Rule · OJK · 8 Aug 2024
Registered Financial Technology Innovation Service Providers (ITSK) must submit periodic reports, including monthly and annual reports, and incidental reports regarding changes in business activities, institutional matters, or incidents such as fraud and cyberattacks. Monthly reports are due within 10 working days of the period end and must include a Self-Evaluation Report for March, June, September, and December, as well as an Annual Business Plan for October. Annual reports, comprising the realization of the Annual Business Plan and audited financial statements, are due by April 30 of the following year. Incidental reports must be submitted within five working days of the event, with initial cyberattack notifications required within 24 hours.
To:
Registered Financial Technology Innovation Service Providers, Financial Services Authority, Attn.
COPY
FINANCIAL SERVICES AUTHORITY CIRCULAR LETTER
REPUBLIC OF INDONESIA
NUMBER 7/SEOJK.07/2024
CONCERNING
REPORTING BY REGISTERED FINANCIAL TECHNOLOGY INNOVATION SERVICE PROVIDERS OF THE FINANCIAL SERVICES AUTHORITY
In connection with the implementation of the Financial Services Authority Regulation Number 3 of 2024 concerning the Implementation of Financial Technology Innovation (State Gazette of the Republic of Indonesia Year 2024 Number 5/OJK, Supplement to the State Gazette of the Republic of Indonesia Number 73/OJK), it is necessary to further regulate the implementation provisions regarding reporting by Registered Financial Technology Innovation Service Providers of the Financial Services Authority in the Financial Services Authority Circular Letter as follows:
I. GENERAL PROVISIONS
In this Financial Services Authority Circular Letter, the following terms are meant:
Financial Technology Innovation, hereinafter abbreviated as ITSK, is technology-based innovation that impacts products, activities, services, and business models within the digital financial ecosystem.
Consumer is every person who owns and/or utilizes products and/or services provided by financial sector business actors.
Financial Services Authority Reporting System is an information system used as a means for ITSK Service Providers to submit reports online to the Financial Services Authority.
ITSK Service Provider is every party that implements ITSK.
Registered ITSK Service Provider is an ITSK Service Provider that has registered with the Financial Services Authority.
Self-Evaluation Report is a report on the implementation of self-evaluation by the Registered ITSK Service Provider, intended to complement the supervision mechanism by the Financial Services Authority.
Periodic Report is a report made and submitted by the Registered ITSK Service Provider to the Financial Services Authority within a certain period.
Incidental Report is a report made and submitted by the Registered ITSK Service Provider to the Financial Services Authority at a specific time.
Board of Directors is a company organ authorized and fully responsible for the management of the company for the interests of the company, in accordance with the purpose and objectives of the company and representing the company, both inside and outside of court, in accordance with the provisions of the Articles of Association for companies in the form of a limited liability company or equivalent to the Board of Directors for companies in the form of other legal entities.
Annual Business Plan is a written document describing the business activity plan of the Registered ITSK Service Provider for a period of 1 (one) year, including plans to improve business performance and strategies to realize such plans in accordance with established targets and timeframes, while still paying attention to the fulfillment of risk management and prudence principles.
II. REPORTING BY REGISTERED ITSK SERVICE PROVIDERS
Reports by Registered ITSK Service Providers consist of:
a. Periodic Reports; and b. Incidental Reports.
Registered ITSK Service Providers submit Periodic Reports and Incidental Reports to the Financial Services Authority accurately and completely.
What is meant by:
a. Accurate means in accordance with the actual conditions of the Registered ITSK Service Provider and does not contain incorrect information or facts; and b. Complete means containing all elements of the report and not omitting material information or facts.
Registered ITSK Service Providers appoint a member of the Board of Directors responsible for the preparation and presentation of the Reports of the Registered ITSK Service Provider.
Reports by Registered ITSK Service Providers as referred to in item 1 are signed by the member of the Board of Directors responsible as referred to in item 3.
III. PERIODIC REPORTS
Periodic Reports consist of:
a. Monthly Reports; and b. Annual Reports.
Monthly Reports
a. Registered ITSK Service Providers submit monthly reports as referred to in item 1 letter a in accordance with the format contained in Appendix I Part A, which is an integral part of this Financial Services Authority Circular Letter. b. Monthly reports submitted by Registered ITSK Service Providers as referred to in letter a are submitted no later than 10 (ten) working days after the reporting period ends.
c. If the deadline for submitting monthly reports as referred to in letter b falls on a holiday, the submission deadline is on the first working day following it.
Example:
If the deadline for submitting monthly reports falls on a Saturday, the submission deadline is the first working day, which is Monday of the following week.
d. For monthly reports for the periods of March, June, September, and December, they are accompanied by Self-Evaluation Reports submitted every quarter in accordance with the format contained in Appendix I Part B, which is an integral part of this Financial Services Authority Circular Letter.
Example:
The Self-Evaluation Report for the March 2025 period is submitted together with the monthly report of the Registered ITSK Service Provider for March 2025, no later than April 10, 2025.
e. Self-Evaluation Reports as referred to in letter d are signed by the member of the Board of Directors responsible as referred to in Roman numeral II item 3. f. Self-Evaluation Reports as referred to in letter d must at least cover:
Example:
The Annual Business Plan for the 2025 period is submitted together with the monthly report of the Registered ITSK Service Provider for the October 2024 period, submitted no later than November 10, 2024.
j. Registered ITSK Service Providers submit the Annual Business Plan as referred to in letter i in accordance with the format contained in Appendix I Part C, which is an integral part of this Financial Services Authority Circular Letter. k. The Annual Business Plan as referred to in letter i must at least consist of:
Annual Reports
a. Annual reports as referred to in item 1 letter b consist of:
IV. INCIDENTAL REPORTS
Incidental Reports consist of:
a. reports related to changes in business activities, including changes in products and/or activities related to business models or partnerships; b. reports related to institutional matters, including changes in share ownership, management, office address, articles of association/company regulations;
c. reports related to incidents, including fraud, force majeure, legal disputes, and/or cyberattacks; and/or
d. other reports requested by the Financial Services Authority under certain conditions.
