Wayne Hutchins

The AWS Asia Pacific (Malaysia) Region is now open for business! As part of its long-term commitment, AWS is planning to invest an estimated RM29.2 billion.The construction and operation of the new AWS Region is estimated to add approximately RM57.3 billion to Malaysia’s gross domestic product (GDP) and will support an average of more than 3,500 jobs. The launch of an AWS infrastructure Region in Malaysia provides access to new and emerging technology for Malaysian entities and businesses of all sizes, boosting our country’s capabilities for digital innovation. This milestone is a significant step towards fulfilling the vision of Malaysia’s New Industrial Master Plan (#NIMP2030) to build a highly skilled, innovative, prosperous, inclusive, and sustainable economy. We recognize the transformative power of digitalization, cloud computing and AI as key drivers in Malaysia’s effort to become a manufacturing and services hub within Asia. As the largest investment made by an international technology company in Malaysia, the AWS infrastructure Region will help ensure Malaysia remains competitive on the global stage. #digitaleconomy #ThisIsWhereGlobalStarts #MITI #TZA https://lnkd.in/gKWmkaa2

574

14 Comments

Singapore and the U.K. are taking commendable strides towards improving cybersecurity in the realm of Internet of Things (IoT) devices. Singapore's Cybersecurity Labelling Scheme (launched October 7, 2020) empowers consumers to make informed decisions by clearly labelling devices based on their security features. The U.K.'s new minimum standards for IoT device passwords address the security risk of weak passwords. This policy enforces the use of unique passwords or user-set ones, along with mandatory disclosure of security update procedures. #cybersecurity #IoT #Singapore #UK #consumers #IoTsecurity #CLS

8

Make the straightforward, smart decision to migrate your trading technology to the cloud. https://lnkd.in/g7t5m7Pc Despite what some people think, moving over to managed services should be a seamless process. The latest Phi Partners' latest blog explains our comprehensive Platform-as-a-Service (PaaS) solution, and how our cloud transformation covers all the bases. We maintain tight control of everything; from architecture design to knowledge transfer, rigorous testing, and full service readiness. Learn more about our secure, efficient, and risk-free approach. #CloudTransformation #CapitalMarkets #SophisPaaS #FusionInvestPaaS

6

More than 100 Bytedance employees in its Singapore office fell sick in a recent mass food poisoning incident, with 2 caterers identified to be the source of the food poisoning bacteria. In such times of crisis, the PR and legal teams of the affected businesses would need to come together to work on the following: 🔥 Internal Investigations: Before any official statements are released, all persons responsible need to come together to assist in a thorough investigation to demonstrate transparency and accountability. 🔥 Internal Communications and Engagement: Effective and empathetic internal communication is much needed to keep the employees updated. Before public trust can be restored, the communication and credibility with internal employees need to be prioritised. This provides employees who were directly affected a channel to reach out to and know that their urgent medical needs are taken care of. Employees who are not affected will also be reassured that their basic needs remain an indispensable responsibility in the hands of their organisation and foster a sense of unity and trust. Immediate actions taken to support the employees should also be shared. Any necessary reviews of existing policies should be conducted and new measures that are used to prevent such incidents from recurring should also be announced internally. 🔥 External Communication: A timely, proactive, and transparent communication strategy should be utilised to provide updates. This is to ensure that the organisation’s public statements remain the source of truth and to inform the public and media on new discoveries and measures that are implemented. Clear and consistent messaging is also essential to manage public perception and minimise misinformation. This incident underscores the critical role of effective crisis management and communication in safeguarding a company’s reputation. Crises are very much undesirable, however, an organisation’s effective approach to handle one marks the difference between temporary setback and strong organisational resilience - a start to rebuilding trust. Co-written with Ting Fai Chung 鍾庭輝, PBM #crisispr #legal

