URGENSI PENGGUNAAN SERTIFIKAT KEANDALAN KATEGORI KEAMANAN SISTEM ELEKTRONIK BAGI PELAKU E-COMMERCE DI INDONESIA

Abstrak

E-commerce yang dilakukan melalui internet selain memberikan keuntungan, juga berpotensi menimbulkan kerugian dikarenakan vulnerability dalam sistem elektronik e-commerce terhadap berbagai ancaman gangguan atau serangan siber. Sertifikat Keandalan Keamanan Sistem elektronik mengacu pada standar sistem pengamanan yang diatur oleh PBSSN 8/2020 yaitu SNI ISO/IEC 27001. Dalam kepentingan keamanan sistem elektronik, BSSN berwenang menetapkan pemberlakuan SNI wajib berdasarkan UU SPK 20/2014. Dalam menjamin keandalan dan keamanan sistem elektronik PP PMSE 80/2019, PBSSN 8/2020, dan UU SPK 20/2014 mewajibkan kepada pelaku e-commerce untuk menggunakan Sertifikat Keandalan Keamanan sistem elektronik SNI ISO/IEC 27001 untuk melindungi konsumen dalam transaksi elektronik. Penelitian ini mempunyai tujuan untuk mengetahui bagaimana pelaksanaan kewajiban penggunaan Sertifikat Keandalan Keamanan Sistem Elektronik oleh pelaku e-commerce di Indonesia dan bagaimana tanggung jawab pelaku e-commerce terkait penggunaan Sertifikat Keandalan Keamanan Sistem Elektronik. Metode pendekatan yuridis normatif digunakan dalam penelitian ini dengan mengkaji bahan hukum primer yaitu peraturan perundang-undangan serta bahan hukum sekunder yaitu jurnal dan buku. Hasil penelitian ini menunjukkan bahwa belum semua pelaku e-commerce mematuhi ketentuan tentang penggunaan Sertifikat Keandalan Keamanan Sistem Elektronik SNI ISO/IEC 27001 sebagaimana diwajibkan PP PMSE 80/2019, PBSSN 8/2020, dan UU SPK 20/2014. Pelaku e-commerce yang tidak comply dengan kewajiban tersebut berpotensi melanggar hukum maka, pelaku e-commerce dapat dikenakan sanksi secara administratif, perdata, dan pidana. Pelaku e-commerce sebaiknya segera memperoleh sertifikat keandalan keamanan sistem elektronik agar menjamin keandalan dan keamanan sistem elektroniknya.

E-commerce carried out via the internet, apart from providing benefits, also has the potential to cause losses due to the vulnerability of e-commerce electronic systems to various threats of disruption or cyber-attacks. The Electronic System Security Reliability Certificate refers to the security system standard regulated by PBSSN 8/2020, namely SNI ISO/IEC 27001. In the interest of electronic system security, BSSN is authorized to determine the mandatory implementation of SNI based on SPK Law 20/2014. In ensuring the reliability and security of electronic systems, PP PMSE 80/2019, PBSSN 8/2020, and SPK Law 20/2014 have required all e-commerce actors to use the SNI Mandatory ISO/IEC 27001 Electronic System Security Reliability Certificate to protect consumers in electronic transactions. This research attempts to ascertain out how the implementation of the obligation to use the Electronic System Security Reliability Certificate by e-commerce actors in Indonesia and the responsibility of e-commerce actors in the use of the Electronic System Security Reliability Certificate. This research uses a normative juridical approach method by study secondary legal materials in the form of books and journals and primary legal materials in the form of laws and regulations. The results showed that not all e-commerce actors have complied with the provisions regarding the use of the SNI ISO/IEC 27001 Electronic System Security Reliability Certificate as required by PP PMSE 80/2019, PBSSN 8/2020, and SPK Law 20/2014. E-commerce actors who do not comply with these obligations have the potential to violate the law, so e-commerce actors can be subject to criminal, civil, administrative sanctions. E-commerce actors should immediately obtain an electronic system security reliability certificate to ensure the reliability and security of their electronic systems.