Example:
Reports related to compliance and transaction reports during the pandemic.
Reports related to changes in business activities as referred to in item 1 letter a and reports related to institutional matters as referred to in item 1 letter b must at least contain:
a. a brief description of the change; b. the background of the change; and
c. supporting documents.
Reports related to incidents as referred to in item 1 letter c must at least contain:
a. a brief description of the incident; b. resolution steps taken by the Registered ITSK Service Provider regarding the incident;
c. post-incident prevention follow-up plans; and
d. supporting documents.
In the event of a cyberattack, the Registered ITSK Service Provider submits an initial notification of the cyberattack to the Financial Services Authority no later than 24 (twenty-four) hours after the cyberattack is known by the Registered ITSK Service Provider.
The submission of the initial notification of the cyberattack is directed to the relevant supervisor via electronic means in writing.
Registered ITSK Service Providers submit:
a. Incidental Reports as referred to in item 1 letter a, letter b, and letter c no later than 5 (five) working days since the occurrence of the incident; and b. Incidental Reports as referred to in item 1 letter d no later than the date requested by the Financial Services Authority.
If the deadline for submitting Incidental Reports as referred to in item 6 falls on a holiday, the submission deadline is on the first working day following it.
The preparation and submission of reports related to incidents as referred to in item 1 letter c regarding fraud are conducted in accordance with the procedures and mechanisms of Other Financial Service Institutions as referred to in the Financial Services Authority Regulation regarding the implementation of anti-fraud strategies for financial service institutions.
The preparation and submission of reports related to changes in business activities as referred to in item 1 letter a refer to Appendix III Part A, which is an integral part of this Financial Services Authority Circular Letter.
The preparation and submission of reports related to institutional matters as referred to in item 1 letter b regarding changes in share ownership refer to Appendix III Part B, which is an integral part of this Financial Services Authority Circular Letter.
The preparation and submission of reports related to institutional matters as referred to in item 1 letter b regarding changes in management refer to Appendix III Part C, which is an integral part of this Financial Services Authority Circular Letter.
The preparation and submission of reports related to institutional matters as referred to in item 1 letter b regarding changes in office address refer to Appendix III Part D, which is an integral part of this Financial Services Authority Circular Letter.
The preparation and submission of initial notifications of cyberattacks as referred to in item 4 refer to Appendix III Part E, which is an integral part of this Financial Services Authority Circular Letter.
The preparation and submission of reports related to incidents as referred to in item 1 letter c regarding cyberattacks refer to Appendix III Part F, which is an integral part of this Financial Services Authority Circular Letter.
V. REPORTING MECHANISM
Submission of Periodic Reports and Incidental Reports is conducted online through the Financial Services Authority Reporting System.
In the event that the Financial Services Authority Reporting System as referred to in item 1 is not yet available or experiences technical difficulties, Registered ITSK Service Providers submit reports in the form of electronic documents via email to the address:
a. mailingroomsumitro@ojk.go.id, in the event that the Financial Services Authority Reporting System is not yet available; b. mailingroommrp@ojk.go.id, in the event that the Financial Services Authority Reporting System experiences technical difficulties; or
c. other addresses established by the Financial Services Authority.
Submission of reports in the form of electronic documents via email as referred to in item 2 is directed to:
a. Head of the Department of Supervision of Financial Technology Innovation, Digital Financial Assets and Crypto Assets, in the event that the Financial Services Authority Reporting System is not yet available; or b. Head of the Department of Data and Statistics Management with a copy to the Head of the Department of Supervision of Financial Technology Innovation, Digital Financial Assets and Crypto Assets, in the event that the Financial Services Authority Reporting System experiences technical difficulties.
In the event that the Financial Services Authority email as referred to in item 2 experiences technical difficulties, the submission of reports is submitted to the Financial Services Authority offline by:
a. being handed over directly; or b. being sent through a courier service company.
Submission of reports offline as referred to in item 4 is directed to:
a. Head of the Department of Supervision of Financial Technology Innovation, Digital Financial Assets and Crypto Assets Soemitro Djojohadikusumo Building Jalan Lapangan Banteng Timur 2-4 Jakarta 10710, Indonesia, in the event that the Financial Services Authority Reporting System is not yet available; or b. Head of the Department of Data and Statistics Management Radius Prawiro Tower Building, 14th Floor Bank Indonesia Office Complex Jalan MH. Thamrin Number 2, Central Jakarta, 10350, with a copy to:
Head of the Department of Supervision of Financial Technology Innovation, Digital Financial Assets and Crypto Assets Soemitro Djojohadikusumo Building Jalan Lapangan Banteng Timur 2-4 Jakarta 10710, Indonesia, in the event that the Financial Services Authority Reporting System experiences technical difficulties.
Registered ITSK Service Providers submitting reports through the Financial Services Authority Reporting System as referred to in item 1 must have a report preparer officer who has a user ID and password.
To obtain the user ID and password as referred to in item 6, the board member must submit the registration of the report preparer officer to the Financial Services Authority Reporting System.
Registration as referred to in item 7 is accompanied by a Letter of Request for User ID and Password of the Financial Services Authority Reporting System of the Registered ITSK Service Provider in accordance with the format contained in Appendix IV Part A via email to the address mailingroommrp@ojk.go.id.
In the event that the Registered ITSK Service Provider makes changes to the report preparer officer, the Registered ITSK Service Provider must submit a Letter of Request for Change of Access to the Financial Services Authority Reporting System in accordance with the format contained in Appendix IV Part B via email to the address mailingroommrp@ojk.go.id.
