Making OJK Audits Faster with Proactive RAC Monitoring
Built a daily monitoring report so mismatches in Risk Acceptance Criteria (RAC) get caught early, instead of during the audit itself.
Problem
Every OJK (Financial Services Authority) audit required manually reviewing a full year of historical account data and reconciling it against the Risk Acceptance Criteria (RAC) policy in effect for each approved user
Because this review only happened once a year, at audit time, any drift between actual account conditions and current RAC policy stayed invisible for months before it surfaced
This reactive setup left little room to correct issues before the auditor flagged them, turning audit season into a high-pressure scramble to explain historical gaps
Approach
Designed and built an automated daily report covering every approved user in the portfolio, comparing their current status against the active RAC policy
Structured the report so any mismatch would surface the same day it occurred, rather than being discovered a year later
Made resolving flagged mismatches part of routine daily operations, turning audit readiness into a continuous habit instead of a once-a-year fire drill
Tools
SQL
Result
Last year's OJK audit was the best-prepared cycle to date, with the team able to walk through a full year of RAC history on demand instead of reconstructing it under time pressure
Findings could be explained faster and with more confidence, since the underlying data had already been reconciled daily throughout the year
The number of formal findings dropped compared to previous audit cycles, reflecting fewer unresolved policy mismatches by the time the audit began