{"id":6123,"date":"2026-08-31T13:37:23","date_gmt":"2026-08-31T06:37:23","guid":{"rendered":"https:\/\/audithink.com\/?p=6123"},"modified":"2026-09-03T11:22:07","modified_gmt":"2026-09-03T04:22:07","slug":"banking-internal-audit-and-ojk-compliance","status":"publish","type":"post","link":"https:\/\/audithink.com\/en\/blog\/panduan-audit-internal-perbankan\/","title":{"rendered":"A Guide to Banking Internal Audit and OJK Compliance"},"content":{"rendered":"
\"Banking<\/figure>\n\n\n\n

Magnificent<\/p>\n\n\n\n

Banking internal audit plays an important part in maintaining control, managing risk, and making sure the bank operates in line with the applicable rules.<\/p>\n\n\n\n

The nature of the banking business means the audit process calls for a systematic approach. Examinations need to cover credit, operations, technology, compliance, and risk management.<\/p>\n\n\n\n

This article covers bank internal audit, the regulatory framework, examination methodology, and the use of digital systems to support the banking audit process.<\/p>\n\n\n\n

What Is Banking Internal Audit?<\/h2>\n\n\n\n

Banking internal audit is the examination and evaluation of the processes, controls, risk, and governance within a bank.<\/p>\n\n\n\n

The internal audit function gives a bank an objective assessment of how effective its controls are. Examination results then serve as the basis for correcting weaknesses and managing risk.<\/p>\n\n\n\n

Within a bank structure, the internal audit function is generally carried out by the Internal Audit Work Unit (SKAI). Its work needs to observe independence, competence, and the requirements set by the regulator.<\/p>\n\n\n\n

The Difference Between SKAI Audits, External Audits, and OJK Supervision<\/h3>\n\n\n\n

These three functions play different parts in the banking oversight ecosystem. SKAI focuses on internal oversight, while an external audit provides an independent assessment.<\/p>\n\n\n\n

OJK carries out the regulatory and supervisory function over the financial services sector. OJK supervision covers a broader scope than the examinations carried out by SKAI.<\/p>\n\n\n\n

Aspect<\/strong><\/td>SKAI Audit<\/strong><\/td>External Audit<\/strong><\/td>OJK Supervision<\/strong><\/td><\/tr>
Executor<\/td>The bank internal audit unit<\/td>An independent auditor<\/td>OJK<\/td><\/tr>
Focus<\/td>Controls, risk, and internal processes<\/td>The information or reports being audited<\/td>Bank compliance and soundness<\/td><\/tr>
Purpose<\/td>Give assurance<\/em> and recommendations<\/td>Provides an independent opinion or assessment<\/td>Ensures the banking sector operates in line with the rules<\/td><\/tr>
Position<\/td>Part of the bank structure<\/td>An external party<\/td>The regulator<\/td><\/tr>
Results<\/td>Internal audit report<\/td>An auditor report or opinion<\/td>Supervision results and follow-up<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

The Regulatory and Compliance Framework for Bank Audits<\/h2>\n\n\n\n

Banking internal audit is carried out in a complex regulatory environment. A bank needs to observe the requirements set by the regulator, professional standards, and the relevant internal policies.<\/p>\n\n\n\n

The regulatory framework is the reference for setting the scope of oversight and control. Complying with those requirements is also an important part of managing bank risk.<\/p>\n\n\n\n

OJK and Bank Indonesia Standards and the Basel Committee<\/em><\/h3>\n\n\n\n

OJK issues a range of requirements on governance, risk management, and the banking internal audit function. Banks also need to observe the Bank Indonesia regulations that still apply.<\/p>\n\n\n\n

At the international level, the Basel Committee on Banking Supervision<\/em> issues principles and guidance on banking supervision and governance.<\/p>\n\n\n\n

How regulations are applied needs to be matched to the requirements that apply to each bank. Regulatory changes also need tracking so that internal policies and procedures stay relevant.<\/p>\n\n\n\n

The Flow and Methodology of a Bank Internal Audit<\/h2>\n\n\n\n
\"Banking<\/figure>\n\n\n\n

Magnificent<\/p>\n\n\n\n

A bank internal audit runs from planning, gathering evidence, and testing through to evaluating findings, reporting, and follow-up.<\/p>\n\n\n\n

The examination methodology is matched to the risk profile and activities of the bank. Auditors can draw on document review, interviews, observation, data analysis, and sampling<\/em>.<\/p>\n\n\n\n

That approach helps auditors build a picture of how effective the controls are. The test results are then used to formulate findings and recommendations for improvement.<\/p>\n\n\n\n

Risk-Based Planning and Drafting the PKAT<\/h3>\n\n\n\n

Risk-based audit planning (risk-based audit<\/a><\/em>) prioritizes the areas carrying a higher level of risk. This approach helps put audit resources to more effective use.<\/p>\n\n\n\n

SKAI can draft an Annual Audit Work Program (PKAT) based on the risk profile and examination priorities. The PKAT can cover the audit objects, scope, schedule, and resources.<\/p>\n\n\n\n

Planning also needs to account for changes in the business, regulations, technology, and the results of previous audits. That information helps identify the areas needing more attention.<\/p>\n\n\n\n

Testing Sample<\/em> Credit, Cash, and Branch Operations<\/h3>\n\n\n\n

Testing sample<\/em> is used to obtain evidence from part of the population under examination. Sample selection needs to account for the audit objective, the risk, and the characteristics of the data.<\/p>\n\n\n\n

On credit activity, auditors can review application, approval, disbursement, and repayment documents along with adherence to procedure. Cash examinations can cover balances and transactions.<\/p>\n\n\n\n

For branch operations, testing can cover the service process, administration, transaction controls, and how procedures are applied. The test results become the basis for evaluating controls.<\/p>\n\n\n\n

Components and Tools<\/em> Bank Financial Audit Software<\/h2>\n\n\n\n

Bank financial audit software helps manage the examination process digitally. The system can cover audit planning, evidence management, working papers, findings, and reports.<\/p>\n\n\n\n

The components worth paying attention to include:<\/p>\n\n\n\n