Our Team

Multidisciplinary expertise for trusted digital transformation.

The supplied credentials present experts spanning personal data protection, privacy law, cybersecurity, AI GRC, technical implementation, education, dispute resolution, and Business Judgment Rule.

Expert Profiles

Meet the team presented in the source deck.

Eryk Budi Pratama

Eryk Budi Pratama

PDP and AI Governance, Risk, Compliance, and Security Expert
CIPMCIPP/EFIPISO 42001
Full profile
Adhi Prasetyo Utomo

Adhi Prasetyo Utomo

Legal & Personal Data Protection Specialist
LL.MCIPMCIPDPO
Full profile
Adith Aulia Rahman

Adith Aulia Rahman

Cybersecurity, Data Privacy & AI-GRCS
ICTDSPMAI Governance
Full profile
SP

Dr. Sugeng Purnomo

Legal, Dispute Resolution & Business Judgment Rule Expert
LegalDisputesBJR
Full profile

Eryk Budi Pratama, S.Kom., M.Kom., M.M., CIPM, CIPP/E, FIP

PDP and AI Governance, Risk, Compliance, and Security Expert
Eryk Budi Pratama

Education

  • Bakrie University - Bachelor of IT
  • Bakrie University - Master of Management
  • Budi Luhur University - Master of Computer Science

Certifications

  • ISO 42001:2023 AI Management System Lead Implementer
  • Certified Information Privacy Manager (CIPM)
  • Certified Information Privacy Professional/Europe (CIPP/E)
  • Fellow of Information Privacy (FIP)
  • Integrated Data Privacy Professional (IDPP)
  • ISO 27001:2013 Lead Implementer
  • ISO 22301 Internal Auditor
  • Certified Data Protection Officer (CDPO)
  • Certificate of Cloud Security Knowledge (CCSK)
  • Certified Ethical Hacker (CEH)

Experience and Professional Credentials

  • AI Security and Risk Assessment
  • DPOaaS in financial services
  • Subject Matter Expert for PDP in multiple financial services organizations and state-owned enterprises
  • Subject Matter Expert for Cybersecurity in multiple financial services and technology companies
  • Trainer for Cybersecurity, PDP, and AI in multiple companies
  • Advisor for government and industries
  • KOMDIGI SME contributions: SKKNI Personal Data Protection, PDP implementing regulation, PDP occupation map, PDP readiness instrument, Training of Trainers, and National AI Roadmap advisory
  • Vice Chairman of Standing Committee for AI and PDP, KADIN Indonesia
  • PDP training for one of the largest financing companies in Indonesia
  • Privacy by Design training for one of the largest banks in Indonesia
  • PDP certification training for OJK
  • Public PDP training on LIA, TIA, and DPIA
  • Public DPO certification training
  • PDP readiness assessment development in KOMDIGI
  • AI assessment in an Indonesian ministry
  • AI governance, security assessment, and red teaming in an IT outsourcing group
  • AI risk assessment in a mining company
  • AI security assessment and red teaming in a startup
  • DPOaaS for a securities/capital-market company
  • PDP implementation SME roles in transportation, hospitality, construction/EPC/investment, digital Islamic banking, and major Islamic banking organizations
  • ISO 27001:2022 and ISO 27701:2019 implementation SME in a regional bank
  • ISO 27701:2019 project manager in a technology consulting company
  • Data privacy assessment, pre-implementation, regulation assessment, and privacy management technology project leadership in banks and manufacturing
  • Lead consultant for data privacy readiness assessment at a telecommunications provider
  • Project manager for multi-cloud security governance in global e-commerce
  • Cloud strategy, governance, regulatory reporting, and security SME for global insurance and financial institutions
  • IT security quality assurance SME for a government core-system implementation
  • Cybersecurity strategic review and maturity assessment SME
  • COBIT 5 and 2019 assessment team lead in banks and SOEs
  • Cloud transformation business-case team lead
  • Cybersecurity strategy, program development, and maturity assessment project leadership across ports, banks, and technology companies
  • Information security and DevOps architecture stream lead for an Asian central bank
  • Leadership for more than ten ISO 27001 certification preparation, implementation, and maturity projects
  • IT security audit strategy and technical guideline development for a government agency
  • Leadership for more than fifteen PBI and POJK compliance audit projects
  • Digital transformation initiatives covering digital infrastructure and IT service operations
  • Engagement team member for more than five third-party security/risk assessments for a multinational bank

