Conference Day One: Sunday, 4 September 2016

• Securing financial market infrastructures from cyber security threats
• Defining regulatory framework based on priority of cyber prepardness for the country and the region
• Combining smart banking techniques with the right level of cyber security protection controls

---

• Customising the entity’s information security standards to establish an objective driven policy
• 3rd party vendor management: What data to share and what not to share
• Monitoring and ensuring continuous improvement of information security processes and controls

• Formulating security objectives and assessing exisiting IA gaps in the organisation
• Building cyber security controls that aim to reduce exploited gaps during vulnerability and risk assessment
• Meeting deadlines to develop and implement P2 and P3 controls with a pre-compliance audit to monitor performance

• Insider threats: Deploying security controls to monitor sensitive information being leaked out of the organisation
• Deploying perimeter cyber security technologies to ensure a unified visibility and control
• Using dashboards to regularly monitor firewalls, IPs, web proxies and secured website content to provide the right level of security support for smart banking initiatives

---

---

---

---

• Using threat monitoring and incident response capabilities to develop GSOC models for various Finntech technologies, smart card payments, electronic gateways, digital ID encryptions and mobile device management
• Improving security intelligence reports derived from dayto- day IT operations and audits
• Combining forensics with intelligence, threat monitoring tools and incident response capabilities to build zero-day scenario

---

• Identifying peak times for attacks to analyse high volume of attacks
• Discusing case studies from across the world on DDoS responses
• Reducing undetected breaches by implementing a multilayered approach to enhance data protection

---

---

• Deploying strong cryptography and authentication mechanisms to protect customer data and transactions for smart banking apps using authentic identity access controls
• Identifying sources of exploitation: Social media apps, location permissions, IMEI numbers, storage and controls, camera photos, texts, etc
• Implementing a robust incident response plan and managing banking transactions on smart phones

---

• Categorising IT systems resilience with the operational risks involved based on priority to criticality of data
• Protecting entry points at every shared portfolio: Wealth, treasury and advisory services that can be integrated with the enterprise cyber security systems
• Determining business process or technological failures by integrating operational risks with cyber security programmes

---

• Exploring PPPs as a way of introducing private sector technology
• Third party integration through a converged framework
• Building a PPP governance model to set expectations between sharing the security services

---

---

The following session will feature a series of interactive group discussions set in a roundtable format each for 15 minutes. There will be a maximum of 4-6 group leaders who will introduce a concept/case study to the participants followed by an interactive discussion and live feedback.