Registered ITSK Service Providers are deemed to have submitted reports with the provisions:
a. submission through the Financial Services Authority Reporting System is proven by an acceptance receipt from the Financial Services Authority Reporting System; b. submission via email is proven by a receipt from the Financial Services Authority email; or
c. offline submission is proven by a receipt from the Financial Services Authority.
VI. CLOSING
This Financial Services Authority Circular Letter comes into force on the date of establishment.
Established in Jakarta on August 8, 2024
HEAD OF EXECUTIVE SUPERVISOR OF FINANCIAL TECHNOLOGY INNOVATION, DIGITAL FINANCIAL ASSETS AND CRYPTO ASSETS FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA,
HASAN FAWZI
s/s
This copy is in accordance with the original
Director of Legal Development
Legal Department
Aat Windradi
APPENDIX I
FINANCIAL SERVICES AUTHORITY CIRCULAR LETTER
REPUBLIC OF INDONESIA
NUMBER 7/SEOJK.07/2024
CONCERNING
REPORTING BY REGISTERED FINANCIAL TECHNOLOGY INNOVATION SERVICE PROVIDERS OF THE FINANCIAL SERVICES AUTHORITY
A. MONTHLY REPORT
ASSETS Amount (Rp)
Current Assets
Cash and Cash Equivalents
*Filled with cash owned by the company and short-term liquid investments Trade Receivables *Filled with the amount of money owed from sales to customers and not yet paid Prepaid Taxes *Filled with the amount of tax payments made by the company before the due date Advances and Prepaid Expenses *Filled with the amount of payments made by the company to other parties before receiving goods, services, or other benefits Current Security Deposits *Filled with funds deposited by the company to other parties as security for a transaction or activity Other Current Assets *Filled to accommodate the remaining value of current assets that cannot be classified into existing current asset categories Total Current Assets Non-Current Assets Net Fixed Assets *Filled with the amount of assets owned by the company and Use Rights Assets for use in business operations for more than one year Net Intangible Assets *Filled with the amount of assets that do not have physical form but have economic value for the company Deferred Tax Assets *Filled with assets representing temporary differences between taxable income according to financial reports and taxable income according to tax laws Advances - Non-Current *Filled with funds deposited by the company to other parties as security for a long-term transaction Other Non-Current Assets *Filled to accommodate the remaining value of non-current assets that cannot be classified into existing non-current asset categories Total Non-Current Assets Total Assets LIABILITIES Amount (Rp) Short-Term Liabilities Trade Payables – Short-Term
Related Party Trade Payables
*Filled with the amount of the company's debt to directors, commissioners, shareholders, and others Third-Party Trade Payables *Filled with the amount of the company's debt to parties related to the business, e.g., users of Financial Service Institutions Short-Term Loans Related Party Loans *Filled with the amount of obligations borrowed by the company from directors, commissioners, shareholders, and others Third-Party Loans *Filled with the amount of obligations borrowed by the company from parties not affiliated with the company, including debts of Service Providers Tax Payables *Filled with the amount of the company's debt to the government for taxes due Unearned Revenue *Filled with the amount of obligations representing money received by the company from customers before goods or services are delivered Short-Term Lease Liabilities *Filled with the amount of the company's debt to other parties for lease payments not yet made Other Short-Term Liabilities *Filled with current obligations representing the company's debt to other parties that cannot be classified into other existing current liability account categories Total Short-Term Liabilities Long-Term Liabilities Trade Payables – Long-Term Related Party Trade Payables *Filled with the amount of the company's debt to directors, commissioners, shareholders, and others with a maturity of more than 1 year from the balance sheet date Third-Party Trade Payables *Filled with the amount of the company's debt to parties related to the business, e.g., users of Financial Service Institutions with a maturity of more than 1 year from the balance sheet date Long-Term Loans Related Party Loans *Filled with the amount of obligations borrowed by the company from directors, commissioners, shareholders, and others with a maturity of more than 1 year from the balance sheet date Third-Party Loans *Filled with the amount of obligations borrowed by the company from parties not affiliated with the company, including debts of Service Providers with a maturity of more than 1 year from the balance sheet date Long-Term Lease Liabilities *Filled with the amount of the company's debt to other parties for lease payments with a maturity of more than 1 year from the balance sheet date Post-Employment Benefit Liabilities *Filled with the company's debt to its employees for benefits to be given in the future after they retire or stop working Other Long-Term Liabilities *Filled with the company's debt to other parties that cannot be classified into other existing long-term liability account categories Total Long-Term Liabilities Total Liabilities EQUITY Amount (Rp) Share Capital *Filled with the amount of capital paid in by shareholders to the company Share Premium *Filled with the positive difference between the share selling price to shareholders and the par value of shares Retained Earnings *Filled with the amount of profits retained in the company and current year profit/(loss) to finance operations and future investments
Other Equity *Filled with the balance of equity accounts that cannot be classified into other existing equity account categories Total Equity OPERATING REVENUE Amount (Rp) Net Revenue *Filled with the amount of the company's net profit during a specific accounting period Total Operating Revenue OPERATING EXPENSES Amount (Rp) Marketing Expenses *Filled with all costs incurred by the company to market its products or services to customers General and Administrative Expenses *Filled with all costs incurred by the company to run its operations generally Salary Expenses *Filled with costs incurred by the company to pay salaries and allowances to its employees Depreciation Expenses *Filled with costs related to the decline in value of the company's fixed assets during a specific accounting period Other Costs
