Information Security and Digital Sovereignty: A Cyber–Crypto–Signal Defense Model for Indonesia

Purpose. This study explores how cyberspace security, cryptography, and signals intelligence can be integrated as the strategic foundation for Indonesia’s digital sovereignty. Method. Adopting a qualitative research design, the study applies policy analysis and literature review of national cybersecurity regulations, defence doctrines, and international research. Data were examined using the Critical Capability–Critical Requirement–Critical Vulnerability (CC–CR–CV) framework to assess the contribution of each pillar to sovereign cyber defence. Findings. The results indicate that Indonesia has strengthened its cybersecurity regulatory ecosystem but continues to face challenges, including fragmented command structures, dependency on foreign cryptographic technology, and limited signals-intelligence capacity. Integrating the Cyber–Crypto–Signal Triad enhances national resilience, data protection, and electromagnetic awareness, supporting proactive cyber defence and strategic autonomy. Theoretical implications. The study advances digital sovereignty discourse by introducing a security-driven operational model that links cyber defence, cryptographic sovereignty, and spectrum dominance. Practical implications. The paper recommends forming a National Cyber Council to unify command and control, accelerate local cyber-cryptographic development, and institutionalise integrated spectrum-intelligence capabilities. Originality/Value: This research presents the Cyber–Crypto–Signal Triad as a novel approach to operationalising information security as an instrument of state power, moving beyond regulatory-centric perspectives. Limitations: Reliance on qualitative analysis and publicly available policy documents limits empirical depth; future research should incorporate threat-intelligence datasets, comparative case studies, and quantitative capability metrics. Paper type. Empirical.