BY INDUSTRY
Banking & fintech Test the paths that carry money, and file the evidence.
OJK and PCI-DSS evidence trails
A banking or fintech estate gets read twice: once by us, once by whoever reviews the file afterwards. We scope from the money-carrying paths outward and write every deliverable so both audiences can follow it.
What the engagement looks like. Fixed in writing before it starts.
four steps, in the order they happen · scope and dates are fixed in writing before anything is touched
Scope from the money path
Testing starts at payment flows, core banking integrations and the APIs behind them, then works outward to the internal network and directory that reach them.
Escalate criticals the same day
Anything that puts you at immediate risk is escalated within hours rather than held for report delivery.
Write the evidence file
Executive narrative plus technical appendix, in English and Bahasa Indonesia, with the scope boundary and the evidence laid out for an ISO 27001, PCI-DSS or OJK reviewer.
Retest and attest
Fixes are verified within 14 days and an attestation letter is issued once they hold.
What you get. Files, sessions and letters.
Deliverables, not promises. Every one of them is a file, a session or a letter you can hand to somebody else.
- Every deliverable in English and Bahasa Indonesia
- Same-day escalation for critical findings
- One retest within 14 days, included
- An attestation letter for your auditors
NEXT STEP
Talk directly to an operator. Scope and cost come back in writing.
Tell us what you are trying to prove and to whom. You get a written scope, timeline and fee within 2 working days - and an honest answer if the work you asked for is not the work you need.