14

“There is no privacy without security.” (24/10/24) At an IAPP and ISACA Privacy Conference today, it was my pleasure to moderate a panel of speakers on “ Top cybersecurity risks Data Protection Officers should take note of.” Panelists: Bernard Tan Shishir Kumar Singh Patrick Tay Key Takeaways include: 1.⁠ ⁠Ransomware Attacks ​•​DPO’s Role: Ensure robust backup strategies, implement regular patch management, and educate employees on phishing and suspicious links that often deliver ransomware. 2.⁠ ⁠Insider Threats ​•​DPO’s Role: Establish strong access control measures, provide regular employee training, and monitor for unusual behavior that could indicate misuse of sensitive information. 3.⁠ ⁠Phishing and Social Engineering ​•​DPO’s Role: Educate staff on recognizing phishing attempts, enforce multi-factor authentication (MFA), and implement email filtering and monitoring solutions. 4.⁠ ⁠Cloud Security Risks ​•​DPO’s Role: Ensure that cloud service providers comply with data protection standards, review and configure security settings correctly, and ensure encryption of data both in transit and at rest. 5.⁠ ⁠Third-Party Risks ​•​DPO’s Role: Conduct thorough due diligence before partnering with third parties, enforce data protection agreements, and require regular security audits of third-party vendors. By staying vigilant and proactive in addressing these risks, DPOs can significantly reduce the likelihood of data breaches and ensure the safety of personal and organizational data Kudos to Mike Leow, Elgin Koh from ISACA Data Privacy SIG for organizing this event with IAPP Tarun Samtani. Thanks to Drew & Napier LLC David N. Alfred for hosting.

44

5 Comments

Thank you CSO Online and Xiou Ann Lim for the feature. Cheers Dave Gerry and Nicholas McKenzie for inspirational insights shared during our discussions. I’ve always found the analogy "security to business is like the seatbelt to a racing car" compelling. We are not here to slow down the pace of innovation but to ensure that it accelerates safely and confidently. Business constantly strives in offering the “next” value-enhancing service. At the same time, technology continuously pushes for innovative solutions to empower that. Hence, Security function must go beyond conducting 'point-in-time' assurance testing. Instead, aim to implement a more continuous approach throughout the SDLCs where feasible, similar to the way we manage security posturing using CSPM type of tools. As we witness the rapid advancement of GenAI and LLMs, the pace of innovation is set to skyrocket. The role of security transcends traditional defensive measures, becoming a more critical enabler of organizations to explore these new frontiers. At ANEXT Bank, our Cyber Security team is positioned as an enabler for business growth, not a barrier. We firmly believe security measures can be forces propelling innovation to new heights while safeguarding the business and technology operations against the ever-evolving landscape of cyber threats. #Cyber #Security #Innovation #Technology #FutureProof #Bringaboutwhatsnext #Digitalbanking #Fintech 

63

6 Comments

Great start to the day, another certificate to the belt. ISC2 CCSP done! Did you know starting in 2024 there's a new exam centre in town that covers ISC2 exam? It's located in Bangunan AICB in KL, place is new and the staff are nice! Highly recommend doing your exam here. For those wondering, yes CISSP is still tougher. (Subjective opinion) #CCSP #ISC2 #Cloud #Cybersecurity

154

33 Comments

Great step by #Singapore and #MAS to safeguard the public against cybercrime and frauds. This would raise the bar for the banks and telcos to do the Right thing for the clients! The banks who don't make it will lose client confidence and over time become irrelevant! #Singapore, leading the way in combatting financial crime. @Ravi Menon @Vincent Loy #Singapore #MAS #HereForGood Financial institutions, telcos to be accountable to scam victims; new framework kicks in on Dec 16

164

My speech as Mercari in FIDO APAC Summit 2024 - Consumer Services: Completed to adopt Passkeys in 2023 - 2024 for (1) risk-based authentication,(2) Mercari login (iOS, Android, Web), (3) Mercoin login - Enterprise Security: Enforced phishing-resistant authentication (Okta FastPass + Biometrics) as mandatory for employees login.

