PERURI’s five-star GRC recognition highlights how governance, risk management and security are becoming central to Indonesia’s digital government transformation.
JAKARTA — The expansion of digital government across Asia is creating a policy challenge that goes beyond technology adoption. As public services become increasingly digital, governments and their technology partners must also strengthen governance, risk management, information security and accountability.
Indonesia’s PERURI offers one example of how these considerations are being incorporated into a broader digital transformation agenda. The company retained a five-star rating at the TOP GRC Awards 2026 and received the Golden Trophy for maintaining the highest rating over several years. The award was presented at Hotel Raffles Jakarta on 9 September 2026.
At the same event, Farah Fitria Rahmayanti, PERURI’s Director of Technology, Information and Risk Management, received The Most Committed GRC Leader 2026 award. The recognition comes as the company continues to strengthen governance, risk management and compliance as part of its corporate strategy.
Governance as Part of Digital Policy
PERURI says GRC is not limited to regulatory compliance. The company positions governance, risk management and compliance as elements of decision-making, business resilience and the sustainability of its transformation.
This distinction is important for digital government. Public-sector digitalisation often requires institutions to move quickly, but speed must be balanced with accountability and protection of information. A digital service can only operate sustainably when the systems surrounding it are capable of managing operational, security and compliance risks.
PERURI is currently assigned a role as GovTech Indonesia. In that capacity, the company is expected to work in an agile, flexible and dynamic manner to support the acceleration of national digital public services.
The policy challenge is therefore not simply to digitise existing services. It is also to establish governance mechanisms that allow digital services to expand while maintaining appropriate safeguards.
Security Built into Service Development
PERURI says it applies a Security and Privacy by Design approach in developing services. It also integrates system-based risk management into its operations.
The approach places security and privacy considerations within the development process rather than treating them only as controls after a service has been completed. For government-related digital infrastructure, this can be significant because weaknesses in digital systems may affect not only an individual organisation but also citizens and interconnected public services.
Farah said PERURI continues to strengthen GRC so that it becomes more integrated with corporate strategy and business processes. She described GRC as part of the foundation for decision-making and strategy as technology develops and risk dynamics become increasingly complex.
The company’s position reflects a broader governance question facing digital economies: how should institutions balance innovation with risk management without slowing the delivery of services?
A Regional Governance Perspective
Across Asia, digital government programmes are increasingly focused on interoperability, digital identity, trusted transactions, cybersecurity and integrated public services. These developments increase the importance of governance frameworks that can operate across institutional and technological boundaries.
Indonesia’s digital transformation agenda places PERURI within this environment through its role in GovTech. The company has also described its broader transformation as a move toward becoming a high-security technology company, making governance and risk management increasingly relevant to its business model.
Earlier in 2026, PERURI reported several developments related to digital transformation. These included recognition for digital innovation, modernisation of internal processes and the development of security-oriented digital solutions. The company has also highlighted cybersecurity infrastructure, digital identity and document-verification capabilities as components of its technology development.
These developments illustrate that digital transformation is becoming a multidimensional process. Technology is one component, while governance, organisational capability, security and regulatory alignment form other parts of the same ecosystem.
Consistency and Institutionalisation
PERURI’s 2026 GRC recognition also relates to consistency. The company previously received a five-star TOP GRC rating and The Most Committed GRC Leader recognition in 2024 and 2025. Its 2026 achievement continues that record.
For public-sector digital transformation, consistency matters because governance cannot be treated as a one-time programme. Risk profiles change as technology, regulations, suppliers, users and service architectures evolve.
PERURI says its continued GRC efforts are intended to ensure that business strategies and decisions take into account risk, compliance, accountability and sustainability.
This places governance within a longer institutional process. Digital transformation may produce visible technological changes, but the underlying governance architecture often determines how securely and sustainably those changes can be maintained.
Implications for Digital Government
The PERURI case highlights an issue that is increasingly relevant to policymakers and technology organisations across Asia: digital government requires more than infrastructure and applications. It requires trusted institutional arrangements capable of managing risk while enabling innovation.
The integration of Security and Privacy by Design into service development represents one approach to this challenge. Likewise, embedding risk management into business systems can help ensure that risk considerations are incorporated into organisational decisions rather than handled separately.
For Indonesia, the challenge will continue to evolve as public services become more interconnected and digital platforms take on broader roles. For the wider Asian region, the same issue is likely to remain relevant as governments pursue faster, more integrated and increasingly data-driven public services.
PERURI’s continued recognition in the TOP GRC Awards provides a documented example of an organisation seeking to align governance with technological transformation. Its experience illustrates how governance, risk management, compliance and digital innovation can be treated as interconnected elements of a broader digital-government agenda.
