Dandalina Dandalina
DANA Indonesia, Senior Technical Risk
Jakarta, Indonesia
Actions
Information Security and Technology Risk Leader with 18+ years of success conducting System Testing & IT General Controls (ITGCs), leading Post-Implementation Reviews (PIRs), and planning and performing audits as an ISO 27001:2022 Lead Auditor across ERP (SAP, Oracle, Microsoft Dynamics), core-banking and large ICS/OT environments. Adept at evaluating the design and effectiveness of IT controls, orchestrating security initiatives, and independently managing GRC assignments aligned to COBIT, ISO 27001, ISO 22301, ISO 27701 and NIST frameworks. Proven record closing non-conformities within KPI timelines.
Part-Time Lecturer in Cyber Security at Universitas Multimedia Nusantara (UMN), where I update the Cyber Security Curriculum and deliver GRC and best practice implementation.
RESEARCH FOCUS: My recent research, "Fraud Detection for Financing Disbursement in The Islamic Bank using Machine Learning Techniques," focuses on anomaly detection for continuous auditing in Islamic Banking. Using primary, de-identified financing disbursement data, I compared K-Nearest Neighbor, One-Class Support Vector Machine (OCSVM), and Isolation Forest. Isolation Forest achieved the best performance for fraud anomaly detection. This work demonstrates how unsupervised ML can generate high-risk audit samples for continuous auditing.
Research Interests: IT GRC & AI Governance (ISO 42001), AI for Fraud Detection & Continuous Auditing, Cyber Security in Islamic Finance & FinTech, ICS/OT Security Analytics.
Links
Area of Expertise
Topics
The Compliance Triad: One Process, Three Audit Lenses Connecting Security, Privacy and AI Governance
Auditing security, privacy and AI governance separately can lead to repeated interviews, duplicated evidence requests and fragmented findings.
This session presents an integrated approach to auditing ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001. Rather than reviewing the same management process three times, auditors examine shared processes such as risk assessment, incident management and corrective action through three distinct lenses: information security, privacy and AI governance.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top