Information Security

Upholding information and cyber security

At UOB, we continually strengthen our defences, upgrade our security capabilities and enhance our operating models in view of the dynamic cyber threat landscape. We also partner regulators and industry associations, including the Monetary Authority of Singapore (MAS) and The Association of Banks in Singapore (ABS), and leading cybersecurity providers on exchange of knowledge and best practices to ensure that we keep pace with market developments. To protect our data and assets, we have in place Group-wide cybersecurity policies and guidelines that ensure that cybersecurity risks are identified and managed in a consistent way across the Group. These include:

• the Group Technology Risk Management Framework and Policy; and
• the Group Information Technology Security Management and Cyber Resiliency Policy.

These policies are reviewed annually and approved by the Operational Risk Management Committee.

Recognising that everyone plays a role in data protection and cybersecurity, we regularly train our people on information security and cybersecurity risks. We keep our people informed of developments, share best practices with them and conduct activities such as phishing simulations and internal cybersecurity training to raise their awareness and to assess their understanding, vigilance and susceptibility to cybersecurity threats.