Performance & Conformance Excellence

PT. Insan Dikara Technology (INDITECH) is an independent IT GRC consultancy. Since 2011 we have helped finance institutions, telcos and government agencies govern technology, manage risk and prove compliance.

Trusted across Indonesia's regulated industries

  • Finance Institutions
  • Telecommunications
  • Government & Public Sector
  • Energy, Oil & Gas
  • Manufacturing

Who we are

Independent GRC advice, since 2011

INDITECH was established in July 2011 by internationally certified professionals with multinational-corporation backgrounds. We advise boards, CIOs and audit committees on one thing: making technology both perform and conform.

Our engagements cover IT governance design, independent audit and assurance, risk and compliance programs, and capability building — grounded in COBIT, ITIL and ISO/IEC 27001.

  • ISACA-aligned methodology and reporting
  • Bahasa Indonesia & English delivery
  • OJK, BI and regulator-ready documentation

PT. Insan Dikara Technology — Menara 165 · Jakarta Selatan

Our practices

Governance, Risk, Audit & Training

Four practices, one standard of delivery — every engagement grounded in the frameworks your auditors and regulators reference.

  • IT Governance & Advisory

    Operating models, decision rights and board reporting designed around COBIT 2019 — governance your directors can read and your teams can run.

  • IT Risk & Compliance

    CRISC-disciplined risk programs, regulatory readiness for OJK and BI, business continuity and disaster recovery that survives real incidents.

  • Assurance & IT Audit

    Independent IT general controls, ISMS and VAPT engagements led by CISA-certified auditors — evidence, not opinions.

  • Training & Capability

    CISA and CRISC review courses, COBIT and ITIL programs, awareness built from real findings — taught by working practitioners.

    Professional GRC training class with instructor and participants

Credentials & frameworks

Certified people, recognised frameworks

Our consultants hold international credentials and deliver against the frameworks your auditors and regulators reference.

CISA

The global standard for IT audit, assurance and control. Our lead assurance practice is designed around it.

CRISC

CRISC — Certified in Risk and Information Systems Control badge

Enterprise IT risk identification, assessment and response — the credential behind our risk practice.

CISM

Security governance and program leadership for managing information security at the enterprise level.

CGEIT

CGEIT — Certified in the Governance of Enterprise IT badge

Board-level IT governance, value delivery and resource optimisation — the backbone of our consulting practice.

COBIT 2019

The enterprise framework we use to build governance operating models, policies and board reporting.

ITIL 4

Service management practices for the digital enterprise — the baseline we align ITSM engagements to.

Selected work

Representative engagements across regulated industries. Client names are withheld under non-disclosure agreements — references are available on request.

  • Full-scope IT audit for a leading finance institution

    IT general controls audit across core systems and digital channels — regulator-ready findings and a costed remediation roadmap for a finance institution under OJK supervision.

  • ISO/IEC 27001 program for a national operator

    From gap analysis to a certification-ready ISMS — policy suite, risk treatment plan and management review cadence for a national telecommunications operator.

    ISO/IEC 27001 ISMS program for a telecommunications operator

  • COBIT-based governance design for a ministry agency

    IT governance operating model, board-level reporting framework and policy architecture for a government agency — built on COBIT 2019 and designed for public-sector reality.

  • IT continuity and disaster recovery for an energy group

    Business impact analysis, recovery strategy and a testing program that survived its first real incident — IT continuity for an energy group whose operations cannot pause.

inditech academy

Train with the people who do the work

Public classes at Menara 165, Jakarta. In-house and online delivery available on request.

Get our updates

Latest news, blog & articles

Notes from our consultants — governance, security testing and the practice of IT GRC in Indonesia.

  • Enhancing Business Resilience through IT Governance

    Resilience is not a product you buy — it is an operating discipline. Here is how COBIT-based governance turns disruption into a managed variable.

  • The Importance of IT Security Vulnerability Assessment and Penetration Testing

    Firewalls and policies are assumptions until tested. Here is what a structured VAPT engagement actually tells you about your real exposure.

  • Achieving Business and IT Objectives with INDITECH

    Performance and conformance are not rivals. Done right, the same controls that satisfy regulators also shorten delivery and cut waste.

We are ready to support your business

Need an assurance or advisory engagement? Tell us the scope — we will respond within one working day.