Information Security

Upholding information and cyber security

We continually strengthen our defences through investing in new technologies, processes and our people. These include implementing enhanced monitoring and response capabilities for cyber threats, data loss prevention solutions and a round-the-clock Security Operations Centre with dedicated personnel.

Adopting a proactive approach to information security, we have in place Group-wide frameworks, policies and guidelines that ensure that relevant risks are identified and managed in a consistent manner. These include:

• the Group Technology Risk Management Framework and Policy; and
• the Group Information Technology Security Management and Cyber Resiliency Policy.

These policies are reviewed annually and approved by the Operational Risk Management Committee.

These are supported by regular internal technology and cybersecurity risk assessments and audits on the reliability, adequacy and effectiveness of the Bank’s system of internal controls, risk management and governance processes.

UOB’s Group Chief Information Security Officer sets the information security strategy and initiatives, and provides regular updates to the Board and Management.

Recognising that everyone plays a role in data protection and cybersecurity, we regularly train employees on information security and cybersecurity risks. We keep them informed of developments, share best practices and conduct educational activities, such as phishing simulations and cybersecurity workshops, to raise their awareness and to assess their understanding, vigilance and susceptibility to cybersecurity threats. Employees in customer-facing roles undergo more targeted security education to reinforce their understanding of and need for exhibiting positive security behaviours at work.