*Filled with the balance of expense accounts that cannot be classified into other existing expense account categories Amount and Expenses Operating Profit/ Gross Profit Non-Operating Income (Expenses) Amount (Rp) Income (Expense) from Financial Assets *Filled with income and expenses arising from the Company's ownership of financial assets Other Non-Operating Income (Expenses) *Filled with all income and expenses not related to the Company's main operational activities Profit (Loss) Before Tax Expense Tax Expense Amount (Rp) Tax Expense *Filled with income tax expense paid or accrued by the company on its profits Net Profit (Loss) for the Current Year Other Comprehensive Income Amount (Rp) Other Comprehensive Income (Expense) *Filled with all components of income and expenses recognized outside of net profit Total Comprehensive Profit (Loss) for the Current Year
2. OTHER INFORMATION
Participant Organizer Profile
Company Name:
Platform/Application Name:
Domain address:
Business Type:
Association:
Registered/Licensed Letter Number
Date of Registered/Licensed Letter
Office Address:
Office Phone Number:
Company Email:
Company Website:
Company Responsible Person Name:
Company Responsible Person Email:
Company Responsible Person Phone Number:
Board of Directors:
Board of Commissioners:
Shareholder Structure
Shareholders:
Name
Number of Shares
Nominal Value
(Rp) % https://jdih.ojk.go.id/
Total
Activity Report
Total transactions (Rp)
Total number of transactions
Total platform consumers
Total platform users
User demographics by region
Operational Report
Partners
Number of LJK Partners
LJK Partner Name
Number of PJTI Partners
PJTI Partner Name and service type
Number of Other Partners
Other Partner Name
Workforce
Total employees
Number of Indonesian Citizens (WNI)
Number of Foreign Citizens (WNA)
Consumer Protection
Number of Consumer approvals for data usage (user consent) Total complaints Total cases handled Total cases unhandled Explanation of unhandled cases Data Security Data Backup Frequency Data Center (DC) Location Disaster Recovery Center (DRC) (Yes/No) Disaster Recovery Center (DRC) Location Explanation regarding Disaster Recovery Center (DRC) https://jdih.ojk.go.id/
IT Risk
Number of cyber attacks
Total Nominal Loss
Explanation regarding Cyber Attacks
Handling efforts
(filled with city name, date, month, and year)
Board of Directors Member …………................
signature
(Full Name)
For the Interest of the Financial Services Authority Note:
https://jdih.ojk.go.id/
B. SELF-EVALUATION REPORT
1. Evaluation of Information and Communication Technology Governance Principles
Filled with an explanation of the evaluation of governance implementation along with supporting documents. Governance Evaluation includes:
a. implementation of duties, responsibilities, and authorities of the Board of Directors; b. implementation of duties, responsibilities, and authorities of the Board of Commissioners;
c. application of anti-fraud strategy;
d. implementation of internal audit; e. guidelines or procedures related to cyber threats; f. checks on data integrity after a cyber attack and/or force majeure; g. routine maintenance of information technology; and h. licenses for the use of software and hardware.
2. Consumer Protection Evaluation
Filled with an explanation of the Consumer Protection evaluation along with supporting documents. Consumer Protection Evaluation includes:
a. implementation of the know-your-customer process; and b. implementation of Consumer complaint handling; and
c. implementation of internal training for Organizers regarding Consumer complaint handling.
3. Evaluation of the Implementation of Education and Socialization to Consumers
Filled with an explanation of the evaluation of the implementation of education and socialization to Consumers along with supporting documents. The evaluation of the implementation of education and socialization to Consumers includes the implementation of education and socialization about products or services to Consumers.
4. Evaluation of Confidentiality of Consumer Data and/or Information, including Data and/or Transaction Information
Filled with an explanation of the evaluation of the confidentiality of Consumer data and/or information along with supporting documents a. Consumer consent; b. type of data encryption used in data management infrastructure;
c. human resource competence in data security;
d. access control including access rights holders; and e. network security on infrastructure used to store Consumer data; https://jdih.ojk.go.id/
5. Evaluation of Risk Management Principles and Prudence Principles
No Risk Profile Risk Name Risk Owner
Inherent Risk Residual Risk
Risk Impact
(1-5)
Likelihood of risk occurrence
(1-5)
Risk Level
(Risk Impact x
Likelihood of occurrence)
Mitigation Plan
Risk
Risk Impact
(1-5)
Likelihood of risk occurrence
(1-5)
Risk Level
(Risk Impact x
Likelihood of occurrence)
1. Strategic
Risk
2. Operational
Risk
3.
Money
Laundering
Risk,
Prevention of
Terrorism
Financing, and
Prevention of
Proliferation
Financing of
Weapons of Mass
Destruction https://jdih.ojk.go.id/
4.
Consumer
Data
Protection
Risk
5.
Risk of
Use of
Third-Party
Services
6. Cyber Risk
Total
Risk Analysis
Filled with a risk analysis explanation
6. Evaluation of Inclusivity and Information Transparency Principles
Filled with an evaluation of inclusivity and information transparency, including the adequacy of product marketing information. Notes:
d. number 4 (high): Impact on Consumers, loss of reputation that will affect consumer trust for a long time, legal violations resulting in significant economic loss impacting the operations of the Registered ITSK Organizer; and e. number 5 (very high): Significant loss for Consumers, complete loss of reputation resulting in bad reputation, serious legal violations; economic loss impacting nationally.
3. Likelihood of risk occurrence is filled with a number, with the following explanation:
a. number 1 (very rare): Very small possibility of occurrence, only occurs 2 (two) or 3 (three) times within 2 (two) years in this company or a company with the same business model; b. number 2 (rare): Small possibility of occurrence, only occurs 2 (two) or 3 (three) times within 2 (two) years in this company or a company with the same business model;
c. number 3 (possible): Risk has occurred in this company more than 3 (three) times in the last 2 (two) years or occurs regularly in a company with the same business model, or is considered to have a reasonable possibility of occurring in the coming years;
d. number 4 (frequent): Risk has occurred more than 7 (seven) times within 2 (two) years in this company or a company with the same business model, or the current situation creates a high possibility that the risk will occur in the coming years; and e. number 5 (very frequent): Risk has occurred 9 (nine) or 10 (ten) times in the last 2 (two) years in this company, or conditions have emerged that are almost certain to occur.
