Keywords:
compliance behavior, cybersecurity governance, policy implementation, regulatory compliance, regulatory effectiveness, state capacityAbstract
Cybersecurity governance in Indonesia faces persistent
challenges arising from gaps in regulatory implementation
and weak compliance among regulated actors. Although
legal frameworks provide a formal basis for governing
digital activities, their effectiveness is limited by inconsistent
operationalization and insufficient adherence to regulatory
requirements. This study examines the effectiveness of
policy implementation and the factors influencing
compliance in Indonesia’s cybersecurity governance. Using
a normative juridical method combined with systematic and
sociological approaches, the research analyzes the
interaction between implementation processes,
enforcement mechanisms, and compliance behavior. The
findings indicate that institutional limitations, weak
enforcement credibility, and complex regulatory
requirements contribute to inconsistent implementation
and low compliance levels. These conditions reduce the
effectiveness of cybersecurity regulation and create a gap
between legal provisions and governance outcomes. The
study concludes that strengthening implementation
processes and improving compliance mechanisms are
essential for achieving effective and reliable cybersecurity
governance in Indonesia.