CC Guidelines
VI. INFORMATION TECHNOLOGY STEERING COMMITTEE
The Information Technology Steering Committee (ITSC) was established to ensure the implementation of the information technology (IT) system is in line with the BCA’s strategic plans. In addition, the implementation aims to improve the BCA’s competitive advantage through the utilization of appropriate IT functions. The ITSC was established based on the Board of Directors Decree No. 167/
SK/DIR/2022 dated October 7, 2022 concerning Information Technology Steering Committee (ITSC) Structure.
Guideline/Charter
The ITSC carry out the duties and responsibilities in accordance to the Board of Directors’ Decree No.
128/ SK/DIR/2017 dated October 10, 2017 concerning Information Technology Steering Committee Charter and based on Risk Management Basic Policy of Information Technology Use.
The scopes stipulated in the Information Technology Steering Committee Charter are as follows:
• ITSC Mission
• ITSC Main Function
• ITSC Authorities
• ITSC Responsibilities
1. Structure, Membership of ITSC, and Status of Voting Rights
In accordance with the Board of Directors Decree No. 167/SK/DIR/2022 dated October 7, 2022 regarding Information Technology Steering Committee (ITSC) Structure, the Board of Commissioners Decree No. 138/SK/KOM/2022 dated August 15, 2022 regarding Allocation of Board of Directors’ Duties and Responsibilities and The Main Framework Organization of PT Bank Central Asia Tbk, the Board of Directors Decree No. 126/SK/DIR/2022 regarding the revision of the Organizational Structure of the Strategic Information Technology Group (GSIT), and the Board of Directors Decree No. 086/SK/
DIR/2022 regarding the Organizational Structure of the Operation Strategy & Development Group (POL), the structure, membership and status of the voting rights of ITSC are as follows:
Position in the Committee Served By Voting Rights Status
Chairman (concurrently
as member) Deputy President Director (IT & Digital Banking) Reserves voting rights Secretary Head of Enterprise IT Architecture, Data Management &
Service Quality Group No voting rights
Member • Deputy President Director (Business Banking & Operation)1)
• Risk Management Director
• Branch Network Director
• Head of Enterprise Security
• Head of Risk Management
• Head of Compliance
• Executive Vice President (EVP) Strategic Information Technology Group (GSIT)2)
• Strategic Information Technology Group (GSIT) :3)
- Head of Enterprise IT Architecture, Data Management &
Service Quality Group
- Head of Application Management Group - Head of IT Infrastructure & Operations Group - Head of Digital Innovation Solutions Group
• Executive Vice President Operation Strategy &
Development Group (POL)
• Head of Unit for Main IT Users 4)
Reserves voting rights
• Head of Internal Audit No voting rights
Description:
1) Become a mandatory member until October 1, 2022
2) Become a member effectively as of October 1, 2022
2. Main Functions, Authorities, Duties and Responsibilities of ITSC
Main Functions of ITSC
The ITSC has the following main functions:
• Review and recommend IT strategic plans to be in line with the BCA’s business plans.
• Conduct periodic evaluations of IT support for BCA’s business activities.
• Ensure the IT investments provide added value to BCA.
Authorities of ITSC
The ITSC has the following authorities:
• Provide recommendations to the Board of Directors on the IT strategic plans to align with the BCA’s strategic business activities plans.
• Provide recommendations for strategic measures to minimize the risk of BCA’s investment in the IT sector.
• Provide recommendations for investment feasibility in the IT sector that can contribute towards the achievement of BCA’s business objectives.
• Provide recommendations on the formulation of the key IT policies, standards, and procedures.
Duties and Responsibilities of ITSC The ITSC has the following responsibilities:
• Review the IT strategic plans to align with the strategic BCA’s business activities plan.
• Review the effectiveness of strategic measures to minimize the risk of BCA’s investment in the IT sector.
• Review the investment feasibility in the IT sector that can contribute towards the achievement of BCA’s business objectives.
• Review the formulation of the key IT policies, standards, and procedures.
• Monitor and ensure the conformity of the approved IT projects with the IT strategic plans.
• Monitor and ensure the alignment of IT projects implementation with the agreed project plans (project charter).
• Review and ensure the alignment of the IT with the requirement for management information system and the needs for BCA’s business activities.
• Oversee the IT performance and the efforts to improve it
• Monitor the efforts to solve the variety of issues related to IT, which cannot be resolved by user work units and the IT work unit effectively, efficiently, and timely manner.