4. Risk level is filled by multiplying the number on risk impact and likelihood of risk occurrence.
5. Risk mitigation plan is filled with the company's plan to mitigate possible risks.
(filled with city name, date, month, and year)
Board of Directors Member …………................
signature
(Full Name)
For the Interest of the Financial Services Authority Note:
https://jdih.ojk.go.id/
C. ANNUAL BUSINESS PLAN
Non-Current Advances
*Filled with funds deposited by the company to other parties as security for a Other Non-Current Assets *Filled to accommodate the remaining value of non-current assets that cannot be classified into categories of non-current assets that already exist Total Non-Current Assets Total Assets LIABILITIES Short-Term Liabilities Trade Payables – Short-Term Related Party Trade Payables *Filled with the amount of company debt to directors, commissioners, shareholders and others Third-Party Trade Payables *Filled with the amount of company debt to parties related to business, for example, LJK service users Short-Term Loans Related Party Loans *Filled with the amount of obligations borrowed by the company from directors, commissioners, shareholders and others Third-Party Loans *Filled with the amount of obligations borrowed by the company from parties not affiliated by the company, including Organizer debt Tax Payables *Filled with the amount of company debt to government for taxes due Unearned Revenue *Filled with the amount of obligations representing money received by the company from customers before goods or services are delivered Short-Term Lease Liabilities *Filled with the amount of company debt to other parties for unpaid lease payments Other Short-Term Liabilities *Filled with current liabilities representing company debt to other parties that cannot be classified into categories of other current liability accounts that already exist Total Short-Term Liabilities Long-Term Liabilities Trade Payables – Long-Term Related Party Trade Payables *Filled with the amount of company debt to directors, commissioners, shareholders and others that mature more than 1 year from the balance sheet date Third-Party Trade Payables *Filled with the amount of company debt to parties related to business, for example, LJK service users that mature more than 1 year from the balance sheet date Long-Term Loans Related Party Loans *Filled with the amount of obligations borrowed by the company from directors, commissioners, shareholders and others that mature more than 1 year from the balance sheet date https://jdih.ojk.go.id/
Third-Party Loans
*Filled with the amount of obligations borrowed by the company from parties not affiliated by the company, including Organizer debt that matures more than 1 year from the balance sheet date Long-Term Lease Liabilities *Filled with the amount of company debt to other parties for lease payments that mature more than 1 year from the balance sheet date Post-Employment Benefit Liabilities *Filled with company debt to employees for benefits that will be provided in the future after they retire or stop working Other Long-Term Liabilities *Filled with company debt to other parties that cannot be classified into categories of other long-term liability accounts that already exist Total Long-Term Liabilities Total Liabilities EQUITY Share Capital *Filled with the amount of capital paid in by shareholders to the company Share Premium *Filled with the positive difference between the share selling price to shareholders and the par value of shares Retained Earnings *Filled with the amount of profit retained in the company and current year profit/(loss) to finance operations and future investments Other Equity *Filled with the balance of equity accounts that cannot be classified into categories of other equity accounts that already exist Total Equity (in millions of rupiah) Positions Actual Oct T-1 Projection Dec T-1 T Dec Mar Jun Sep Dec T+1 Operational Revenue Net Revenue *Filled with the company's net profit during a specific accounting period Total Operational Revenue Operational Expenses Marketing Expenses *Filled with all costs incurred by the company to market its products or services to customers General and Administrative Expenses *Filled with all costs incurred by the company to run its operations generally Salary Expenses *Filled with costs incurred by the company to pay salaries and allowances to employees Depreciation Expenses *Filled with costs related to the decline in value of the company's fixed assets during the period of a specific accounting period Other Costs *Filled with the balance of expense accounts that cannot be classified into categories of other expense accounts that already exist Total Operational Expenses Operating Profit/ Gross Profit Non-Operating Income (Expenses) https://jdih.ojk.go.id/
Income (Expense) from Financial Assets
*Filled with income and expenses arising from the ownership of financial assets by the Company Other Non-Operating Income (Expenses) *Filled with all income and expenses not related to the main operational activities of the Company Profit (Loss) Before Tax Expense Tax Expense Tax Expense *Filled with income tax expense that is paid or accrued by the company on its profits Net Profit (Loss) for the Current Year Other Comprehensive Income Other Comprehensive Income (Expense) Filled with all components of income and expenses recognized outside of net profit Total Comprehensive Profit (Loss) for the Year
3. Capital Change Plan;
The capital change plan is a projection of capital changes for 1 (one) year ahead regarding both capital structure and the amount of capital. Included in the capital change plan is the plan for capital additions from existing shareholders, initial public offering plans, rights issue plans, issuance of debt instruments that are equity-like, and other capital addition plans, as well as an explanation regarding plans for changes or replacement of ownership (if any). Capital Change Plan Format (in millions of rupiah) Component Name Actual Oct T-1 Projection Dec T-1 T Dec Mar Jun Sep Dec T+1 CAPITAL POSITION Shareholders
1.............
2............
3............
Total Paid-in Capital
Others
Filled with capital instruments in the form of shares or others that meet requirements Total *Filled with the name of each shareholder
4. Information System Technology Development Plan
The management information system development plan includes, for example, the development of information technology supporting the information system for management and plans for the development of accounting systems, including the budget allocated for the development plan.
