Analisis Manajemen Risiko Operasional pada Platform Crowdfunding XYZ

Abstract

Industri Crowdfunding sosial menghadapi risiko operasional yang signifikan akibat ketergantungannya pada platform digital, keterlibatan berbagai pemangku kepentingan, serta sifat transaksi keuangan yang berbasis kepercayaan. Penelitian ini bertujuan untuk mengidentifikasi, menilai, dan mengendalikan risiko operasional pada platform social Crowdfunding dengan mengintegrasikan metode Failure Mode and Effects Analysis (FMEA), kerangka kerja ISO 31000, serta pendekatan Why-why Analysis guna memastikan identifikasi akar penyebab risiko secara mendalam. Melalui penerapan FMEA, sebanyak 125 potensi risiko operasional berhasil diidentifikasi pada proses bisnis utama, yang meliputi verifikasi akun dan galang dana, pengelolaan akun mitra dan dana yang belum disalurkan, penyaluran dana, penanganan penyalahgunaan donasi, pengelolaan pengaduan, serta tata kelola organisasi. Risiko-risiko tersebut dievaluasi berdasarkan tingkat keparahan (severity), frekuensi kejadian (Occurrence), dan kemampuan deteksi (Detection) untuk menentukan nilai Risk Priority Number (RPN). Selanjutnya, diagram Pareto digunakan untuk memilih 25 risiko prioritas yang merepresentasikan 80% kontribusi risiko terbesar. 25 risiko prioritas tersebut kemudian dianalisis menggunakan pendekatan pengukuran risiko Godfrey dan divisualisasikan melalui peta risiko (risk heatmap), yang menghasilkan klasifikasi 15 risiko ekstrem, 9 risiko tinggi, dan 1 risiko menengah. Sesuai dengan risk appetite perusahaan, analisis risiko residual dilakukan terhadap 15 risiko ekstrem dan 9 risiko tinggi dengan mempertimbangkan efektivitas pengendalian internal yang telah ada. Hasil analisis menunjukkan terdapat 14 risiko prioritas tinggi berdasarkan ambang kritis nilai RPN. 14 risiko prioritas tinggi tersebut terdiri atas 7 risiko kecurangan, 4 risiko proses, 1 risiko sumber daya manusia, 1 risiko sistem, dan 1 risiko bisnis. Risiko-risiko tersebut selanjutnya dianalisis menggunakan kerangka Why-why Analysis untuk mengidentifikasi akar penyebab dan merumuskan rekomendasi mitigasi yang relevan. Integrasi kerangka kerja ISO 31000, FMEA, dan Why-why Analysis terbukti efektif dalam menurunkan nilai RPN serta meningkatkan keandalan, transparansi, dan keamanan operasional platform. Pendekatan terpadu ini memberikan kerangka kerja yang sistematis dan dinamis dalam pengelolaan risiko operasional serta mendorong perbaikan berkelanjutan di sektor social crowdfunding.

The social Crowdfunding industry faces substantial operational risks due to its reliance on digital platforms, involvement of multiple stakeholders, and dependence on trust-based financial transactions. This study aims to identify, assess, and control operational risks in social Crowdfunding platforms by integrating the Failure Mode and Effects Analysis (FMEA) method with the ISO 31000 framework and the Why-why Analysis approach to ensure thorough root cause identification. Using FMEA, a total of 125 potential operational risks were identified across key business processes, including account and campaign verification, management of partner accounts and undisbursed funds, fund distribution, handling of donation misuse, complaint management, and governance processes. These risks were evaluated based on severity, Occurrence, and Detection to determine their respective Risk Priority Numbers (RPNs). A Pareto diagram was subsequently applied to select 25 priority risks representing 80% of the cumulative risk contribution. The 25 priority risks were further assessed using Godfrey’s risk measurement approach and visualized through a risk heatmap, resulting in the classification of 15 extreme risks, 9 high risks, and 1 medium risk. In accordance with the company’s risk appetite, a residual risk analysis was conducted for the 15 extreme and 9 high risks by evaluating existing internal control mechanisms. This assessment resulted in the identification of 14 high-priority risks based on the RPN critical threshold. The fourteen high-priority risks consisted of seven fraud-related risks, four process-related risks, one human resource risk, one system risk, and one business risk. These risks were further analysed using the Why-why Analysis framework to identify root causes and develop relevant mitigation recommendations. The integration of the ISO 31000 framework, FMEA, and Why-why Analysis effectively reduced RPN values and enhanced the platform’s reliability, transparency, and operational security. This combined approach provides a systematic and dynamic framework for managing operational risks while fostering continuous improvement within the social Crowdfunding sector.