Annual Report 2023

With the very large number, size and value of transactions, bank operations are very important and must be maintained even if a disaster occurs. If not handled specifically, the Bank will face risks such as operational risk and reputation risk which will have an impact on reducing the level of customer trust in the Bank. To reduce the impact of disasters or disruptions, careful planning and disaster recovery efforts are needed. BRI’s current strategy to increase the resilience of IT systems to disasters is by having 3 Data Centers that are actively configured to maintain availability when a disaster occurs. This also supports the implementation of service-based Disaster Recovery Planning where the DC configuration uses an active active configuration. Active-Active Data Center (AADC) configuration requires network architecture, storage, networking, computing, and virtualization components as well as application components that work together. The availability and operation of the application in the event of an infrastructure failure in one of the Data Centers is a key factor. The recovery plan is created and prepared well so that it is strengthened by a document that describes the mapping between the current condition of the application and the infrastructure mapping required to fulfill the planned architecture as well as the test implementation plan. which is done consistently. Information Technology Management Structure Digital Directorat and Information Technology Enterprise Data Management Division IT Infrastructure & Operating Division Information Security Division Digital Banking Development & Operation Division Application Management & Operation Division IT Strategy & Governance Division Sub - Directorat Operation In providing the best Information Technology services to support the operational side of the Bank’s business, the Digital Technology and Information (DTI) Directorate has six supporting divisions with special functions, including: • IT Strategy and Governance (ISG): It became the planning and control division, which was tasked with planning IT strategies, managing enterprise architecture, and managing all IT procedures and processes to comply with internal and external policies.. • Application Management & Operation Division (APP): This is the development, enhancing and operating division of all applications at BRI. • Digital Banking Development (DDB): An innovation planning division, which focused on exploring and developing innovations based on the latest technology, this division also developed AI/ML-based innovation and data management. • Enterprise Data Management (EDM): It was an end-to-end data management division, and focused on initiatives related to data security and data privacy. • Infrastructure & Operation (INF): It was a division that focused on the operation of all infrastructure that operates in three data centers. • Information Security (ISC): It was a division that focused on operation information security. PT Bank Rakyat Indonesia (Persero) Tbk. 2023 Annual Report 435 Business Support Functions Overview

RkJQdWJsaXNoZXIy NTM2MDQ5