RAG & Knowledge-Base Build Training for LLM Applications for the State-Owned Enterprises (BUMN) Sector
Large SOEs have policy corpora scattered across subsidiaries and years. Planning, corporate secretary, and operations staff often struggle to find current policies. RAG can unify the corpus, but director-level governance demands auditable indexes, clear data classification, and recorded usage trails. The Ministry of SOEs pushes both digitalisation and accountability — both must be served by RAG architecture from day one.
- format
- In-house / online / hybrid
- duration
- 3-5 day intensive or 2-4 month continuous program
- participants
- 8-20 per batch (engineer-grade)
- language
- Indonesian / English
Why RAG & Knowledge-Base Build Training for LLM Applications is different in State-Owned Enterprises (BUMN)
Large SOEs have policy corpora scattered across subsidiaries and years. Planning, corporate secretary, and operations staff often struggle to find current policies. RAG can unify the corpus, but director-level governance demands auditable indexes, clear data classification, and recorded usage trails. The Ministry of SOEs pushes both digitalisation and accountability — both must be served by RAG architecture from day one.
- Policy-corpus coverage in indexApproaching 100% of active policies indexed with classification
- Average answer latencyBelow the ITS-set threshold so productivity is not hindered
- SPI/BPK findings related to RAG usageNo material findings in subsequent period
- PER-2/MBU/03/2023 SOE Corporate Governance Guidelines
- Perpres 95/2018 SPBE — SOEs as public-service operators
- ISO/IEC 42001:2023 AI Management System
- UU PDP No. 27/2022
- NIST AI RMF GenAI Profile (NIST AI 600-1)
- Director of Digital / EVP Digital Transformation
- Corporate Secretary
- Head of Internal Audit (SPI)
- Head of IT / Enterprise Architecture
- Subsidiary AI/ML Engineer
- Head of Risk Management
- Planning & corporate-secretary staff find policy fast with citations to corporate regulations
- Indexes separated by data classification (public / internal / restricted / confidential) with different ACLs
- Usage trails (who asked what, when) stored for SPI and BPK examination
- Index refresh automated when new policy is issued via the corporate document system
- Directors & commissioners have a RAG risk framework reportable to the board
Quick Answer
Enterprise RAG training is an engineering program that builds end-to-end retrieval-augmented generation over corporate corpus: chunking, embeddings, vector DB (Pinecone/Weaviate/Qdrant/pgvector), LangChain/LlamaIndex orchestration, RAGAS & TruLens evaluation, plus OWASP LLM Top 10 2025, NIST AI RMF GenAI Profile, and UU PDP hardening.
Without structured evaluation, RAG is only 'feels right'
RAG demos look convincing; production RAG demands proof. A golden eval set, RAGAS faithfulness/context precision, and regression tests before release are the foundation so retriever or prompt changes do not silently degrade quality. This program installs the evaluation foundation on day one.
Security mapped to OWASP LLM Top 10 2025
Security module mapped explicitly to OWASP LLM01 prompt injection, LLM06 sensitive information disclosure, LLM08 vector & embedding weaknesses, and LLM09 misinformation — plus NIST AI RMF GenAI Profile (NIST AI 600-1) and UU PDP.
Most common mistake: jumping to vector DB without chunking & evaluation
Many teams busy themselves picking a vector database then become disappointed when answer quality stays low. Proper chunking, corpus-fit embedding, and a golden eval set matter more than DB choice. This program puts the right priority order in place.
RAG & Knowledge-Base Build Training for LLM Applications
Enterprise RAG training is a technical program that equips engineering, data, and product teams to build retrieval-augmented generation for corporate LLM applications — from document chunking strategy, embedding model selection, indexing on vector databases (Pinecone, Weaviate, Qdrant, pgvector), LangChain/LlamaIndex orchestration, through quality evaluation with RAGAS and TruLens, with risk controls mapped to OWASP LLM Top 10 2025, NIST AI RMF GenAI Profile (NIST AI 600-1), and the obligations of Indonesia's Personal Data Protection Law (UU PDP No. 27/2022).
Measurable Outcomes
Expected Outcomes
Indicators mapped to Kirkpatrick L1-L4; qualitative targets set jointly during TNA — no promises we cannot prove.
- RAG architecture understanding (Kirkpatrick L2 — Learning)
- All participants pass assessment on retrieve→augment→generate, chunking strategy, and embedding trade-offs
- RAG prototype delivered (L3 — Behavior)
- Each working group produces a functional RAG prototype by end of the intensive, integrated with corporate corpus
- Answer quality (L4 — Results)
- RAGAS faithfulness & context precision scores above the team-set baseline, measured on the golden eval set
- Security guardrails (L2)
- Participants pass the OWASP LLM Top 10 2025 checklist for the RAG architecture they built
- Production blueprint (L3 transfer)
- Deployment documentation, observability (TruLens/Langfuse), and index refresh SOP approved by IT/security
- Use-case-based ROI (Phillips L5 — optional)
- Per-use-case net benefit calculation isolated from other factors, when finance requests it
Program Format
Program Format Options
Selected by team maturity, corpus complexity, and deployment target — finalised after TNA.
