Compliance evidence mapped to OJK, Bank Indonesia KKS, ISO 27001, NIST, and PDPA out of the box

Compliance teams at Indonesian financial institutions and government agencies are expected to show examiners exactly how their security awareness program maps to specific regulatory controls, not just that a program exists. Claro's control-coverage engine tracks 35 controls across OJK POJK 11/2022, Bank Indonesia PBI 2/2024 (KKS), ISO 27001:2022, NIST CSF 2.0, and PDPA Indonesia, and continuously scores each one against the campaigns, training assignments, and phishing reports actually running in your tenant, so the mapping is current rather than a document someone updates once a year.

When it's time to produce evidence, Claro generates Claro-branded, bilingual PDF reports server-side using Handlebars and Puppeteer, across five full report types plus a per-campaign summary report, complete with server-rendered SVG charts for bar, line, and donut visualizations that hold up in a board deck. An evidence-package export bundles the PDFs with supporting CSV exports and a README into a single ZIP, and a scheduled report job runs daily at 04:00 WIB so recurring reports are ready in each recipient's chosen locale without anyone requesting them manually.