Bank Mandiri conducts regular audits on all information
security activities and critical business processes, including customer protection,
data privacy, and fraud management, in accordance with internal and regulatory
provisions. The bank conducts internal audits once a year and external audits by
reputable independent external parties once a year.
Bank Mandiri has fulfilled its risk management obligations and information system
security standards by implementing periodic information system audits by external
auditors, as follows:
- On December 30, 2022, an independent external information system auditor completed the information system audit and security testing for payment systems, including the Card Management System (CMS), Visa Electron (VE), Base24 (ATM), and SMS Banking (SMS Type & USSD). The report on the results of the information system audit and security testing was submitted to Bank Indonesia in hardcopy format on January 9, 2023;
- Subsequently, from August to December 2023, an independent external information system auditor conducted an audit of the information system and security testing for Mandiri Cash Management (MCM), New MCM, Mandiri Internet Business (MIB), Mass Prepaid System (MPS), and Integrated Card System (ICS). The report on the results of the information system audit and security testing was submitted to Bank Indonesia on December 21, 2023.