Connect with us

Finance

HOW FS ORGANISATIONS CAN USE API-DRIVEN DATA AUTOMATION TO JOIN THE OPEN BANKING REVOLUTION

Published

on

By Steve Barrett, Senior Vice President, International Operations at Delphix 

 

Technology is rapidly transforming all industries across the world. However, for the financial services (FS) sector, recent years have been particularly disruptive. Consumer expectations have evolved and convenience, flexibility and choice in banking is no longer seen as a ‘nice to have’ but a necessity. Alongside this, pressure from market forces to encourage innovation and drive competition across the sector has accelerated investment in open banking initiatives. These initiatives are designed to enable FS organisations to leverage customer data, in order to offer new and innovative products and services. It should be the ultimate system to deliver the next generation in customer experience. However, it’s not all smooth sailing.

In fact, research carried out earlier this year by Delphix found that the majority of FS organisations are failing to comply with government mandates such as the EU PSD2-SCA. To make matters worse, at the time of the study, only 3% of firms were confident they could meet the requirements for the next major open banking deadline – a date which has already been delayed by two years.

The open banking revolution could open up a whole new world of opportunity for FS firms. However, data privacy challenges and legacy technology stacks are impeding the transformation that is required. In order to fully unlock the potential of this new era in banking, FS organisations need to find a way to overcome these hurdles.

 

What’s the hold up?

The potential benefits of open banking are undeniable, whether you’re coming at it from the perspective of the business or the customer. For FS firms, the ability to share customer data between banks, fintechs and other technical organisations allows for more innovation and competition within the sector and will ultimately lead to a better product offering. In turn, for customers, open banking will offer better experiences, as well as more options for spending, borrowing and investing.

However, harnessing this innovation is not always easy. Given that data is often siloed throughout different departments within an organisation, it can be difficult to get the correct access. This creates challenges when it comes to effectively delivering data sets to those that need them to innovate and build new applications for customers.  The issue isn’t helped by an overreliance on legacy infrastructure and systems.

Effectively accessing and utilising data for innovation becomes even more challenging when you add privacy and compliance concerns into the mix.  Delphix’s research found that protecting sensitive data across multiple systems and APIs was the biggest data privacy and compliance concern for FS organisations, with 62% of respondents agreeing. By not adhering to compliancy rules, FS organisations are at serious risk of being hit by large regulatory fines. To add to that, without the steady stream of fresh, compliant data for the development and testing of APIs, FS organisations risk falling behind in the race for transformation in the industry.

With so many factors at play, it’s no surprise that FS organisations are currently struggling to find the balance between complying with privacy regulations and not limiting themselves in terms of innovation. In fact, 92% of FS organisations reported that they’re expecting to see a disruption to their operations as they roll out open banking APIs. However, there are measures that can be put in place to ensure success.

 

Harnessing the power of APIs

When it comes to integration testing whilst maintaining compliance, traditional testing tools for data management are actually making life harder for enterprise teams due to the manual requirements resulting in significant labour intensity. FS firms should instead consider implementing DevOps practices in order to deliver compliant data at speed via an API-driven data for DevOps platform. DevOps practices and tools increase an organisation’s ability to deliver applications and services at high velocity.

One of the benefits of using these platforms is that they allow the user to combine data delivery with compliance. This means that businesses can automate, scale and optimise testing across multi-generational systems, without having to worry about compliance risks. It helps to reduce the latency arising from an inability to find and protect sensitive data and deliver and refresh environments—for dev-testers working on new banking products—while boosting productivity and time to market.

A great example of API-driven data platforms successfully being used is with BNP Paribas (BNPP), one of the world’s largest banks. The business wanted to use data to maximise productivity and performance. The integration of an API-driven data platform allowed BNPP to accelerate application delivery across the globe, which led to development teams accelerating cloud adoption and seeing a three-fold increase in the AI production activity. Overall, the benefits of the project were undeniable. The quality of software being produced was improved with minimal downtime, all the while, adhering to the appropriate regulations.

Data suggests that many organisations like BNPP are starting to realise the potential of Open Banking initiatives for sparking innovation and staying competitive in the market. For example, in the first six months of 2020, the number of users of open banking-enabled apps or products in the UK doubled, and by February 2021, it had grown to over three million. To avoid being left behind, FS organisations should consider integrating an API-driven data platform into their systems. This will enable them to maximise the use of their data and step into the future of banking.

