Compliance evidence mapped to OJK, ISO 27001, NIST, and PDPA out of the box

Compliance teams at Indonesian financial institutions and government agencies are expected to show examiners exactly how their security awareness program maps to specific regulatory controls, not just that a program exists. Claro's control-coverage engine tracks 23 controls across OJK POJK 11/2022, ISO 27001:2022, NIST CSF 2.0, and PDPA Indonesia, and continuously scores each one against the campaigns, training assignments, and phishing reports actually running in your tenant, so the mapping is current rather than a document someone updates once a year.

When it's time to produce evidence, Claro generates Claro-branded, bilingual PDF reports server-side using Handlebars and Puppeteer, across four full report types plus a per-campaign summary report, complete with server-rendered SVG charts for bar, line, and donut visualizations that hold up in a board deck. An evidence-package export bundles the PDFs with supporting CSV exports and a README into a single ZIP, and a scheduled report job runs daily at 04:00 WIB so recurring reports are ready in each recipient's chosen locale without anyone requesting them manually.