IT GRC Advisory & Assurance · Since 2011
Performance & Conformance Excellence
We build the sturdy bridge that helps you achieve your IT Governance, Risk, Compliance and Assurance objectives — managing performance in a way that is suitable, sustainable, and fits your organization model.
Established by internationally certified professionals from multinational corporation backgrounds.
- Years of Experience
- 15+
- Clients Served
- 25+
- Industries Supported
- 8+
- Professional Certifications
- 30+
About Us
A Trusted IT Assurance & GRC Advisory Partner
INDITECH is a privately-owned consulting company providing advisory on IT Governance, Risk, Compliance and Assurance — established in July 2011 by internationally certified professionals.
Since 2011, we have helped organizations from the public and private sectors strengthen the alignment between their business and IT objectives. Our consultants bring hands-on experience from multinational corporation backgrounds, enriched by strategic partners and experts across industries.
Our professionals are registered members of international and local professional associations — giving you extensive insight that benefits your organization in achieving Business and IT objectives with confidence.
Growing and learning are part of our culture. We pursue professional certifications continuously so that every engagement is delivered with current, standards-based knowledge and practical know-how.
Our Vision
To be the most trusted IT Governance, Risk, Compliance and Assurance advisory partner for organizations that demand both performance and conformance.
Our Mission
To deliver practical, standards-based GRC advisory and assurance services that help our clients achieve sustainable business and IT objectives.
Integrity & Independence
Objective findings and honest advice — our assurance work is delivered free from conflict of interest.
Certified Expertise
Internationally certified professionals (CISA, CRISC, CISSP, ISO 27001 LA, and more) keep their knowledge current.
Pragmatic Delivery
Frameworks are a means, not an end. We tailor COBIT, ITIL, ISO/IEC 27001 and NIST to your reality.
Long-Term Partnership
We stay beyond the report — supporting implementation, enablement and capability building.
Leadership & Experts
Backed by a bench of consultants, lead auditors and trainers across industries.
- NS
Nicholas O. Swafford
CEO & Founder
- BP
Brian A. Poindexter
Senior Manager
- ID
Our Consultants
Lead Auditors & Trainers
Certifications We Pursue
A growing list — growing and learning are part of our life, our culture, and what made us who we are today.
Our Services
We Help You Build & Grow With Confidence
Three integrated practices cover the full GRC lifecycle — from strategy and governance design, to independent assurance, to capability building for your people.
Consulting
Design governance that fits your organization
IT Governance & Management
Operating models, decision rights and performance measurement aligned with COBIT and business strategy.
Information Security Management System (ISMS)
ISO/IEC 27001 design, implementation and certification readiness — from gap analysis to surveillance audits.
IT & Security Risk Management
Practical risk assessment, treatment plans and risk registers that executives actually use.
IT Business Continuity & Disaster Recovery
BCM programs, BIA, continuity plans and DR strategies tested against realistic scenarios.
IT Strategic Planning
Roadmaps and portfolio prioritization that connect IT investment to business outcomes.
AI Management System (AIMS)
NEWGovernance and controls for responsible AI adoption, aligned with ISO/IEC 42001.
Assurance
Independent findings you can act on
IT & Security Audit
Risk-based internal audits of IT processes, applications and infrastructure.
Capability & Maturity Assessment
Objective maturity measurement with a prioritized improvement roadmap.
IT Due Diligence
Pre-transaction technology assessment for investors and acquirers.
IT Compliance Checking
Readiness reviews against regulations, contracts and internal policies.
Vulnerability Assessment & Penetration Testing (VAPT)
Systematic discovery and safe exploitation of security weaknesses.
Software Quality Management
Quality gates, testing governance and SDLC control reviews.
Training & Development
Build capability in-house through INDITECH Academy
IT Audit & Assessment
Practical audit methodology, workpapers and reporting skills.
IT Governance with COBIT
Applying COBIT 2019 to design and govern enterprise IT.
ITIL & IT Service Management
Service lifecycle good practices for operations teams.
IT Risk Management
From identification to treatment — risk management as a business skill.
CISA Exam Preparation
Structured preparation with certified practitioners.