• Ensure the adequacy and allocation of the resources owned by BCA.
3. Meeting of ITSC
The following are the provisions of the ITSC meetings:
• ITSC meetings are held in accordance with the needs of BCA, at least 4 (four) times per year.
• ITSC meeting can only be held if it is attended by at least 2/3 (two thirds) of the total of invited members and reserves the voting rights.
4. Decision Making
The following are the provisions of the ITSC related to the decision making in the meeting:
• The decision making in relation to the authority utilization of ITSC can only be exercised through a legitimate ITSC meeting.
• The ITSC meeting decision are valid and binding if agreed by at least ½ (one-half) of the total members present and reserves the voting rights plus 1 (one) vote.
5. Frequency of ITSC Meetings in 2022
As of December 31, 2022, the ITSC held 4 (four) meetings with the following details:
Schedule and Frequency of ITSC Meetings in 2022
Position Number of
Meetings Attendance Percentage Deputy President Director (IT & Digital Banking)1) 4 4 100%
Deputy President Director (Business Banking & Operation)2) 2 2 100%
Risk Management Director 4 46) 100%
Branch Network Director 4 46) 100%
Head of Enterprise Security 4 4 100%
Head of Risk Management 4 4 100%
Head of Compliance 4 46) 100%
Executive Vice President (EVP)
Strategic Information Technology Group (GSIT)3) 2 2 100%
Strategic Information Technology Group (GSIT)4): - Head of Data Management and IT Management Group
office
2 2 100%
- Head of IT Architecture and Service Quality Group 2 17) 50%
- Head of Enterprise IT Architecture, Data Management and
Service Quality 2 2 100%
- Head of Application Management Group 4 46) 100%
- Head of IT Infrastructure and Operations Group 4 36) 75%
- Head of Digital Innovation Solutions Group 4 2 50%
Executive Vice President Operation Strategy &
Development Group (POL) 4 36) 75%
Head of Internal Audit5) 4 37) 75%
Description:
1) Chairman, Director in charge of IT
2) Become a member of the committee until October 1, 2022
3) Become a member effectively as of October 1, 2022
4) GSIT has only 1 (one) voting right, represented by EVP IT as of October 1, 2022
5) No Voting Rights.
6) Presence represented 1 time.
7) Presence represented 2 times.
The following are the agenda for ITSC meetings throughout 2022:
No. Date Agenda
1 April 6, 2022 • Budget Plan 2022
• New Data Center (Update)
• Swing Automation
2 July 20, 2022 • Resiliency (Better/Always On) - Automate Recovery Orchestration
• Regulatory - Migration of API BCA to SNAP 3 October 10, 2022 • Always On – Parallel Sysplex Alternative
• Faster Delivery – Development myBCA
• Update Bot in KlikBCA
• Governance, Risk, Compliance – Impact & Opportunity of New OJK Regulation
4 December 21, 2022 GSIT Performance Update 2022
6. Accountability Reporting
Accountability report/realization of ITSC work is submitted through minutes of ITSC meetings with the following provisions:
• ITSC members’ presence in the meeting has fulfilled the quorum.
• The ITSC meeting results must be stated in the minutes of meeting and properly documented.
7. Realization of Work Program in 2022
Throughout 2022, ITSC has implemented work programs including:• Evaluate and supervise the IT initiatives implemented to support the delivery of IT strategic projects, as follows:
a) Construction of a new data center to support BCA’s IT infrastructure requirement in the long term, including a migration strategy to the new data center as well as new aspects that have a positive impact towards the availability of BCA’s services.
b) Swing automation and Automated Recovery Orchestration initiatives, the application of technology and strategies that are suitable for recovery and swing automation processes which aim to improve system availability by speeding up the recovery time and minimizing the risk of human error.
c. SNAP API project to support regulator initiatives regarding the digitalization of Indonesia’s banking system.
• Monitoring the use of the 2022 IT budget.
8. ITSC Work Plan in 2023
ITSC has set a work plan for 2023 as follows:
a. a. Review the IT strategic plans to align with the strategic BCA’s business activities plan.
b. Review the effectiveness of strategic measures to minimize the risk of BCA’s investment in the IT sector.
c. Review the investment feasibility in the IT sector that can contribute towards the achievement of BCA’s business objectives.