5. Human Resource Plan including Utilization of Foreign Labor
https://jdih.ojk.go.id/
This copy is consistent with the original
Director of Legal Development
Legal Department
Aat Windradi
HR development plans include plans for HR education and training needs, including plans for education and training costs or budgets for employees, Directors, and Commissioners of the Registered ITSK Organizer, as well as plans for the implementation of risk management certification for managers and certain officials. Plans for the utilization of foreign labor are prepared with reference to the following format. Human Resource Plan Format including Utilization of Foreign Labor No. Field of Duty and Position Number of Foreign Workers Duration Name of Mentor Knowledge Transfer Plan Position Job Title Scope
APPENDIX II
CIRCULAR LETTER OF THE FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA NUMBER 7/SEOJK.07/2024 CONCERNING REPORTING BY REGISTERED FINANCIAL TECHNOLOGY INNOVATION SERVICE PROVIDERS REGISTERED WITH THE FINANCIAL SERVICES AUTHORITY https://jdih.ojk.go.id/
This copy is consistent with the original
Director of Legal Development
Legal Department
Aat Windradi
ANNUAL BUSINESS PLAN REALIZATION REPORT a. Explanation regarding the achievement of the Annual Business Plan includes the focus and priority of achieving the Annual Business Plan as well as comparison between the plan and its realization
.............................................................................................................
.............................................................................................................
.............................................................................................................
............
b. Explanation regarding deviations from the realization of the Annual Business Plan, such as causes and obstacles faced
.............................................................................................................
.............................................................................................................
.............................................................................................................
............
c. Follow-up or efforts to be made to improve
the achievement of the realization of the Annual Business Plan
.............................................................................................................
.............................................................................................................
.............................................................................................................
............
Established in Jakarta on August 8, 2024
EXECUTIVE HEAD OF OVERSIGHT OF FINANCIAL SECTOR TECHNOLOGY INNOVATION, DIGITAL FINANCIAL ASSETS AND CRYPTO ASSETS FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA,
HASAN FAWZI signed signed https://jdih.ojk.go.id/
APPENDIX III
CIRCULAR LETTER OF THE FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA NUMBER 7/SEOJK.07/2024 CONCERNING REPORTING BY REGISTERED FINANCIAL TECHNOLOGY INNOVATION SERVICE PROVIDERS REGISTERED WITH THE FINANCIAL SERVICES AUTHORITY https://jdih.ojk.go.id/
A. REPORTS RELATED TO CHANGES IN BUSINESS ACTIVITIES To The Executive Head of Oversight of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets u.p. Head of the Department of Regulation and Licensing of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets Hereby we:
Company Name : .....................................................................
Company Address : .....................................................................
City .....
Province .....
Postal Code .....
Company Website
Address : .....................................................................
Company Address : .....................................................................
Company Email : .....................................................................
submit a report on changes in business activities, attached herewith we submit documents consisting of:
B. REPORTS RELATED TO CORPORATE MATTERS REGARDING CHANGES IN SHARE OWNERSHIP To The Executive Head of Oversight of Financial Sector Technology Innovation, Financial Assets Digital and Crypto Assets u.p. Head of the Department of Regulation and Licensing of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets Hereby we:
Company Name : .....................................................................
Company Address : .....................................................................
report that in accordance with the General Meeting of Shareholders date……………., adjustments to share ownership have been made, with the following change data:
Before Changes After Changes
Name
Shareholder
Total Value of Shares (Rp)
(%) Name
Shareholder
Total Value of Shares (Rp)
(%)
Total 100 Total 100 as a data completeness, attached herewith we submit the articles of association that have been approved by the competent authority to the Financial Services Authority approved, agreed to or notified to the competent authority. We can convey that for this purpose, you can contact Mr./Ms. ..., via email address ... or phone number... This report is submitted and for your attention, Sir/Madam*), we express our gratitude.
.....,............ 20.....
Sincerely,
Board of Directors of PT*
Stamp Duty
Rp.10,000,-
......................................
(Clear Name and Signature)
*) Delete what is not needed https://jdih.ojk.go.id/
C. REPORTS RELATED TO CORPORATE GOVERNANCE REGARDING MANAGEMENT CHANGES
To
The Executive Head of Supervision of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets
Attention: Head of the Department of Regulation and Licensing of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets
Hereby we:
Company Name :
.....................................................................
Company Address :
.....................................................................
report that in accordance with the General Meeting of Shareholders dated……………, management changes have been made, with the change data as follows:
| Before Changes | After Changes |
|---|---|
| Position | Name |
| Board of Directors | …… |
| …… | |
| Commissioners | …… |
| …… |
As supporting data, we hereby submit the Articles of Association that have been approved by the competent authority to the Financial Services Authority, approved by, or notified to the competent authority.
We can be contacted for this matter by contacting Mr./Ms. ..., via email ... or phone number...
This report is submitted, and for your attention, Sir/Madam*), we express our gratitude.
Respectfully,
Board of Directors of PT*
Stamp Duty
Rp.10,000,-
......................................
(Clear Name and Signature)
*) Strike out what is not necessary https://jdih.ojk.go.id/
D. REPORTS RELATED TO CORPORATE GOVERNANCE REGARDING OFFICE ADDRESS CHANGES
To
The Executive Head of Supervision of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets
Attention: Head of the Department of Regulation and Licensing of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets
Hereby we:
Company Name : .....................................................................
Company Address : .....................................................................
City .....
Province .....
Postal Code .....
Company Website Address : .....................................................................
Company Address : .....................................................................
Company Email : .....................................................................
Telephone : .....................................................................
report that our Office has moved to a new address with details as follows:
New Address : .....................................................................
Company Email : .....................................................................
Telephone : .....................................................................
Date of Move : .....................................................................
As supporting data, we hereby submit documents consisting of:
This is our report, and for your attention, Sir/Madam*), we express our gratitude.
