative, Quantitative, and Mixed Methods Approaches. SAGE 
Publications, 2014. 

[20] K. Krippendorff, Content analysis: An introduction to its methodology. Sage Publications, 2018. 
[21] JDIH, “Peraturan Presiden Nomor 82 Tahun 2022 tentang Badan Siber dan Sandi Negara 

(BSSN).,” JDIH. Accessed: Oct. 13, 2024. [Online]. Available: 
https://peraturan.bpk.go.id/Details/165493/perpres-no-28-tahun-
2021#:~:text=Perpres%20ini%20mengatur%20mengenai%20kedudukan%2C%20tugas%2C%20da
n%20fungsi,bertanggung%20jawab%20kepada%20Presiden%20yang%20dipimpin%20oleh%20Ke
pala. 

[22] NCSI, “NCSI Rankings 2023,” e-Governance Academy Foundation. Accessed: Oct. 13, 2024. 
[Online]. Available: https://ncsi.ega.ee/ncsi-index/ 

[23] E. T. Jensen, “The Tallinn Manual 2.0: Highlights and Insights,” Geo. J. Int’l L., vol. 48, p. 735, 2016. 
[24] A. Sarjito, “National Defense Ecosystem Model Based on Collaboration Between Government, 

Industry and Society,” JISIP UNJA (Jurnal Ilmu Sosial Ilmu Politik Universitas Jambi), pp. 32–44, 
2024 

 


