Analisis Risiko Audit dan Strategi Mitigasinya dalam Menghadapi Perubahan Lingkungan Bisnis pada Sektor Perbankan
DOI:
https://doi.org/10.61132/menawan.v4i3.2384Keywords:
Banking Sector, Cybersecurity, Digital Transformation, Risk Management, Risk-Based AuditingAbstract
Changes in the business environment of the banking sector during the 2020–2025 period have created new challenges for audit activities. The COVID-19 pandemic, accelerated digital transformation, the development of financial technology (fintech), cybersecurity threats, and regulatory changes have significantly altered the banking risk profile. These conditions require auditors to adopt a more adaptive Risk-Based Auditing (RBA) approach in identifying, assessing, and managing risks. This study aims to analyze the impact of changes in the business environment on audit risk, identify the challenges faced by auditors, and formulate effective mitigation strategies in the banking sector. The study employs a qualitative approach using a synthetic case study method based on secondary data derived from banks’ annual reports, regulatory publications, industry reports, and academic literature from 2020–2025. The findings indicate that changes in the business environment have increased the complexity of audit risks, particularly those related to technology-based operational risks, compliance risks, strategic risks, and cybersecurity risks. The main challenges faced by auditors include the increasing velocity of risk changes, gaps in information technology competencies, the complexity of digital data management, and the limitations of conventional audit methods. Therefore, the utilization of audit technology, enhancement of auditor competencies, integration of audit and risk management functions, and the implementation of continuous auditing are essential strategies for improving the effectiveness of Risk-Based Auditing.
Downloads
References
Alles, M. G., & Vasarhelyi, M. A. (2015). Continuous auditing and monitoring: Bringing assurance into the 21st century. New York: Emerald Publishing.
Arens, A. A., Elder, R. J., & Beasley, M. S. (2020). Auditing and assurance services: An integrated approach (17th ed.). Boston: Pearson Education.
Bank Indonesia. (2023). Laporan perekonomian Indonesia tahun 2023. Jakarta: Bank Indonesia.
Bank Indonesia. (2024). Laporan stabilitas sistem keuangan Indonesia. Jakarta: Bank Indonesia.
Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2017). Enterprise risk management: Integrating with strategy and performance. New York: COSO.
Deloitte. (2023). Banking and capital markets outlook 2023. New York: Deloitte Insights.
Fraser, J. R. S., & Simkins, B. J. (2016). The handbook of enterprise risk management: Implementing enterprise risk management. Hoboken: John Wiley & Sons.
Hall, J. A. (2019). Accounting information systems (10th ed.). Boston: Cengage Learning.
Ikatan Akuntan Indonesia. (2022). Pernyataan Standar Akuntansi Keuangan (PSAK) 71: Instrumen Keuangan. Jakarta: Ikatan Akuntan Indonesia.
Institute of Internal Auditors (IIA). (2017). International professional practices framework (IPPF). Altamonte Springs, FL: The Institute of Internal Auditors.
Institute of Internal Auditors (IIA). (2024). Global internal audit standards. Altamonte Springs, FL: The Institute of Internal Auditors.
Kurniawan, A. (2015). Audit internal: Nilai tambah bagi organisasi. Yogyakarta: BPFE.
Laudon, K. C., & Laudon, J. P. (2021). Management information systems: Managing the digital firm (17th ed.). Harlow: Pearson Education.
Mulyadi. (2017). Auditing (6th ed.). Jakarta: Salemba Empat.
Otoritas Jasa Keuangan. (2021). Cetak biru transformasi digital perbankan Indonesia. Jakarta: Otoritas Jasa Keuangan.
Otoritas Jasa Keuangan. (2022). Peraturan Otoritas Jasa Keuangan Nomor 11/POJK.03/2022 tentang penyelenggaraan teknologi informasi oleh bank umum. Jakarta: Otoritas Jasa Keuangan.
Otoritas Jasa Keuangan. (2023). Laporan profil industri perbankan Indonesia. Jakarta: Otoritas Jasa Keuangan.
Otoritas Jasa Keuangan. (2024). Laporan perkembangan sektor jasa keuangan Indonesia. Jakarta: Otoritas Jasa Keuangan.
Peraturan Otoritas Jasa Keuangan Nomor 11/POJK.03/2022 tentang Penyelenggaraan Teknologi Informasi oleh Bank Umum.
Peraturan Otoritas Jasa Keuangan Nomor 18/POJK.03/2016 tentang Penerapan Manajemen Risiko bagi Bank Umum.
Pickett, K. H. S. (2010). The essential handbook of internal auditing. Chichester: John Wiley & Sons.
PricewaterhouseCoopers (PwC). (2023). Global risk survey 2023: Risk perspectives in financial services. London: PwC.
Sawyer, L. B., Dittenhofer, M. A., & Scheiner, J. H. (2019). Sawyer's internal auditing (7th ed.). Florida: The Institute of Internal Auditors Research Foundation.
Surat Edaran Otoritas Jasa Keuangan tentang Penilaian Tingkat Kesehatan Bank Umum dengan Pendekatan Risiko (Risk Based Bank Rating).
Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi. Lembaran Negara Republik Indonesia Tahun 2022 Nomor 196.
Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi.
Undang-Undang Nomor 4 Tahun 2023 tentang Pengembangan dan Penguatan Sektor Keuangan.
Undang-Undang Nomor 7 Tahun 1992 tentang Perbankan sebagaimana telah diubah dengan Undang-Undang Nomor 10 Tahun 1998 tentang Perbankan.
Wollard, M. A. (2015). Risk-based auditing. New York: Internal Audit Foundation.
World Economic Forum. (2024). Global cyber security outlook 2024. Geneva: World Economic Forum.
Yaya, R., Martawireja, A. E., & Abdurahim, A. (2021). Akuntansi perbankan. Jakarta: Salemba Empat.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 MENAWAN : Jurnal Riset dan Publikasi Ilmu Ekonomi
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
