Building Digital Trust in Jakarta’s Micro and Small Enterprises: From Awareness to Adaptation
Abstract
Digital transformation opens many opportunities for micro, small, and medium enterprises (MSMEs) while also creating new challenges in security and trust. This study examines how MSMEs in Jakarta build digital trust through basic information security practices using a mixed-method approach. A survey involving 30 MSMEs showed that 70 percent of respondents understood the importance of strong passwords and 80 percent were aware of phishing risks. However, only 40 percent used two-factor authentication and 20 percent followed formal security guidelines. Interviews with ten business owners revealed that awareness often develops after personal experiences with fraud, while adaptive strategies such as self-learning, small internal training sessions, and the use of built-in security tools help them cope with limited knowledge and resources. The integration of quantitative and qualitative findings resulted in a conceptual model of incremental digital trust adaptation that progresses through awareness, practical adaptation, and gradual governance. Theoretically, the model explains digital trust as a continuous and context-based process within MSMEs. Practically, it provides guidance for governments, business associations, and digital platforms in creating simple, scalable, and realistic programs to strengthen the digital resilience of small enterprises.
Downloads
References
ISACA, “What’s The State of Digital Trust This Year?,” ISACA, 2024. [Online]. Available: https://www.isaca.org/digital-trust/state-of-digital-trust
D. de Vreeze, “The State of Digital Trust in 2025 - Consumers Still Shoulder the Responsibility,” Thales Group, 2025.
M. F. Arroyabe, C. F. A. Arranz, I. Fernandez De Arroyabe, and J. C. Fernandez De Arroyabe, “Exploring the economic role of cybersecurity in SMEs: A case study of the UK,” Technol. Soc., vol. 78, p. 102670, Sep. 2024, doi: 10.1016/j.techsoc.2024.102670.
J. Boehm, L. Grennan, A. Singla, and K. Smaje, “Why Digital Trust Truly Matters,” McKinsey & Company, 2022.
A. A. Wardana and E. Suryani, “Evaluation of information security management in MSMEs using Penilaian Mandiri Keamanan Informasi (PAMAN KAMI),” presented at the In Proceedings of the 6th International Conference on Management of Technology, Innovation, and Project (MOTIP 2023), 2023.
M. R. Slamet, M. Ikhlash, and F. Wulandari, “Analisis Penilaian Keamanan Informasi dengan menggunakan Penilaian Mandiri keamanan Informasi (PAMAN KAMI),” J. Appl. Bus. Adm., vol. 6, no. 1, pp. 41–50, Mar. 2022, doi: 10.30871/jaba.v6i2.3604.
A. A. Ajhari, M. A. Manaon, and Dimas, “Security Awareness Framework untuk Usaha Mikro, Kecil dan Menenengah di Indonesia,” Info Kripto, vol. 17, no. 3, pp. 85–91, Dec. 2023, doi: 10.56706/ik.v17i3.80.
I. M. Suartana, R. Eka Putra, R. Bisma, and A. Prapanca, “Pengenalan Pentingnya Cyber Security Awareness pada UMKM,” J. Abadimas Adi Buana, vol. 5, no. 02, pp. 197–204, Jan. 2022, doi: 10.36456/abadimas.v5.i02.a4560.
S. Saeed, S. A. Altamimi, N. A. Alkayyal, E. Alshehri, and D. A. Alabbad, “Digital Transformation and Cybersecurity Challenges for Businesses Resilience: Issues and Recommendations,” Sensors, vol. 23, no. 15, p. 6666, Jul. 2023, doi: 10.3390/s23156666.
BSSN, “Peraturan BSSN Nomor 4 Tahun 2024 tentang Penyelenggaraan Penilaian Mandiri Keamanan Informasi bagi UMKM,” Badan Siber dan Sandi Negara, 2024.
BSSN, “Workshop pembinaan kapasitas kematangan keamanan siber UMKM Go Digital,” Badan Siber dan Sandi Negara, 2025.
Cyberthreat.id, “BSSN luncurkan panduan mandiri keamanan informasi bagi pelaku UMKM.,” Cyberthreat.id, 2020.
Komite.id, “Kepala BSSN: Pengaturan keamanan siber dinilai mendesak,” Komite.id, 2023.
A. Papathanasiou, G. Liontos, A. Katsouras, V. Liagkou, and E. Glavas, “Cybersecurity Guide for SMEs: Protecting Small and Medium-Sized Enterprises in the Digital Era,” J. Inf. Secur., vol. 16, no. 01, pp. 1–43, 2025, doi: 10.4236/jis.2025.161001.
