Operational Resilience Audit Menghadapi Technology, Process dan Third Party Disruption

Operational Resilience Audit Menghadapi Technology, Process dan Third Party Disruption

Operational Resilience Audit Menghadapi Technology, Process dan Third Party Disruption

23 - 24 September 2026 Malang Hotel Ibis Style

Deskripsi

Meningkatnya ketergantungan industri perbankan terhadap teknologi, digital infrastructure, business process, serta third party provider membuat operational resilience menjadi salah satu area yang semakin penting dalam pelaksanaan Internal Audit. Gangguan terhadap core system, jaringan, data, aplikasi, cybersecurity, fasilitas, human resources, maupun kegagalan pihak ketiga dapat menyebabkan terhentinya critical business services dan memberikan dampak signifikan terhadap nasabah, transaksi, reputasi, serta stabilitas operasional bank. Kondisi tersebut menuntut Internal Audit untuk memiliki kemampuan melakukan assurance secara lebih forward-looking dengan tidak hanya menguji keberadaan kontrol, tetapi juga menilai apakah bank memiliki kemampuan untuk prevent, withstand, respond to, recover from, dan learn from disruption. Audit terhadap operational resilience perlu mencakup keterkaitan antara business process, technology, people, facilities, third party, governance, serta recovery capability sehingga auditor mampu memberikan assurance yang komprehensif terhadap kemampuan bank dalam mempertahankan layanan kritikal ketika terjadi gangguan.

Pelatihan Operational Resilience Audit dirancang untuk meningkatkan kompetensi peserta dalam melakukan audit berbasis risiko terhadap resilience framework dan critical business services bank. Peserta akan mempelajari bagaimana melakukan risk assessment, business service mapping, identification of critical dependencies, assessment terhadap technology resilience, process resilience, third-party resilience, business continuity, disaster recovery, incident management, serta crisis response. Pelatihan juga membahas teknik audit untuk mengevaluasi control design, control effectiveness, recovery capability, testing results, incident response, vendor continuity, serta management oversight. Melalui pendekatan risk-based dan scenario-based auditing, peserta diharapkan mampu mengidentifikasi resilience gaps, menemukan root cause, menilai potential business impact, serta menyusun rekomendasi yang actionable dan bernilai strategis. Dengan demikian, Internal Audit dapat memberikan assurance yang lebih kuat terhadap kesiapan bank dalam menghadapi technology disruption, process failure, cyber incident, vendor outage, maupun berbagai skenario gangguan yang dapat memengaruhi kesinambungan critical banking services.

Tujuan

Setelah mengikuti pelatihan ini, peserta diharapkan dapat:

  1. Memahami konsep Operational Resilience dan peran Internal Audit dalam memastikan kemampuan bank menghadapi berbagai bentuk disruption.
  2. Mengidentifikasi critical business services, key processes, technology dependencies, people dependencies, dan third-party dependencies.
  3. Melaksanakan risk assessment dan audit planning terhadap technology, process, dan third-party disruption risk.
  4. Mengevaluasi efektivitas internal control, Business Continuity Plan, Disaster Recovery, incident management, dan recovery capability.
  5. Mengidentifikasi resilience gaps, control weaknesses, root cause, serta potential business impact dari berbagai skenario disruption.
  6. Menyusun audit findings dan rekomendasi strategis untuk meningkatkan operational resilience dan preparedness bank.

Materi

Materi 1. Operational Resilience Framework dan Strategic Audit Approach

Sub Materi:

  • Konsep Operational Resilience dalam Industri Perbankan
  • Strategic Role Internal Audit dalam Operational Resilience Assurance
  • Critical Business Services dan Business Service Mapping
  • Identification of People, Process, Technology, Facility dan Third Party Dependencies
  • Operational Resilience Governance dan Management Oversight
  • Risk-Based Audit Approach untuk Resilience Assessment

Materi 2. Technology Resilience dan Digital Operational Risk Audit

Sub Materi:

  • Technology Risk Assessment dan Critical IT Dependency Identification
  • IT Infrastructure, Application dan Network Resilience
  • Cybersecurity Risk dan Technology Disruption Assessment
  • Data Integrity, Backup, Recovery dan System Availability
  • Disaster Recovery Capability dan Recovery Readiness Assessment
  • Audit Testing terhadap Technology Resilience Controls

Materi 3. Process Resilience dan Business Continuity Audit

Sub Materi:

  • Business Process Mapping dan Critical Process Identification
  • Process Risk Assessment dan Operational Failure Scenarios
  • Business Impact Analysis dan Criticality Assessment
  • Business Continuity Plan dan Recovery Strategy Evaluation
  • Recovery Time Objective, Recovery Point Objective dan Recovery Capability
  • Process Control Effectiveness dan Operational Resilience Testing

Materi 4. Third Party dan Vendor Resilience Audit

Sub Materi:

  • Third Party Risk Assessment dan Vendor Criticality Classification
  • Identification of Critical Outsourcing dan Service Provider Dependencies
  • Vendor Business Continuity dan Disaster Recovery Assessment
  • Service Level Agreement, Performance Monitoring dan Resilience Requirements
  • Third Party Incident Management dan Escalation Mechanism
  • Vendor Exit Strategy dan Alternative Service Arrangement

Materi 5. Incident Management, Crisis Response dan Resilience Testing

Sub Materi:

  • Incident Identification, Classification dan Escalation
  • Incident Response Framework dan Crisis Management
  • Emergency Response dan Cross-Functional Coordination
  • Scenario-Based Operational Resilience Testing
  • Tabletop Exercise, Disaster Recovery Testing dan Recovery Validation
  • Lessons Learned dan Corrective Action Assessment

Materi 6. Advanced Resilience Audit, Reporting dan Continuous Improvement

Sub Materi:

  • Resilience Gap Analysis dan Control Effectiveness Assessment
  • Root Cause Analysis terhadap Operational Disruption
  • Risk Impact Assessment dan Audit Finding Classification
  • Developing Actionable Recommendations untuk Resilience Improvement
  • Executive Audit Reporting dan Resilience Dashboard
  • Follow-Up, Continuous Monitoring dan Operational Resilience Maturity Improvement

Peserta

Divisi Internal Audit

Divisi Operational Risk

Divisi Business Continuity Management (BCM)

Divisi Risk Management

Divisi IT

Divisi Vendor Management

Divisi Operations

Metode

• Pre Test 
• Presentasi Materi 
• Diskusi 
• Studi Kasus 
• Post Test 

Fasilitas


• Training Amenities 
• Peralatan Pelatihan (Tas, Hand Out, Block Note, Pulpen, Watermark) 
• Sertifikat 
• Souvenir 
• 2x Coffee Break, 1x Lunch

Kembali ke Layanan