Strengthen internal controls. Make better business decisions.
Fiducia helps organizations assess internal controls, identify business risks and improve how key processes operate, through practical, risk-based internal audit delivered as a project, alongside your team, or as your outsourced audit function.
Trust, and the duty that comes with it
Fiducia is the root of “fiduciary”: someone trusted to act in the best interest of another. That is how we work for our clients.
Founded in Surabaya in 2024 by governance, risk and compliance professionals from top-tier consulting firms.
Results
Results from Fiducia engagements. Client details are confidential.
Flagship service · Internal Audit
We assess how key business processes operate, identify gaps in internal controls, explain their root causes, and give management prioritized recommendations it can act on.
A growing company may need its first structured audit. An established one may need an independent look at a high-risk process. An audit team may need extra hands. We offer three ways to work together.
An independent, focused review of one process, function, location or risk area, run as a defined project.
Additional capacity or specialist expertise for an internal audit team you already have.
A structured, recurring internal audit service for organizations without a full in-house audit department.
Wider GRC support
Often used alongside internal audit, or as the next step after one.
Why Fiducia
As a firm focused only on governance, risk and compliance, the professionals who scope your engagement are the ones who carry it out.
Industry experience
Experience gained across Fiducia engagements and our team’s earlier careers. Each business is different, so every engagement starts with understanding yours.
How an audit runs
Objectives, operations, prior findings and where things can go wrong.
Agree processes, period, locations and what the audit must answer.
Follow transactions end to end and test key controls against evidence.
Rate each issue by significance and identify why it happened.
Clear recommendations, owners and target dates agreed with management.
Check that agreed actions are implemented and working.
The exact approach depends on the agreed scope, the engagement model and your requirements.
Insights
The KPK named five suspects after a sting operation in mid-October. Investigators allege a conflict of interest in direct-appointment procurement (around Rp148 billion over 2024–2026), with contracts going to vendors linked to an insider, and that part of the funds was used to buy listed shares.
CNBC Indonesia · Indonesia
The new rule replaces POJK 5/2016. Banks must base their business plans on realistic risk calculations and their capital capacity, so the plan works as a management tool rather than an annual formality.
Okezone Economy · Indonesia
In a survey of 3,285 internal audit leaders in 132 countries, cybersecurity (80%), digital disruption including AI (58%) and geopolitical and macroeconomic uncertainty (48%) were the most-cited top risks. The report urges audit teams to move from annual risk rankings to more adaptive assurance.
The IIA – Internal Audit Foundation · International
Tell us what is on your mind: a process you are concerned about, an audit plan you cannot staff, or a function you need to set up. We will suggest a sensible scope.