B. Azinheira, M. Antunes, M. Maximiano, and R. Gomes, “A methodology for mapping cybersecurity standards into governance guidelines for SME in Portugal,” Procedia Comput. Sci., vol. 219, pp. 121–128, 2023, doi: 10.1016/j.procs.2023.01.272.
S. Purnomo, N. Nurmalitasari, and N. Nurchim, “Digital transformation of MSMEs in Indonesia: A systematic literature review,” J. Manag. Digit. Bus., vol. 4, no. 2, pp. 301–312, Aug. 2024, doi: 10.53088/jmdb.v4i2.1121.
T. TH. Tambunan and I. Busnetti, “Recent Evidence on the Digitalization Process in Indonesia’s Micro and Small Enterprises,” Int. J. Curr. Sci. Res. Rev., vol. 07, no. 08, Aug. 2024, doi: 10.47191/ijcsrr/V7-i8-18.
D. P. Nugraha, B. Setiawan, R. J. Nathan, and M. Fekete-Farkas, “Fintech Adoption Drivers for Innovation for SMEs in Indonesia,” J. Open Innov. Technol. Mark. Complex., vol. 8, no. 4, p. 208, Dec. 2022, doi: 10.3390/joitmc8040208.
M. Bottarelli, G. Epiphaniou, S. Mahmood, M. Hooper, and C. Maple, “Assessing the Trustworthiness of Electronic Identity Management Systems: Framework and Insights from Inception to Deployment,” 2025, arXiv. doi: 10.48550/ARXIV.2502.10771.
Lucky Bamidele Benjamin, Ayodeji Enoch Adegbola, Prisca Amajuoyi, Mayokun Daniel Adegbola, and Kudirat Bukola Adeusi, “Digital transformation in SMEs: Identifying cybersecurity risks and developing effective mitigation strategies,” Glob. J. Eng. Technol. Adv., vol. 19, no. 2, pp. 134–153, May 2024, doi: 10.30574/gjeta.2024.19.2.0084.
I. D. Sudirman, E. Astuty, and R. Aryanto, “Enhancing Digital Technology Adoption in SMEs Through Sustainable Resilience Strategy: Examining the Role of Entrepreneurial Orientation and Competencies,” J. Small Bus. Strategy, vol. 35, no. 1, Jan. 2025, doi: 10.53703/001c.124907.
B. Metin, F. G. Özhan, and M. Wynn, “Digitalisation and Cybersecurity: Towards an Operational Framework,” Electronics, vol. 13, no. 21, p. 4226, Oct. 2024, doi: 10.3390/electronics13214226.
E. Kahveci, “Digital Transformation in SMEs: Enablers, Interconnections, and a Framework for Sustainable Competitive Advantage,” Adm. Sci., vol. 15, no. 3, p. 107, Mar. 2025, doi: 10.3390/admsci15030107.
M. Saeedikiya, S. Salunke, and M. Kowalkiewicz, “Toward a dynamic capability perspective of digital transformation in SMEs: A study of the mobility sector,” J. Clean. Prod., vol. 439, p. 140718, Feb. 2024, doi: 10.1016/j.jclepro.2024.140718.
S. Joyce, “Bridging the gaps to cyber resilience: The C-suite playbook. Findings from the 2025 Global Digital Trust Insights,” Pricewaterhouse Coopers, 2025.
Abstract views: 506 times
Download PDF: 226 times
Copyright (c) 2025 Journal of Information Systems and Informatics
This work is licensed under a Creative Commons Attribution 4.0 International License.
- I certify that I have read, understand and agreed to the Journal of Information Systems and Informatics (Journal-ISI) submission guidelines, policies and submission declaration. Submission already using the provided template.
- I certify that all authors have approved the publication of this and there is no conflict of interest.
- I confirm that the manuscript is the authors' original work and the manuscript has not received prior publication and is not under consideration for publication elsewhere and has not been previously published.
- I confirm that all authors listed on the title page have contributed significantly to the work, have read the manuscript, attest to the validity and legitimacy of the data and its interpretation, and agree to its submission.
- I confirm that the paper now submitted is not copied or plagiarized version of some other published work.
- I declare that I shall not submit the paper for publication in any other Journal or Magazine till the decision is made by journal editors.
- If the paper is finally accepted by the journal for publication, I confirm that I will either publish the paper immediately or withdraw it according to withdrawal policies
- I Agree that the paper published by this journal, I transfer copyright or assign exclusive rights to the publisher (including commercial rights)