Respectfully,
Board of Directors of PT*
Stamp Duty
Rp.10,000,-
......................................
(Clear Name and Signature)
*) Strike out what is not necessary https://jdih.ojk.go.id/
E. INITIAL NOTIFICATION OF CYBER ATTACK
INFORMATION ON REGISTERED ITSK ORGANIZERS
a. Name of Registered ITSK Organizer : .....................
b. Head Office Address : .....................
c. Telephone Number : .....................
d. Contact Person Name : .....................
e. Contact Person Telephone Number : .....................
f. Other Authorities/Institutions
Receiving Notification (if any)
: .....................
1)
GENERAL INFORMATION ON CYBER INCIDENT
a. Date and Time of Cyber Incident: 2)
..../..../.......... (dd/mm/yyyy), ... : .... (hh:mm) b. Date and Time Cyber Incident Was Discovered:
..../..../.......... (dd/mm/yyyy), ... : .... (hh:mm)
c. Type of Cyber Incident : .................. 3)
d. Attack Point : .................. 4) e. Initial Response of Registered ITSK Organizer Post-Cyber Incident : .................. 5) f. Initial Assessment of Cyber Incident Impact on Registered ITSK Organizer : .................. 6)
Notes:
1) Filled with the name of authorities and/or institutions other than the Financial Services Authority that also receive this initial notification report (if any).
2) Filled in case the Registered ITSK Organizer has identified the date and time of the cyber incident.
3) Contains information regarding the type of cyber incident. Examples: malware, hacking, ransomware, web defacement, denial of services (DoS)/distributed denial of services (DDoS).
4) Contains information regarding the name of the system or network that was attacked or experienced disruption.
5) Contains information regarding initial handling actions taken by the Registered ITSK Organizer after the cyber incident was discovered.
6) Filled in case the impact of the cyber incident has been identified (cyber incidents can impact among others the Registered ITSK Organizer's products, third parties, the Registered ITSK Organizer's finances, and the Registered ITSK Organizer's reputation).
https://jdih.ojk.go.id/
F. REPORTS RELATED TO INCIDENTS REGARDING CYBER ATTACKS
REPORTER INFORMATION
Name of Registered ITSK Organizer : .....................
Head Office Address : .....................
Telephone Number : .....................
Contact Person Name : .....................
Contact Person Telephone Number : .....................
Date of Initial Notification Submission :…./…/…/ (dd/mm/yyyy) Authority/Institution Receiving : ..................... 1)
GENERAL INFORMATION ON CYBER ATTACKS 2)
a. Date and Time of Cyber Attack: 3)
…/…./……. (dd/mm/yyyy), ….:… (hh:mm) b. Date and Time Cyber Attack Discovered:
…/…./……. (dd/mm/yyyy), ….:… (hh:mm)
c. Type of Cyber Attack : ..................... 4)
d. Attack Point : ..................... 5) e. Initial Response of Organizer Post-Incident : ..................... 6)
ASSESSMENT OF CYBER ATTACK IMPACT ON REGISTERED ITSK ORGANIZERS 7)
a. Assessment of Cyber Attack Impact on Availability and Operational Services of Registered ITSK Organizer 8)
............................................................................................
b. Assessment of Cyber Attack Impact on Financials of Registered ITSK Organizer 9)
............................................................................................
c. Assessment of Cyber Attack Impact on Reputation
of Registered ITSK Organizer 10)
............................................................................................
d. Assessment of Cyber Attack Impact on Legal and Compliance Aspects of Registered ITSK Organizer 11)
............................................................................................
e. Assessment of Cyber Attack Impact on Third Parties 12).
............................................................................................
f. Other Cyber Attack Impacts That Can Be
Identified by the Registered ITSK Organizer
……………….........................................................................
INCIDENT CHRONOLOGY INFORMATION
a. Duration of the cyber attack. b. Steps taken to escalate the cyber attack.
c. Steps taken to mitigate the cyber attack.
d. Steps taken to recover from the cyber attack. e. Involvement of third parties in mitigation and recovery of the cyber attack. f. Parties receiving information related to the cyber attack (stakeholders, examples: authorities, service partners, and Consumers). https://jdih.ojk.go.id/
g. Supporting information used to identify the cyber attack, if known.
(examples: suspicious IP addresses, unusual network traffic, high authentication failure rates, and repeated file requests).
ANALYSIS OF CAUSES OF CYBER ATTACK
a. Attack Source:
1) Party : ..................... 13)
2) Country of Origin : ..................... 14)
3) Attack Motive : ..................... 15)
b. Incident Causative Factors : ...................... 16)
FINAL ANALYSIS
a. Conclusion b. Improvement steps
c. Target time for cyber attack resolution: (dd/mm/yy)
Notes:
1) Filled with the name of authorities and/or institutions other than the Financial Services Authority that also receive this report (if any).
2) Contains information consistent with information previously submitted in the initial notification, but can be added to or adjusted with additional information if available.
3) Filled in case the Registered ITSK Organizer has identified the date and time of the cyber incident.
4) Contains information regarding the type of cyber incident. Examples: malware, hacking, ransomware, web defacement, denial of services (DoS)/distributed denial of services (DDoS).
5) Contains information regarding the name of the system or network that was attacked or experienced disruption.
6) Contains information regarding initial handling actions taken by the Registered ITSK Organizer after the cyber incident was discovered.
7) In this section, the information provided is additional explanation from the initial assessment already conducted by the Registered ITSK Organizer during the initial notification report of the cyber incident.
8) Filled in case there is an impact on the business of the Registered ITSK Organizer, including in relation to the availability and operational services of the Registered ITSK Organizer. Information must at least contain:
a. type of service and/or name of product affected (examples: treasury services, trade finance, cash management, and digital organization services); and b. explanation of the impact that occurred (if more than 1 (one) service and/or product is affected, the explanation is provided for all affected services and products).