97

1 Comment

APAC foreign exchange markets are dynamic and volatile, requiring up-to-the-minute data to ensure opportunities are maximised while risks are minimised. -with Currencycloud https://lnkd.in/gYskY7qZ #fintech #payments #APAV #financialservices #remittance

4

🎊 APAC Security Partner of the Year!! 🎊 When I began my journey as CISO at PALO IT, one of my key goals was to develop and sustain a security strategy that not only supports our business but also empowers our people. Receiving the APAC Security Partner of the Year award from GitHub is a significant milestone and a gratifying recognition of our efforts. Thanks Michelle Koh for highlighting the job done and PALO IT for giving me the opportunity! 🎊 #DevSecOps #Cybersecurity

64

8 Comments

Serving as a member of the Bank of Singapore (BOS) CIO Global Advisory Council was a highlight for me in the first half of 2024. Under the expert moderation of BOS's CIO Jean Chia 谢佩华, I had the privilege to speak on a panel in front of 600 clients and guests at the BOS inaugural CIO Summit. The occasion witnessed the launch of the report "2024 SuperTrends: World in Transition". The five "SuperTrends” anticipate the future we will confront over the next five years, pointing us to navigate the geopolitical, macro policy, investment, technology, environmental and social dilemmas of our time. These trends are - 1. The New World Order; 2. Rethinking Long-term Capital Allocation; 3. Artificial Intelligence (AI) – The Next Frontier; 4. The Climate of Change, and 5. Infrastructure – Building the Way. Thank you to my fellow panelists and Council members Belinda Boa of Blackrock, Fabiana Fedeli of M&G Investments, Paula Campbell Roberts of KKR, Stewart James of Goldman Sachs, Yuichi Murao of Nomura Asset Management, Adam Posen of Peterson Institute, and Kenneth Caplan of Blackstone, as well as fellow council member Mark Carney of Brookfield Asset Management for joining the summit from afar. Thank you Jason Moo Group CEO Bank of Singapore, Asia's Global Private Bank for your support of the council. Thank you Wai-Kwong Seck OCBC board member and Eli Lee Chief Investment Strategist at BOS for the lovely conversation we had over lunch. A copy of the SuperTrends report is found here. https://lnkd.in/gi3Ms_4G Complete roundtable discussion around the investment themes of the 5 MegaTrends is now available on Podcast at Spotify via this link. https://lnkd.in/gMreT2pz #BankofSingapore #Investment

106

5 Comments

We all know that cybersecurity work in financial services is anything but a walk in the park. FSI security leaders constantly need to be effective in balancing efforts to secure innovations, address compliance and protect their digital crown jewels. To make things worse, cyber threat actors are also constantly evolving their techniques and increasing attack sophistication against this sector. To get a better handle on these threats, the Akamai Security Intelligence Group spent countless hours of monitoring, attributing and analysing financial industry threat traffic and here are some of the key findings: 1) Nearly half of all web app and API attacks in APJ are setting their sights on financial services. 2) With the rise of open banking relying heavily on APIs, financial institutions are left exposed more than ever.  3) 40% of APJ financial industry web scripts are third-party, which potentially expose themselves to unknown risks More details can be found in Akamai’s latest State of the Internet Report for Financial Services which we have summarised into this short video. You might be surprised at some of the findings! https://lnkd.in/dKepWn8a #Akamai #Cybersecurity #StateoftheInternet #FinancialServices

59

2 Comments

Convergence is the name of the game with tech providers. Which is great news! However, what does this mean for your existing enterprise security op model, budget allocation and previously separate roadmaps? It's perhaps not just about converged tech, but converged ops, converged budget, converged skillset, converged decision making...?!? #SecurityIsChanging #ThinkingDifferently #OneSecurity #CloudSecurity #EnterpriseSecurity

26

3 Comments

Singapore’s major retail banks are taking a bold step to enhance security for their digital customers. The Monetary Authority of Singapore (MAS) and the Association of Banks in Singapore (ABS) have jointly announced that within the next three months, one-time passwords (OTPs) will be phased out for bank account logins by customers using digital tokens. Why the Change? OTPs, while widely used for years, have limitations. Scammers can easily hijack them through social engineering tactics or spyware, making them ineffective against phishing attacks. In contrast, digital tokens in secure banking apps generate push notifications for second-factor authentication, significantly reducing the risk of unauthorized transactions. #banking #cybersecurity #Singapore #DigitalTokens #Authentication #PhishingPrevention #Banks #RBI #IBA #CII #BankingSector #CRO #CISO #CTO #CIO #MFA

41

1 Comment