RAG Use Case Sprint (2 days)
Focused sprint building one RAG prototype over a real internal corpus: scope target questions, initial chunking, index, and first-pass RAGAS evaluation.
RAG Engineering Intensive (4-5 days)
Complete deep dive: advanced chunking, hybrid search (BM25 + dense), rerankers, multi-vector retrieval, RAGAS + TruLens evaluation, observability, and OWASP LLM hardening.
Modular RAG Bootcamp (6-8 sessions)
Weekly sessions with experimentation gaps between: participants practice, return with results, get reviewed before the next session. Designed for teams who cannot leave operations.
RAG Maturity Program (3-4 months)
Continuous program with office hours, code review, and quarterly maturity checkpoints — until RAG ships to production with maintained SLA and observability dashboards.
Free Consultation
Build production RAG with your engineering team
Start from a free training needs analysis: we map your corpus, team maturity, and deployment target, then build a proposal & budget estimate grounded in real need.
Curriculum
Curriculum Framework
Designed with ADDIE; final modules curated based on TNA. The coverage below is the full menu — activated partially based on team maturity.
Comparison
Choosing the RAG Program Format
Concise decision matrix — finalised after training needs analysis.
| Aspect | RAG Use Case Sprint (2 days) | RAG Engineering Intensive (4-5 days) | Modular RAG Bootcamp (6-8 sessions) | RAG Maturity Program (3-4 mo) |
|---|---|---|---|---|
| Primary goal | Validate 1 use case | Full technical capability | Learn alongside operations | Production with SLA |
| Ideal participants | Small ML team with concrete case | Mid-large engineering team | Operational engineering team | Multiple teams across use cases |
| Evaluation depth | Basic RAGAS | RAGAS + TruLens + observability | RAGAS + experimental iteration | Full eval + regression CI/CD |
| Training evaluation level | Kirkpatrick L1-L2 | Kirkpatrick L1-L3 | Kirkpatrick L1-L3 | Kirkpatrick L1-L4 (+Phillips L5) |
| Best for | Check viability before invest | Teams wanting fast production | Operationally-loaded teams | Cross-use-case deployment target |
For Whom
Who This Program Is For
Engineer-grade — participants assumed to have basic Python and LLM API familiarity. TNA maps baseline so content stays relevant.
ML/AI Engineer & Data Scientist
Build end-to-end RAG pipelines from ingestion through observable production evaluation.
Common challenges
- RAG prototype works in notebook, quality drops on real corpus
- No way to measure RAG quality beyond 'feels right'
- Vector DB & embedding choices follow tutorials, lack independent criteria
Software Engineer & Platform Engineer
Integrate RAG into internal applications, manage deployment, observability, and SLA.
Common challenges
- Uncontrolled RAG latency, LLM API costs leaking
- No CI/CD for prompt & retriever changes
- Audit log & citation not sufficient for security review
AI Product Manager / Tech Lead
Select viable RAG use cases, set quality criteria, balance cost vs value.
Common challenges
- Hard to judge which use case fits RAG vs prompt-only vs fine-tune
- No evaluation framework presentable to leadership
- Vendor lock-in on a single framework/DB without exit strategy
Security, Data Governance & Legal
Ensure corpus, indexes, and answers comply with security policies, data privacy, and sector regulations.
Common challenges
- Vector store becomes shadow database without data classification
- No mapping to OWASP LLM Top 10 2025 or NIST AI RMF
- UU PDP — right to erasure & data minimisation not translated to RAG architecture
Industry Context
Industry Applications
Each industry has different corpus, regulations, and accuracy criteria — RAG is designed to follow them.
Internal assistant for credit analysts & compliance answering from policy documents, relevant OJK regulations, product manuals, and committee memos — with mandatory citation and per-chunk data classification.
See in Banking & Financial Services context →Documentation & dev-portal assistant for engineers: answer from internal docs, ADR, runbooks, Jira/Linear tickets — with reranker, hybrid search, and Langfuse/TruLens observability in production.
See in Technology & Startups context →Non-diagnostic clinical decision-support assistant answering from clinical practice guidelines (PPK), hospital formulary, and SOPs — with citation, case boundaries, and audit trails for the Medical Committee.
See in Healthcare & Pharmaceuticals context →Internal policy assistant across subsidiaries: answer from corporate regulations, SOPs, derived AKHLAK policies, and audit recommendations — with trails auditable by BPK and SPI.
ASN assistant for searching regulations, policies, and official correspondence — with information classification (public/restricted/confidential), mandatory citation, and inspectorate audit trails.
See in Government & Public Sector context →Academic & student-service assistant: answer from academic regulations, curriculum guides, service FAQs — with citation and role boundaries (does not replace academic advisors / academic units).
