Indonesia’s transition to a Risk-Based Licensing System (OSS RBA) has changed how businesses operate, especially for foreign investors.
What Is OSS RBA?
Indonesia’s OSS system — short for Online Single Submission — is the country’s main platform for business licensing. Under the Risk-Based Approach (RBA), businesses are assessed based on the risk their operations pose to areas such as health, safety, the environment, and local communities. Depending on the risk level — low, medium, or high — companies must meet different compliance obligations. The OSS system applies to both local and foreign companies and is managed by the Ministry of Investment and related sectoral authorities.
As of August 2024, more than 10 million NIBs (Business Identification Numbers) have been issued through this system, reflecting its central role in Indonesia’s investment environment.
How the Risk-Based Licensing System Ties to Audits
A company’s risk classification directly affects how often it may be audited and how thorough those audits will be. For example, a factory that handles chemicals or a company operating in the healthcare sector will face more regular and detailed checks than a low-risk business like a digital marketing agency. These audits are part of how the government ensures that businesses are following the rules set by their licenses, including operational standards, investment commitments, and safety requirements.
What Triggers an Audit Under OSS RBA
Audits can happen for a few reasons. Sometimes, they are part of a routine schedule. Other times, they are triggered by specific events, such as a business expanding, changing its ownership, or adding new business activities. Discrepancies between your reported business activities and what you’re doing can also prompt an audit. In 2023 and early 2024, more than 3,000 companies were flagged by Indonesian authorities for non-compliance in OSS filings, mostly for failing to report business changes, update investment realization reports, or submit required documents.
What Auditors Typically Examine
Auditors will first check whether your business is operating according to the licenses you hold. They will review your business classification (KBLI codes), check if you’ve reported changes to your operations, and ensure your investment plans are being carried out. For example, if your company is registered with a USD 1 million investment commitment, you will be expected to show proof that the funds have been used as declared, such as equipment purchases or facility development.
MAP Resources Indonesia provides audit readiness support tailored to foreign investors. Contact us today for support.
Auditors may also inspect facilities or request documents related to tax, employment, or environmental practices, depending on your industry.
Preparing for an Audit: Practical Steps
To be ready for an audit, start by making sure all your OSS filings are accurate and up to date. If you have expanded your operations, moved to a new address, or brought in new shareholders, these changes need to be reflected in the OSS system. Your tax records, staffing details, and investment reports should match what’s on file. It is helpful to designate someone in your team — or hire an outside consultant — to regularly check that your business remains compliant.
If you operate in a higher-risk sector, it is worth conducting internal reviews or mock audits to catch any issues early.
Common Pitfalls That Lead to Sanctions
Many businesses run into trouble for simple reasons: operating outside their approved KBLI codes, not updating license information after changing operations, or missing deadlines to report investment progress. For foreign investors, the most common issue is failing to meet capital realization deadlines, which can lead to warnings or temporary license suspension. These patterns continued into 2023 and early 2024, reinforcing the importance of keeping your OSS profile current and consistent.
What to Do If You Are Selected for an Audit
If your business is selected for an audit, start by reviewing your OSS account and making sure your documents are in order. This includes your NIB, business licenses, and any additional approvals or permits tied to your sector. Depending on your industry, you may also need to show that your facilities are in good operational condition and that your team has the right qualifications.
Being cooperative and organized can help minimize penalties. If the audit leads to findings, act quickly to make the necessary corrections and submit any follow-up information within the stated deadline.
After the Audit: Strengthening Your Compliance Framework
After the audit, businesses are usually given a period — often between two to four weeks — to fix any issues. Taking quick action is essential to avoid further consequences.
Over the long term, it’s important to maintain a checklist of regulatory deadlines and train your team to track changes in your operations.
Work With MAP Resources Indonesia
MAP Resources Indonesia can help you stay up to date, avoid penalties, and navigate audits with confidence. Contact us today at info@mapresourcesindonesia.com to ensure your operations are aligned with current regulations.
