We conducted a comprehensive EA maturity assessment covering people, processes, governance, and tools. Based on the findings, we designed a future-state EA Operating Model tailored to BTPN Syariah’s unique business context.
We conducted a comprehensive multi-cloud assessment, evaluating technical, operational, security, and regulatory factors. Our team reviewed the bank’s existing cloud architecture, identified key risk areas, and assessed readiness for multi-cloud adoption.
We conduct a thorough review of the bank’s IT governance instruments, including policies, procedures, and control mechanisms. Gaps are identified against leading frameworks such as COBIT, NIST, and ISO 27001, as well as applicable regulatory standards.
Empowering BTPN Syariah to Strengthen Enterprise Architecture Capabilities
BTPN Syariah is a leading Islamic banking institution in Indonesia, committed to promoting financial inclusion and sustainable development. As part of its digital transformation journey, BTPN Syariah recognized the strategic importance of strengthening its Enterprise Architecture (EA) function to align IT initiatives with business goals and ensure long-term operational agility.
Phase 1 – EA Maturity Assessment
Assessed the current state of EA capabilities across People, Process, Tools, and Communication dimensions.
Identified key pain points and maturity gaps.
Delivered targeted recommendations and standardized architecture templates.
Phase 2 - Operationalization
* Implemented key recommendations related to R&R directly into EA governance instruments, e.g., SOPs, KPIs.
* Established standard documents and checklists, e.g., architecture review checklist.
* Created EA Hand-book as guidance for all architect roles within the bank.
Phase 3 – EA Enablement Training
Facilitated an interactive, hands-on training program for 40+ EA stakeholders.
Focused on key topics including Business-IT alignment, EA governance, architecture debt, and frameworks like TOGAF.
Delivered customized materials based on BTPNS’ operating model and architecture maturity.
Values Delivered
Defined a clear and future-ready EA Operating Model.
Improved cross-functional collaboration through clarified EA roles and responsibilities.
Established standardized documentation and templates across all architecture layers.
Enhanced internal EA capabilities through practical training and reusable artifacts.
Strengthened architecture governance and decision-making processes.
Challenge
BTPN Syariah sought to strengthen its Enterprise Architecture (EA) capabilities to better support digital transformation and regulatory compliance. The bank needed a clear understanding of its current EA maturity and a structured roadmap toward a more agile, business-aligned architecture function. Additionally, the EA strategy had to reflect and align with the bank’s mission to deliver inclusive digital financial services responsibly.
Our Approach
KED Consulting conducted a comprehensive EA maturity assessment, covering people, processes, governance, and tools. Through workshops and interviews, we benchmarked current practices against leading EA frameworks and identified key improvement areas across domains.
Based on these insights, we designed a future-state EA Operating Model tailored to BTPN Syariah’s business and regulatory context, ensuring alignment between business strategy, IT initiatives, and Sharia compliance. The engagement also included defining governance structures, decision-making mechanisms, and capability development initiatives to embed EA discipline within the organization.
Outcome
The new Enterprise Architecture Operating Model strengthened the alignment between business and IT, improved decision-making, and enhanced agility in delivering digital initiatives. KED Consulting supported the bank in operationalizing key changes, from clarifying roles and responsibilities to establishing EA governance routines and competency-building programs.
As a result, BTPN Syariah is now better positioned to manage digital growth strategically, ensure regulatory alignment, and drive technology initiatives through a more cohesive and adaptive EA function.
The enablement program delivered by KED Consulting was a turning point in how we manage and implement Enterprise Architecture at BTPN Syariah. The structured approach, hands-on training, and continued support helped us gain clarity, confidence, and consistency in our architecture practices. We’re now better equipped to drive business-IT alignment and support our transformation goals.
Multi-Cloud Assessment
A leading digital bank sought to reduce its operational risk exposure stemming from a single-cloud dependency. The bank needed a clear, actionable strategy to assess the feasibility of adopting a multi-cloud architecture.
Challenge
A leading digital bank sought to reduce its operational risk exposure stemming from reliance on a single cloud provider. While its existing cloud setup supported strong performance and scalability, the leadership team recognized emerging risks related to vendor dependency, compliance obligations, and long-term flexibility.
The bank engaged KED Consulting to conduct an independent risk assessment and feasibility study to determine whether transitioning to a multi-cloud architecture would provide tangible resilience and strategic value — or introduce unnecessary complexity and cost.
Our Approach
KED Consulting performed a multi-cloud feasibility assessment, examining the issue through multiple dimensions — technical, operational, security, and regulatory. Our work included:
Evaluating the current architecture to understand resilience, workload distribution, and existing control effectiveness.
Assessing risk scenarios associated with single-cloud dependency, including outage impact, data residency, and contractual exposure.
Engaging stakeholders from IT, risk, and compliance teams to align on strategic priorities and regulatory expectations.
The study provided an evidence-based view of the bank’s readiness and business case for multi-cloud adoption, including key enablers, gaps, and trade-offs.
Outcome
The assessment delivered a risk-based justification for the bank’s:
A picture of current cloud risk exposure and resilience posture.
Insights across cost, performance, compliance, and operational factors.
A recommendation outlining the conditions under which multi-cloud adoption would be viable, including necessary architectural changes, governance enhancements, and sequencing considerations.
KED Consulting’s assessment equipped the bank with the clarity to make an informed, risk-based decision, enabling a strategic, measured path toward a resilient and compliant multi-cloud future.
IT GRC Review and Rebuild
A digital bank was seeking to strengthen its IT governance, risk, and compliance (GRC) framework to address evolving regulatory requirements and operational risks. Key internal controls required review and alignment with industry best practices and local regulations.
Challenge
A leading digital bank was seeking to strengthen its IT governance, risk, and compliance (GRC) framework to keep pace with evolving regulatory expectations and operational risks.
Over time, the bank’s control environment had become fragmented, with policies and procedures that no longer fully aligned with current best practices or local regulatory requirements.
Leadership needed an objective review of the IT GRC framework to ensure it remained effective, audit-ready, and adaptable to the bank’s digital growth strategy.
Our Approach
KED Consulting performed a comprehensive review of the bank’s IT governance instruments, covering policies, procedures, and control mechanisms. Each component was assessed against leading frameworks such as COBIT, NIST, and ISO 27001, along with relevant OJK and BI regulations.
Our team identified key gaps in control design, accountability, and documentation, and developed targeted recommendations to rebuild the IT GRC framework. The engagement included validation workshops with key stakeholders to ensure practicality and alignment with organizational priorities.
Outcome
KED Consulting delivered a revamped set of IT GRC instruments — clear, actionable, and audit-ready. The enhanced framework improved control effectiveness, strengthened regulatory alignment, and increased organizational awareness of IT risk and compliance.
As a result, the bank is now better positioned to manage IT risks proactively, sustain compliance over time, and support its long-term digital growth under a more resilient governance structure.
Get in touch with us
Interested in working together? We'de love to hear from you!