See in Education & Academic Institutions context →Delivery Method
Delivery
Engineer-grade training: intensive practice with real labs, code review, and architectural design — not conceptual lectures.
In-house onsite
Facilitator comes to the office; lab runs on participants' laptops with corporate corpus (in a safe environment). Best for 3-5 day intensives.
Live online
Interactive class via Zoom/Teams with screen-share code review, per-team use-case breakouts, and session recordings. Best for staged modular bootcamps.
Hybrid
Onsite sessions for architecture & intensive labs, followed by online office hours for prototype development and ongoing code review.
Engagement Flow
Engagement Path
From need to measurable RAG in production — qualitative duration, scaled to organisation size.
Training Needs Analysis & Corpus Discovery
Mapping team maturity, corpus complexity, sector regulation, and target use cases. Output: needs profile + measurement baseline + first-use-case scoping.
Initial phaseProgram Design (ADDIE)
Drafting learning objectives, engineer-grade syllabus, draft golden eval set, and reference architecture blueprint matching the team's stack.
Before deliveryDelivery — Intensive Lab
Hands-on lab: ingestion → chunking → embedding → index → retrieval → augmentation → generation. Each group brings internal corpus for a real use case.
Program coreEvaluation & Hardening
RAGAS/TruLens measurement, OWASP LLM Top 10 2025 hardening, governance mapping (NIST AI RMF GenAI Profile, ISO/IEC 42001, UU PDP).
After labOffice Hours & Production Pilot
Coaching prototype development into limited production pilot: Langfuse observability, index refresh SOP, audit log, prompt & retriever CI/CD.
Post-intensiveKirkpatrick Evaluation & Forward Roadmap
L1-3 report (attendance, assessment, behaviour/adoption), L4-5 option if pilot is measurable, plus maturity roadmap for further use cases.
Post-programCase Studies
Typical Outcome Patterns
Illustrations of impact patterns from similar program structures; no named clients or promised numbers.
Engineering team at a tech company with an existing RAG prototype stuck on quality
Intervention
5-day intensive focused on advanced chunking, hybrid search, reranker, RAGAS evaluation, Langfuse observability
Result
Faithfulness & context precision scores on golden set improved over baseline; team has regression test before each release
SOE data division wanting an internal policy assistant across subsidiaries
Intervention
4-month continuous program + per-subsidiary engineer champion network + ISO/IEC 42001 governance
Result
Several RAG pilots reached limited production with data classification and audit log; SPI has a ready-to-use review working paper
ML team at a financial institution just starting RAG
Intervention
2-day workshop + first use-case sprint + OWASP LLM Top 10 2025 mapping
Result
One internal-policy RAG prototype with citation running; team has deployment blueprint approved by IT risk
Procurement Info
Information for Procurement & Vendor Management
Materials for procurement, finance, legal, and information security teams.
PT (Indonesian limited liability company) under the Selestia ecosystem (Eduprima group); NPWP & complete legal documents; ready for PKS/contract and vendor onboarding.
Technical proposal: measurable learning objectives, syllabus, security mapping (OWASP LLM/NIST AI RMF GenAI Profile/ISO 42001/UU PDP), engineer facilitator profile, schedule, TNA-based cost breakdown.
TNA-based — flat per program, per session, per participant, tiered, or custom. Estimate provided after TNA.
Flexible terms (down payment + balance / per-batch terms); PPN tax invoice and PO document support available.
Experienced with SOE/government procurement: vendor documents, e-procurement, HPS/bidding, SPBE compliance clauses.
Kirkpatrick Level 1-3 evaluation report (attendance, assessment, lab results); Phillips ROI Level 5 on finance request.
NDA, confidentiality clauses, and lab practice that does not force confidential data into public models (aligned with OWASP LLM & UU PDP).
Notebooks, golden eval set, and blueprints built for the company become the company's property; training-material usage rights agreed in contract.
FAQ
Frequently Asked Questions
Next Step
Build production RAG with your engineering team
Start from a free training needs analysis: we map your corpus, team maturity, and deployment target, then build a proposal & budget estimate grounded in real need.
- Training needs analysis at no cost — a natural first step
- Proposal, syllabus, and security mapping within a few business days
- Procurement-ready documents (company profile, NPWP, NDA, PPN invoice)
- Kirkpatrick impact measurement (Phillips ROI on request)
RAG & Knowledge-Base Build Training for LLM Applications training for your State-Owned Enterprises (BUMN) team
Start from a free training needs analysis: we map your corpus, team maturity, and deployment target, then build a proposal & budget estimate grounded in real need.
- Training needs analysis at no cost — a natural first step
- Proposal, syllabus, and security mapping within a few business days
- Procurement-ready documents (company profile, NPWP, NDA, PPN invoice)
- Kirkpatrick impact measurement (Phillips ROI on request)