The Financial Services Authority (OJK) issued Regulation of the Board of Commissioners Number 1 of 2026 to mandate comprehensive information technology governance and risk management for all commercial banks. The regulation requires banks to establish robust IT governance structures, manage IT risks including data protection, and obtain licensing for IT systems and services located outside Indonesia. This regulation supersedes previous guidelines and becomes effective on March 1, 2026, to ensure IT utilization adds value while mitigating operational risks.