Enhancing Operational Risk Governance in Digital-Based Pension Institutions: An RCSA Model Framework for Sustainable Resilience

Abstract

This study examines the implementation of the Risk and Control Self-Assessment (RCSA) framework as a mechanism to enhance operational risk governance in digitally enabled pension institutions. It aims to develop an adaptive, technology aligned RCSA model tailored to the risk profile and transformation context of Dana Pensiun Telkom, Indonesia. Using a qualitative descriptive approach was employed, drawing on ISO 31000:2018 and the COSO Internal Control frameworks. Data were collected through semi-structured interviews, direct observation, and document analysis involving 8 internal stakeholders. Thematic analysis using the Miles and Huberman (1994) model was applied to identify challenges, gaps, and improvement opportunities in the RCSA process. The study finds that although the core elements of RCSA, risk identification, evaluation, monitoring, control, and reporting have been formally implemented, the lack of digital integration, staff digital literacy, and standardized execution undermines its effectiveness. The research highlights that risk reporting remains compliance-oriented rather than decision-supportive, while monitoring processes lack real-time dashboards. However, strong institutional commitment and regulatory awareness serve as a foundation for transformation. his research proposes an adaptive RCSA model that integrates digital risk registers, role-based execution, automated dashboards, and continuous capacity building. The model promotes proactive risk management, organizational resilience, and strategic alignment in public pension governance. Future studies should explore model scalability across different institutions and assess longitudinal impacts on digital risk maturity and institutional performance.

 Keywords: digital transformation, operational risk, pension governance, RCSA framework, risk management