We are delighted to have awarded ISO/IEC 42001 AI management system (AIMS) certification to PT Bank Central Asia Tbk (BCA), making it Indonesia’s first organization and consumer bank to attain the standard.
This certification demonstrates BCA’s ability to establish, implement and continuously improve an AIMS, ensuring that AI technologies are developed and deployed ethically, transparently and securely, and aligned with applicable regulatory and business requirements.
As part of the certification process, we conducted an independent and comprehensive assessment of the bank to verify its conformity with ISO/IEC 42001’s stringent requirements. This assessment comprised two stages of audits and investigated BCA’s governance framework policies, operational controls and risk management practices.
Lianawaty Suwono, Director of BCA, emphasized that the certification reflects the bank’s long-term commitment to responsible innovation:
“Achieving ISO/IEC 42001 further strengthens our commitment to adopting AI technologies in a responsible, ethical and sustainable manner. Every innovation we introduce is not solely focused on technological advancement but is also designed to enhance customer convenience while upholding the principles of transparency, accountability and security.”
ISO/IEC 42001 is the first international standard to address AI governance. It provides a structured framework to manage AI-related risks, ensure accountability and build trust among customers, regulators and other stakeholders.
In addition to ISO/IEC 42001, we have also certified BCA to ISO/IEC 27701, the international standard for privacy information management systems, reinforcing the bank’s commitment to personal data protection and information security.
Lianawaty Suwono highlighted the fact that ISO/IEC 27701 certification goes beyond administrative compliance:
“Achieving ISO/IEC 27701 certification is not merely an administrative milestone, but a clear demonstration of BCA’s commitment to safeguarding customer data and maintaining information security. This is aligned with applicable regulations, including Indonesia’s Personal Data Protection Law (UU PDP) and Bank Indonesia Regulation No. 3 of 2023 on Consumer Protection.”
Mike Bruinsma, Managing Director of SGS in Indonesia, commented on the significance of these achievements for the banking sector:
“These certifications are not merely formal recognitions; they are a testament to BCA’s unwavering commitment to excellence, trust and innovation. By achieving ISO/IEC 42001 and ISO/IEC 27701 certifications, BCA strengthens its position as a pioneer in secure, responsible and customer-centric banking services.”
By issuing these certifications, we reinforce our role in supporting organizations worldwide in the safe, ethical and reliable adoption of AI, while contributing to the development of trust and confidence in emerging technologies across critical industries.
About SGS
SGS is the world’s leading Testing, Inspection and Certification company. We operate a network of over 2,500 laboratories and business facilities across 115 countries, supported by a team of over 100,000 dedicated professionals. With more than 145 years of service excellence, we combine the precision and accuracy that define Swiss companies to help organizations achieve the highest standards of quality, compliance and sustainability.
Our brand promise – when you need to be sure – underscores our commitment to trust, integrity and reliability, enabling businesses to thrive with confidence. We proudly deliver our expert services through the SGS name and a portfolio of trusted specialized brands, including Applied Technical Services, Brightsight, Bluesign and Nutrasource.
SGS is publicly traded on the SIX Swiss Exchange under the ticker symbol SGSN (ISIN CH1256740924, Reuters SGSN.S, Bloomberg SGSN SW).
