Pilar 04 dari 06Pillar 04 of 06

Tata kelola yang menyatu dengan operasional — bukan beban administratif.Governance embedded in operations — not administrative overhead.

Banyak organisasi memiliki dokumen GRC yang tebal — namun tetap rentan terhadap risiko operasional. Liceo Global membangun kerangka governance, risk, dan compliance sebagai sistem terintegrasi: kebijakan terhubung ke prosedur, prosedur terhubung ke kontrol, kontrol terhubung ke jejak audit yang dapat diverifikasi. Setiap engagement kami berorientasi pada satu pertanyaan: apakah organisasi Anda siap diaudit kapanpun, tanpa persiapan khusus? Many organizations have thick GRC binders — yet remain vulnerable to operational risk. Liceo Global builds governance, risk, and compliance frameworks as integrated systems: policies linked to procedures, procedures linked to controls, controls linked to verifiable audit trails. Every engagement asks one question: can your organization be audited at any time, without special preparation?

Corporate Governance & ERMCorporate Governance & ERM

Penyusunan kerangka tata kelola perusahaan (board charter, komite-komite, kode etik) dan sistem Enterprise Risk Management berbasis ISO 31000 atau COSO ERM. Termasuk pelatihan dewan dan eksekutif tentang tata kelola modern. Setting up corporate governance frameworks (board charter, committees, code of conduct) and Enterprise Risk Management systems anchored to ISO 31000 or COSO ERM. Includes board and executive training on modern governance.

Board charter & komite tata kelolaBoard charter & governance committees
Risk appetite statement & risk registerRisk appetite statement & risk register
Pelaporan risiko kuartalan ke boardQuarterly board risk reporting
Latihan krisis & escalation matrixCrisis drills & escalation matrices

Internal Audit & SOX-EquivalentInternal Audit & SOX-Equivalent

Pendirian fungsi audit internal independen, penyusunan audit universe, perencanaan audit berbasis risiko, dan eksekusi audit operasional, keuangan, kepatuhan, serta IT. Kami juga mendukung penyusunan ICOFR untuk emiten dan calon emiten. Establishing independent internal audit functions, building audit universes, risk-based audit planning, and executing operational, financial, compliance, and IT audits. We also support ICOFR development for listed companies and IPO candidates.

Pendirian fungsi & audit universeFunction establishment & audit universe
Audit operasional, keuangan, IT, kepatuhanOperational, financial, IT, compliance audits
ICOFR (Internal Control over Financial Reporting)ICOFR setup & ongoing assessments
Quality Assurance & Improvement Program (QAIP)Quality Assurance & Improvement Program (QAIP)

Kepatuhan Regulasi SektoralSector Regulatory Compliance

Pendampingan kepatuhan terhadap regulasi sektor finansial (OJK, BI), pertambangan (ESDM), lingkungan (KLHK), kesehatan (BPOM, Kementerian Kesehatan), telekomunikasi (Komdigi), dan perlindungan data pribadi (UU PDP). Compliance support across financial sector regulations (OJK, BI), mining (ESDM), environmental (KLHK), health (BPOM, MoH), telecom (Komdigi), and personal data protection (PDP Law).

Compliance gap assessment & remediationCompliance gap assessment & remediation
Pelatihan dan sertifikasi tim internalInternal team training and certification
Pemantauan perubahan regulasi (regulatory horizon)Regulatory horizon monitoring
Persiapan inspeksi & investigasi regulatorRegulator inspection & investigation prep

Anti-Fraud & WhistleblowingAnti-Fraud & Whistleblowing

Membangun program anti-fraud lengkap: kebijakan, kanal pelaporan whistleblowing yang aman, investigasi forensik bila diperlukan, dan budaya etika yang dipraktikkan dari ruang rapat hingga ruang produksi. Building complete anti-fraud programs: policies, secure whistleblowing channels, forensic investigations when needed, and an ethics culture practiced from boardroom to shop floor.

Kebijakan & program anti-fraudAnti-fraud policy & program
Kanal whistleblowing & perlindungan pelaporWhistleblowing channel & whistleblower protection
Investigasi forensik & e-discoveryForensic investigation & e-discovery
Budaya etika & integrity trainingEthics culture & integrity training

Kerangka & Standar yang Kami TerapkanFrameworks & Standards We Apply

Acuan internasional, kontekstualisasi lokal.International references, locally contextualized.

COSO ERM

Risk Framework

ISO 31000

Risk Management

COBIT 2019

IT Governance

ISO 37001

Anti-bribery

ISO 37301

Compliance Management

NIST CSF

Cyber Risk

POJK & SE OJK

Sektor Finansial

UU PDP

Data Pribadi