CRISC Exam Preparation
Targeted preparation for IT risk-focused professionals.
Why INDITECH
The Sturdy Bridge Between Business and IT Objectives
Internationally Certified
Our consultants hold CISA, CRISC, CISSP, ISO 27001 and COBIT credentials — and maintain them.
Multi-Industry Depth
Banking, telecom, government, manufacturing, healthcare and energy — we speak your context.
Standards-Based, Vendor-Neutral
COBIT, ITIL, ISO/IEC 27001, NIST — independent advice with no product agenda.
From Advisory to Enablement
Consulting, assurance and training under one roof — we don't just advise, we build your capability.
Portfolio
Engagements That Speak for Themselves
A selection of representative engagements across industries. Client names are disclosed only with permission — ask us for references in your sector.
Industries We Support
- Banking & Financial Services
- Telecommunications
- Government & State-Owned Enterprises
- Manufacturing
- Healthcare
- Energy & Utilities
- E-Commerce & Digital Platforms
- Transportation & Logistics
Representative Engagements
ISMS Implementation & ISO/IEC 27001 Certification
Full ISMS design and implementation for a mid-size bank — risk assessment, Statement of Applicability, management review and successful stage 1 & 2 certification audits.
- ISMS
- ISO/IEC 27001
- Risk Assessment
Enterprise IT Audit Program
Risk-based IT audit of core network operations, billing and IT service management — delivering prioritized findings to the board audit committee.
- IT Audit
- ITSM
- Governance
Business Continuity Management Program
End-to-end BCM and IT disaster recovery design — BIA, continuity strategies, plan documentation and tabletop exercises with executive participation.
- BCM
- IT DR
- BIA
Security Vulnerability Assessment & Penetration Testing
VAPT across web platforms and supporting infrastructure, with remediation validation and developer security awareness follow-up.
- VAPT
- Web Security
- Remediation
IT Due Diligence for Acquisition
Pre-transaction technology due diligence covering architecture, licensing, cybersecurity posture and IT cost structure for an investment committee.
- Due Diligence
- M&A
- Cybersecurity
CISA & CRISC Exam Preparation Cohorts
Public and in-house training cohorts preparing auditors and risk professionals for ISACA certification exams — with post-training mentoring.
- Training
- CISA
- CRISC
INDITECH Academy
News, Schedules & Professional Development
INDITECH Academy is our training and development arm — sharing auditor insights, class schedules and GRC knowledge for professionals and organizations.
Registration and payment are handled offline. To reserve a seat or request a class, please contact us directly.
Upcoming Training Schedule
| Course | Duration | Format | Schedule | Action |
|---|---|---|---|---|
| CISA Exam Preparation | 4 days | On-site / Online | On request | Register via Contact Us |
| CRISC Exam Preparation | 4 days | On-site / Online | On request | Register via Contact Us |
| COBIT 2019 — Governance & Implementation | 3 days | On-site | On request | Register via Contact Us |
| ISO/IEC 27001 Lead Implementer | 5 days | On-site / Online | On request | Register via Contact Us |
| IT Risk Management Fundamentals | 2 days | Online | On request | Register via Contact Us |
For Auditors & IT GRC Professionals
Our classes are led by practicing lead auditors and certified trainers — the same consultants who deliver our consulting and assurance engagements. Materials are updated continuously to reflect current standards and exam domains.
Latest News, Insights & Articles
Enhancing Business Resilience through IT Governance
How strong IT governance becomes the foundation for business resilience — decision rights, oversight and measurable performance.
Read moreThe Importance of IT Security Vulnerability Assessment and Penetration Testing
Why periodic VAPT is no longer optional, and how to turn findings into a practical remediation program.
Read moreAchieving Business and IT Objectives with INDITECH
Our approach to bridging business strategy and IT execution through standards-based governance.
Read moreContact Us
Ready to Strengthen Your GRC Posture?
Tell us about your governance, risk, compliance or assurance needs — our consultants will respond within one business day.
Get in Touch
Phone / WhatsApp
+62 882-2480-6845Email
info@inditech.co.idOffice Hours
Monday – Friday, 09:00 – 18:00 WIB