9) Filled in case there is a financial impact from the cyber incident. Information must at least contain:
a. what was affected (examples: value or volume of transactions, withdrawals, and liquidity of the Registered ITSK Organizer); and b. explanation of the impact that occurred (if the incident impacts more than 1 (one) item, the explanation is provided for all impacted items).
10) Filled in case there is an impact on the reputation of the Registered ITSK Organizer from the cyber incident (examples: incident published by media).
11) Filled in case there is an impact on legal and compliance aspects (examples: violations of statutory regulations and legal claims from related parties).
12) Filled in case there is an impact on third parties of the Registered ITSK Organizer. Information must at least contain:
a. category of third party (examples: Consumers, service providers, and service cooperation partners); and b. explanation of the impact that occurred (if the incident impacts more than 1 (one) category of partner, the explanation is provided for all impacted partners). https://jdih.ojk.go.id/
This copy is consistent with the original
Director of Legal Development
Legal Department
Aat Windradi
13) Contains information regarding the party that conducted the attack or became the source of the attack, among others: internal party, external party, or third party (if known).
14) Contains information regarding the country of origin of the attack source (if known).
15) Contains information regarding the motive or purpose of the attack conducted by the perpetrator (if known).
16) Contains a complete explanation of the factors causing the cyber incident at the Registered ITSK Organizer.
17) Contains information regarding steps taken by the Registered ITSK Organizer to prevent similar incidents from occurring in the future.
18) Filled in case the incident has not been fully resolved at the time of submitting the report to the Financial Services Authority.
Determined in Jakarta on August 8, 2024
EXECUTIVE HEAD OF SUPERVISION OF FINANCIAL
SECTOR TECHNOLOGY INNOVATION, DIGITAL
FINANCIAL ASSETS AND CRYPTO ASSETS
FINANCIAL SERVICES AUTHORITY
REPUBLIC OF INDONESIA,
HASAN FAWZI
signed signed https://jdih.ojk.go.id/
APPENDIX IV
CIRCULAR LETTER OF THE FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA NUMBER 7/SEOJK.07/2024 CONCERNING REPORTING BY REGISTERED FINANCIAL TECHNOLOGY INNOVATION SERVICE PROVIDERS REGISTERED WITH THE FINANCIAL SERVICES AUTHORITY https://jdih.ojk.go.id/
A. FORMAT OF LETTER OF REQUEST FOR USER ID AND PASSWORD CODES FOR THE FINANCIAL SERVICES AUTHORITY REPORTING SYSTEM
COMPANY LETTERHEAD
Number :
Date :
Attachments :
Subject : Request for User ID and Password Codes for the Financial Services Authority Reporting System
To
The Financial Services Authority
Attention: Director of Data Reporting
Department of Data and Statistics Management
Radius Prawiro Tower, 14th Floor, Bank Indonesia Office Complex, Jl. MH Thamrin No.2 Central Jakarta 10350
Referring to Circular Letter of the Financial Services Authority Number … concerning Reporting by Registered Financial Sector Technology Innovation Service Providers Registered with the Financial Services Authority, hereby we, on behalf of:
Company : ______________________________________ Status : Registered
request to obtain user ID and password codes for sending Reports by Registered ITSK Organizers as follows:
Name : ______________________________________
Position : ______________________________________ Email : ______________________________________ Telephone : ______________________________________ Taxpayer Identification Number (NPWP) No. : ______________________________________
This request is submitted, and for your attention, Sir/Madam*) we express our gratitude.
Respectfully,
Board Member
( )
*) Strike out what is not necessary https://jdih.ojk.go.id/
B. FORMAT OF LETTER OF REQUEST FOR CHANGES TO FINANCIAL SERVICES AUTHORITY REPORTING SYSTEM ACCESS
COMPANY LETTERHEAD
Number :
Date :
Attachments :
Subject : Request for User ID and Password Codes for the Financial Services Authority Reporting System
To
The Financial Services Authority
Attention: Director of Data Governance and Development Department of Data and Statistics Management Radius Prawiro Tower, 14th Floor, Bank Indonesia Office Complex JL. MH Thamrin No. 2, Central Jakarta, 10350
Referring to Circular Letter of the Financial Services Authority Number … concerning Reporting by Registered Financial Sector Technology Innovation Service Providers Registered with the Financial Services Authority, hereby we, on behalf of:
Company : ______________________________________ Status : Registered
request to:
| Position | Description | Before | After |
|---|---|---|---|
| Board Member | |||
| Responsible Person | |||
| Name | |||
| Position at Registered ITSK Organizer | |||
| Telephone |
Report Preparer
Name
Position at Registered ITSK Organizer https://jdih.ojk.go.id/
This copy is consistent with the original
Director of Legal Development
Legal Department
Aat Windradi
Email
Telephone
This request is submitted, and for your attention, Sir/Madam*) we express our gratitude.
Respectfully,
Board Member
( )
*) Strike out what is not necessary
Determined in Jakarta on August 8, 2024
EXECUTIVE HEAD OF SUPERVISION OF FINANCIAL
SECTOR TECHNOLOGY INNOVATION, DIGITAL
FINANCIAL ASSETS AND CRYPTO ASSETS
FINANCIAL SERVICES AUTHORITY
REPUBLIC OF INDONESIA,
HASAN FAWZI
signed signed https://jdih.ojk.go.id/
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
RegAlert holds no document that amends or replaces this one. This is not a check that it is in force: confirm with the regulator.
“In connection with the implementation of the Financial Services Authority Regulation Number 3 of 2024 concerning the Implementation of Financial Technology Innovation”
More like this from OJK
We email you every new OJK publication the day it's published.
Source: Otoritas Jasa Keuangan (Financial Services Authority) — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated