Building a Culture of Trust: Continuous Supply Chain Risk Assessment in Asia-Pacific

Executive Summary

In an era of rapid digitalisation, Asia-Pacific enterprises are discovering that trust cannot be assumed—it must be continuously verified. Yudhi Prasetyo, Head of Digital Services at BDO in Indonesia, argues that a holistic culture of trust demands ongoing supply chain risk assessment, not just periodic compliance checks. His insights, shared at the Indonesia Technology Excellence Awards, highlight critical challenges and strategies for cybersecurity, AI governance, and digital transformation across the region.

Introduction

The Asia-Pacific region is undergoing a profound digital shift, with enterprises adopting artificial intelligence, cloud computing, and interconnected supply chains at an unprecedented pace. However, this progress brings heightened risks: data breaches, regulatory fragmentation, and erosion of customer confidence. According to Yudhi Prasetyo, a veteran consultant with over 25 years of experience, the key to sustainable digital growth lies in embedding trust into every digital interaction through continuous risk assessment.

Main Analysis

Prasetyo identifies a dual-speed cybersecurity landscape in Indonesia, which mirrors broader Asia-Pacific trends. Regulated sectors such as financial services have achieved high maturity levels, driven by mandates like those from Indonesia’s Financial Services Authority (OJK) that align with global frameworks such as NIST and the EU’s NIS2. In contrast, less regulated industries like manufacturing often lag, leaving critical vulnerabilities. He advises leaders to first accept that breaches are inevitable and to conduct honest maturity assessments before investing in expensive security solutions. Building a targeted roadmap aligned with local regulations, such as Indonesia’s Personal Data Protection (PDP) Law, is essential for operational resilience.

On AI governance, Prasetyo notes that Indonesian companies are eager to adopt AI but face a regulatory vacuum. National rules remain largely voluntary, with a presidential regulation expected in 2026. Forward-thinking organisations are voluntarily benchmarking against regional standards like the ASEAN Guide on AI Governance and Ethics. They are establishing cross-functional AI committees to assess algorithmic impacts and maintaining a 'human-in-the-loop' to ensure fairness and transparency. This proactive approach allows them to unlock AI’s commercial value while mitigating ethical risks.

Digital trust, Prasetyo emphasises, requires legally binding identity verification. In Indonesia’s fast-paced e-commerce ecosystem, compliance with the PDP Law must be paired with certified Certificate Authorities (PSrE) to authenticate users and secure transactions. He recommends benchmarking against proven systems such as the EU’s eIDAS or India’s Aadhaar. To sustain trust, organisations must shift from a 'checklist' mentality to a culture of continuous risk assessment across the entire supply chain. Trust is earned not by promises but by consistently proving the integrity and authenticity of every digital interaction.

Successful digital transformation, Prasetyo observes, treats technology as a business enabler, not an isolated IT project. Failures often occur when leaders ignore macro-economic volatility and workforce readiness. Successful initiatives adapt to these variables while supporting Environmental, Social, and Governance (ESG) goals. For Indonesian enterprises, the critical lesson is that change management and continuous upskilling are as important as the technology itself. Building an adaptable, human-centric ecosystem creates lasting value.

Regional Impact

The insights from Prasetyo have significant implications for the Asia-Pacific region. As digital trade and cross-border data flows expand, a fragmented approach to cybersecurity and AI governance could undermine regional integration. The ASEAN Guide on AI Governance provides a common framework, but implementation varies widely. Continuous supply chain risk assessment could become a baseline for participation in digital ecosystems, influencing business competitiveness, foreign investment, and trade integration. Countries that enforce robust trust frameworks may attract more digital FDI, while those with weak oversight risk becoming nodes of vulnerability in regional supply chains.

Strategic Insights

For businesses across Asia-Pacific, the message is clear: trust is a strategic asset. Enterprises should invest in continuous risk assessment tools and processes, integrate cybersecurity into board-level decision-making, and align with emerging regional standards. Opportunities exist for consultancy firms, cybersecurity providers, and identity verification platforms that help companies build trust ecosystems. Policymakers should accelerate the development of enforceable AI and data protection regulations, drawing on best practices from the EU, India, and ASEAN. Collaboration between public and private sectors is essential to create a harmonised trust infrastructure.

Future Outlook

Over the next 3–5 years, Asia-Pacific will likely see a convergence of cybersecurity and AI governance frameworks, driven by regional blocs like ASEAN and bilateral trade agreements. Countries that proactively adopt continuous risk assessment models will gain competitive advantage in digital trade and investment. The anticipated Indonesian presidential regulation on AI in 2026 could set a precedent for the region. Meanwhile, technologies like blockchain and zero-trust architectures will become foundational to supply chain integrity. As geopolitical tensions rise, trustworthiness may become a key differentiator in cross-border partnerships.

Conclusion

Building a culture of trust through continuous supply chain risk assessment is not merely a compliance exercise—it is a strategic imperative for Asia-Pacific’s digital economy. Yudhi Prasetyo’s guidance underscores the need for enterprises to look beyond short-term fixes and foster resilience, transparency, and accountability. By doing so, they can navigate the region’s dynamic digital landscape and secure long-term growth.