At the Risk and Governance Summit in Jakarta on 14 July, Indonesian officials projected that artificial intelligence and digitalisation could add 0.8 to 1 percentage point to annual GDP growth, driven by data centres, productivity improvements and the digitalisation of micro, small and medium enterprises. Yet the same gathering heard the country's financial regulator, OJK, present survey results showing that cyber risk and AI misuse have become the top concerns for governance, risk and compliance practitioners, ahead of regulatory change, geopolitical uncertainty and climate risk. The juxtaposition captures a global tension: AI is simultaneously a growth engine and a threat amplifier.

The growth narrative rests on expanding digital infrastructure and attracting investment through Indonesia's active participation in forums such as the OECD, BRICS and the Indo-Pacific Economic Framework. However, the risk side is accelerating. Canada's Office of the Superintendent of Financial Institutions warned banks in April that frontier models like Anthropic's Claude Mythos "significantly compress the timeframe for effective risk mitigation," according to a communication obtained by Reuters. Bain & Company's latest analysis, Resilience by Design, notes that governments increasingly treat AI infrastructure as a strategic national asset, driving AI sovereignty policies that create operational risks for businesses dependent on external technology providers.

The concentration of vendor dependency is stark. A 2026 survey of more than 500 US executives found that 74 per cent said losing their primary AI vendor would disrupt operations, and 58 per cent of those who attempted to switch providers reported the process either failed or proved far more difficult than expected. In Indonesia, data from the National Cyber and Crypto Agency showed a significant level of anomalous transactions in financial services, reinforcing the regulator's call for integrated and collaborative risk management. The World Economic Forum's Global Cybersecurity Outlook 2026 noted that the proportion of organisations assessing AI tool security before deployment rose from 37 per cent in 2025 to 64 per cent in 2026, reflecting a rapid shift in corporate practice.

Both Indonesian and Canadian authorities are now emphasising governance as the foundation for resilience. OJK is strengthening market integrity measures, including shareholding disclosure rules and public float requirements, while Canada's OSFI has issued a public bulletin stressing a technology-neutral, risk-focused approach. The next milestone will be the translation of these principles into binding operational resilience standards for AI systems, as regulators in Jakarta and Ottawa signal that governance frameworks will be tightened in the months ahead.