The #innovation lab is becoming a hallmark feature of any bank or other financial institution. But once in the lab, what determines whether a startup will make it past the proof-of-concept stage? “It’s all about those relationships and that trust,” Jason Mars, CEO of conversational AI company Clinc, told Bank Innovation. Clinc currently has 34 […]
Bank Innovation
#Banks have witnessed a spate of cyber breaches recently with the financial sector experiencing 300 percent more cyberattacks than any other industry. More than 75 cyberattacks against financial services companies were reported in first nine months of 2016.
A string of regulations requiring banks to adopt a more open architecture will further expose them to heightened cybersecurity risks, and the rapid pace of digitization in banking will only add to it.
However, the banking industry is yet to see an increased responsibility in the role of a Chief Information Security officer (#CISO). A study by Gartner showed that only 20 percent of CISOs report to the CEO with ~60 percent of them reporting to the Chief Information Officer (CIO) or an IT executive. With the growing #importance of security in an organisation, this current reporting structure might need to #change more to favour CISOs reporting directly to the CEO.
There have been instances of uneven allocation of the IT budget for spend on cybersecurity, resulting in CISOs getting a smaller piece of the pie. Studies have shown that information security takes only a tiny three to five percent of the overall IT budget.
UK banks have seen some traction here: Barclays has merged its two security functions, with previous Chief Security Officer (CSO) and CISO roles coming together under a combined CSO. Lloyds has set up a cybersecurity advisory panel to bring an industry perspective on key cyber-related activities and threats. The panel is part of a subcommittee to the Board Risk Committee (BRC) and the Chief Risk Officer regularly informs the BRC of the aggregate risk profile of the bank.
Having the CISO report outside of the IT leadership could have several advantages:
IDC believes that by 2018, increases in cybersecurity threats could result in 75 percent of CSOs and CISOs reporting to the CEO. Some regulators are even making it mandatory: In Israel, there are laws dictating that CISOs report directly to the CEO. UK banks should take a cue and become the financial services gold standard in cybersecurity governance.
The primary goal of the CISO is not to protect #technology but to protect the business. Though the position has risen in the organisational structure to the inner circles of the C-suite, a CISO’s ability to dictate a budget and make decisions independently may still depend on where the position falls in the organisational structure. Further, the role of cybersecurity experts has become increasingly important on the board, which has translated to higher salaries and attrition as well. Empowering CISOs might help mitigate this, through increasing representation on the board, direct reporting to the CEO, independent budget allocation and a role in strategy formulation.
The post CISO importance is prompting internal role change appeared first on Accenture Banking Blog.
R3CEV’s test with #Northern #Trust inspired a #blockchain proof-of-concept among three other experiments for different aspects of asset management.
CoinDesk
Reply