Adhi Prasetyo Utomo, S.H., LL.M, CIPM, CIPDPO

Legal & Personal Data Protection Specialist
Adhi Prasetyo Utomo

Education and Forums

  • Universiteit Leiden - Master of Laws
  • Gadjah Mada University - Bachelor of Laws
  • Indonesian Personal Data Protection Practitioners Association
  • KOMDIGI AI Working Group
  • Law and AI practitioner

Certifications

  • Certified Information Privacy Manager (CIPM) - IAPP
  • Certified Indonesia Personal Data Protection Officer (CIPDPO) - CBQA Global
  • Certified Penal Mediator - IICT-SKI

Implementation, Training, and Education Experience

  • PDP implementation experience in a state-owned Islamic bank
  • State-owned insurance company
  • State-owned manufacturing holding company
  • State-owned manufacturer
  • Holding company for private transportation
  • State-owned hospitality and resort company
  • State-owned travel company
  • State-owned car-rental company
  • State zakat body
  • Private zakat body
  • Education holding foundation
  • Regional health office
  • Government body
  • Facilitator for personal data protection certification training
  • IBLAM Law School - Law & Technology class
  • Prasetiya Mulya School of Law and International Studies - Cyber & IP Crimes and Lawyering in the Digital Age
  • Gadjah Mada University public class
  • Various private and public in-house training programs
  • Various private and public awareness programs

Adith Aulia Rahman, ST., MM

Cybersecurity, Data Privacy & AI-GRCS
Adith Aulia Rahman

Education

  • Budi Luhur University - Doctor of Computer Science (in progress)
  • Budi Luhur University - Master of Management
  • STT-PLN - Bachelor of Computer Science

Certification and Roles

  • Basic Instructional Skills Training (PEKERTI)
  • AI Governance & Security
  • Data Security Posture Management (DSPM)
  • Lecturer: Primagraha University, AMIK Serang, STTIKOM Insan Unggul
  • Karsa Sibernetik - Technology
  • Security research and software consulting for multiple companies

PDP and Technology Implementation Experience

  • Private national bank - standards for virtualization and container security
  • Private national bank - PMT and PDP implementation as ICT and data protection expert
  • National bank - PDP implementation and data subject rights drafting
  • National ZIS organization - PMT and PDP implementation as ICT and data protection expert
  • National transportation company - PMT and PDP implementation
  • Major taxi transportation company - PMT and PDP implementation
  • Major hospitality and property company - PMT and PDP implementation
  • Securities company - PDP law compliance
  • Chemical company - PDP law compliance
  • Cement company group - PDP law compliance
  • Non-structural government ZIS institution - PDP law compliance
  • Major Islamic bank - IT security, data classification, and PDP standards
  • State-owned residential property enterprise - PDP law compliance
  • Education foundation - PDP law compliance
  • Major transportation company - PMT implementation
  • KOMDIGI - SimPDP development as ICT and data protection expert

Dr. Sugeng Purnomo, S.H., M.H.

Legal, Dispute Resolution & Business Judgment Rule Expert
SP

Education

  • Universitas Kristen Indonesia - Bachelor of Laws

PDP Implementation Experience

  • Private Indonesian banking
  • State-owned Indonesian banking
  • Travel company
  • Hospitality and resort company
  • Car-rental company
  • Government institution
The source deck contains a visual inconsistency between the name/title on page 19 and the displayed portrait/evidence. This website therefore uses a neutral initials avatar rather than attributing the supplied portrait to this named expert.

Need a multidisciplinary delivery team?

Karsa can combine legal, governance, technical, cybersecurity, AI, training, and assurance workstreams in one engagement.

Discuss Your Team Needs