{"id":5195,"date":"2026-05-19T08:22:00","date_gmt":"2026-05-19T01:22:00","guid":{"rendered":"https:\/\/audithink.com\/?p=5195"},"modified":"2026-06-15T08:36:43","modified_gmt":"2026-06-15T01:36:43","slug":"bridging-organizational-gaps-integrated-grc","status":"publish","type":"post","link":"https:\/\/audithink.com\/en\/blog\/bridging-organizational-gaps-integrated-grc\/","title":{"rendered":"Bridging Organizational Gaps: Closing Organizational Governance Gaps through Integrated GRC Implementation"},"content":{"rendered":"

Audithink returns with a strategic discussion forum that brings together practitioners and corporate leaders in a space of reflection. On Tuesday, May 19, 2026, Audithink held a Sharing Session on the theme \u201cBridging Organizational Gaps through Implementation of Integrated Governance, Risk Management, and Compliance (GRC)\u201d<\/strong><\/em>. A discussion session that not only discusses theory, but also brings first-hand perspectives from the corporate field.<\/p>\n\n\n\n

The event took place at the PACE Serviced Office Plaza Senayan, Senayan, Central Jakarta, starting at 9:30 a.m. WIB. Supported by Sekawan Media, the forum featured two speakers with strong track records in GRC, as well as an experienced moderator from the finance and auditing industries.<\/p>\n\n\n\n

Present as a speaker at this event was Dr. Setyo Wibowo, CIA, CISA, CFE, CRMA, QIA, CA. A Professional GRC Practitioner & Senior Auditor, as well as a speaker from the conceptual and strategic side of GRC. The corporate perspective was brought directly by Nuzulul Iman, Enterprise Risk Management and Assurance Division Head at PT MRT Jakarta (Perseroda), who shared real experiences in building an integrated GRC ecosystem in one of the largest public transportation companies in Indonesia. This session was moderated by Nur Imroatun S., SE, M.Com., CIA, CISA, CISSP, CGEIT, CRISC, Sr. Manager Internal Audit PT Sarana Multi Infrastruktur.<\/p>\n\n\n\n

Material 1: Strategic Discussion Forum (Dr. Setyo Wibowo)<\/h2>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n

The first presentation was delivered by Dr. Setyo Wibowo, using a data-driven approach and a sharp conceptual framework. The discussion focused on the reality of GRC in most organizations today, and why true integration remains a significant challenge.<\/p>\n\n\n\n

A. GRC Facts: Already Existing, Not Yet Integrated<\/h3>\n\n\n\n

Referring to the OCEG 2025 GRC Maturity Survey, Dr. Setyo emphasized that most organizations already have governance, risk, and compliance activities in place, but only a few have achieved full integration. The biggest challenge isn't the absence of GRC functions, but rather the fragmentation between them.<\/p>\n\n\n\n

The data obtained shows that only around 19.8% of organizations have been operating effectively. fully integrated across silos<\/em>, while the rest still suffer from varying degrees of fragmentation, ranging from process integration with technology gaps, to uneven standardization, to completely siloed operations.<\/p>\n\n\n\n

B. Technology and Information Issues in GRC Maturity<\/h3>\n\n\n\n

Dr. Setyo explained that although many organizations have GRC systems in place, these systems operate separately and create information silos that slow down management decision-making.<\/p>\n\n\n\n

The five main technology and information issues that are commonly encountered include: Technology Integration Gap, Low Data Maturity, Disconnected Reporting, Limited Automation, and Weak Data Accessibility.<\/p>\n\n\n\n

C. Why is Integrated GRC Important?<\/h3>\n\n\n\n

In this section, the resource person maps the contrast between the conditions of organizations that do not have integrated GRC and those that have implemented it comprehensively.<\/p>\n\n\n\n

Without integrated GRC, organizations are vulnerable to: duplication of controls, fragmented reporting, limited visibility across business units, slow response to evolving risks, and ballooning compliance costs. Conversely, with integrated GRC, organizations can enjoy connected organizational visibility<\/em>, cross-functional assurance coordination, faster and risk-based decision-making, and significantly stronger organizational resilience.<\/p>\n\n\n\n

D. What Defines Truly Integrated GRC?<\/h3>\n\n\n\n

Dr. Setyo emphasized that Integrated GRC is not simply a combination of functions or software, but rather a link between organizational decisions, from business objectives to management insights. Five characteristics define true Integrated GRC:<\/p>\n\n\n\n