Indonesia continues to attract foreign investors with its large consumer market, abundant resources, and strategic location in Southeast Asia. However, doing business in Indonesia also comes with unique regulatory and operational challenges. Internal audits are a critical function for any company operating in this environment, particularly for foreign-owned entities.
An effective internal audit function helps ensure compliance with Indonesian laws, prevents fraud and corruption, and supports transparent financial reporting. For foreign investors unfamiliar with the local regulatory system, internal audits act as a safeguard—detecting early warning signs and supporting risk management strategies tailored to the Indonesian business landscape.
Navigating Indonesia’s Regulatory Landscape
The Indonesian regulatory environment is governed by multiple bodies, including the Ministry of Investment (BKPM), the Directorate General of Taxes (DGT), the Financial Services Authority (OJK), and the Audit Board of Indonesia (BPK). While internal audits are not always legally mandated, they are considered best practice—especially in sectors such as finance, insurance, natural resources, and any industry involving government partnerships or licenses.
Audit Requirements Across Business Structures
PT PMA and Internal Audit Obligations
Foreign-owned limited liability companies (PT PMAs) are expected to implement good corporate governance practices, which include internal audits, especially if they have multiple departments, handle significant transactions, or are part of a multinational group.
Joint Ventures and Governance Standards
In joint ventures between foreign and local partners, internal audits help bridge differences in management styles and ensure both parties are aligned on financial practices and operational controls.
Representative Offices and Audit Relevance
While representative offices do not generate revenue and are not subject to the same level of financial scrutiny, they still benefit from periodic internal audits to ensure regulatory compliance and appropriate use of funds, especially when dealing with expatriate employment or licensing renewals.
Industry-Specific Audit Expectations
Certain sectors—like banking, mining, healthcare, and logistics—often require more frequent and in-depth internal audits. These requirements may stem from industry regulations, licensing bodies, or parent company policies.
Public Companies and Mandatory Internal Audit Units
For publicly listed companies in Indonesia, internal audits are a regulatory requirement. The Financial Services Authority (OJK) mandates all listed companies to establish an internal audit unit and appoint a Head of Internal Audit, who must report to the Audit Committee and be approved by the Board of Commissioners.
The internal audit function must follow OJK Regulation No. IX.I.7 and prepare a charter that outlines the scope, authority, and responsibilities of the unit. This framework aligns closely with global best practices and is subject to regular oversight by OJK.
Setting Up an Effective Internal Audit Function
Organizational Positioning and Independence
The internal audit team should report directly to the board or audit committee to maintain objectivity. In some cases, especially in small to mid-sized companies, internal auditors may report to the CEO or CFO, but this can limit audit independence.
Staffing and Local Talent
Hiring experienced local auditors is essential. Internal audit professionals should understand Indonesian tax laws, labor regulations, and business culture. If expertise is not available in-house, co-sourcing or outsourcing the internal audit function is a common solution.
Budgeting for Internal Audit Activities
Budget allocations should account for tools, travel (for site visits across provinces), data analytics software, and continuous training. Resource planning also includes translation costs for bilingual reporting and regulatory updates.
Common Risk Areas That Demand Attention
Internal audits should focus on key risk areas that frequently affect foreign-owned companies in Indonesia:
- Tax Compliance: Timely and accurate tax reporting, withholding and VAT documentation, and readiness for tax audits.
- Anti-Corruption Measures: Procurement controls, vendor vetting, and adherence to anti-bribery regulations.
- Labor Law Compliance: Employment contracts, wage practices, foreign worker permits, and severance procedures.
- Transfer Pricing: Documentation for related party transactions and adherence to arm’s-length pricing rules.
- Foreign Exchange and Banking Regulations: Cross-border payments, currency controls, and BI/OJK compliance.
Tailoring Audit Methodologies to the Indonesian Context
Risk-Based Approach with Local Adjustments
A risk-based internal audit approach works well in Indonesia, but it must consider region-specific risks such as inconsistent enforcement and informal practices.
Documentation and Language Needs
Expect to work with documents in Bahasa, Indonesia. Auditors must be capable of translating and interpreting records for compliance.
Combining On-Site and Remote Audits
While remote audits may save time, site visits remain important—especially in rural areas where paper-based documentation is still common.
Collecting Reliable Evidence
Auditors must be flexible and resourceful, often needing to triangulate multiple sources of evidence to validate findings.
Work With Our Audit Advisors at MAP Resources Indonesia
Conducting internal audits in Indonesia requires more than just technical knowledge—it demands local insight, cultural understanding, and a strategic mindset. At MAP Resources Indonesia, we help foreign investors build and implement strong internal audit systems that align with Indonesian regulations and global best practices.
Contact us today at info@mapresourcesindonesia.com to discuss how we can support your internal audit needs and ensure sustainable compliance in Indonesia.