 

Business

The Evolution and Challenges of Crypto Regulation

Published

on

By

CRACKING THE CRYPTO CODE

Cryptocurrency regulations are evolving quickly around the globe with authorities responding to developing risks professed by criminals exploiting the latest payment methods to mask and launder the profits from their crimes.

According to William Je Founder & CEO, Hamilton Investment Management Ltd, this has warranted the introduction of a more stringent level of due diligence by additional bodies to introduce preventative measures.

William Je Founder & CEO, Hamilton Investment Management Ltd explains: “The past ten years has seen several structural changes in Know Your Customer (KYC) and anti-money laundering (AML) regulations in both Europe and across the world. High-profile money laundering cases and the penetration of illegal monies into global markets have caught the attention of regulators.

“As regulators improve their understanding of these criminal practices, AML requirements have also been improved. However, these improvements have been a reactive process.”

To address the challenges of the blockchain ecosystem, the European Union has started to introduce financial regulations that further bolster the regulatory system in order to improve licensing models. Many member states are regulating crypto assets individually, and Germany is leading the way in being the first to regulate.

Je continues: “These national driven regulations clearly point to a future pathway for crypto companies, outlining the requirements for obtaining and maintaining a financial license from the regulator.

“Compliance, however, is to my mind essential as it not only boosts investor confidence but adds a necessary layer of protection to investors.”

As crypto evolves, so have regulatory bodies’ efforts to monitor, address and enforce restrictions. The most prominent is the Financial Action Task Force (FATF), which details guidance and determines best practices in anti-money-laundering practices and combating the financing of terrorism.

FATF Recommendations number 16, better known as the ‘travel rule’, which requires businesses to collect and store the personal data of the originators and the beneficiaries in blockchain transactions, is the most notable.

Je concludes: “What does this mean? In theory, access to this data will enable authorities to have better oversight and enforcement of crypto market regulations. In other words, they’ll know exactly who is doing exactly what.

As we have always argued – transparency is key. We need to regulate crypto as an asset class with efficacy, which necessitates legislation that is applicable specifically to digital assets and does not hinder the market.

The criminal financial trade which arguably encompasses money laundering, illegal weapons sales, human trafficking, is also international. Thus, cracking down on it is, out of necessity, an international effort.

The decentralised nature of blockchain, which runs contrary to the central-server standard we know and use nearly everywhere, presents a formidable challenge here. Rules and regulations for traditional financial institutions are being implemented wholescale into the crypto sector. We believe that this is arguably wrong footed as it ignores the innovation and uniqueness this asset class and its underlying technology entails.

Traditional forms of regulation from the fiat world do not reciprocally apply to every aspect of crypto nor to the fundamental nature of blockchain technology. However well-intentioned they may be, because these imposed regulations are built on an old system, they must be adapted and modified.”

 

Continue Reading

Business

How bug bounty programs can help financial institutions be more secure

Published

on

By

Rodolphe Harand, Managing Director at YesWeHack

 

Financial services have been one of the most heavily targeted industries by cybercriminals for several years. One alarming stat from the Boston Consulting Group found these firms to be 300x as likely as other companies to be targeted by cyberattacks.

Furthermore, the pandemic has led to a significant increase in the number of cyberattacks targeting financial institutions (FIs), with around 74% experiencing a spike in threats linked to COVID-19.

With FIs holding some of the largest collections of sensitive and private data, it’s clear they will remain an attractive target for malicious actors, especially as any data stolen can be used for fraudulent activities. This leads to the reputational damage of the financial entity that was compromised and has a knock-on effect in terms of monetary and reputational damage to affected customers.

For CISOs at FIs, the conundrum faced is how do you protect intellectual and customer data, and ensure accountability and transparency for clients and stakeholders, at a time when the pandemic has created budget constraints. Research from BAE Systems found that last year alone, IT security, cybercrime as well as fraud and risk departments had their budgets cut by a third.

Below we look at how bug bounty programs can help to address these pressing issues.

 

Protecting valuable data

Protecting customer and intellectual data has always been a top priority for FIs. However, as opportunistic cybercriminals have a lot to gain by stealing this valuable data, there is a constant evolution of threats, which means FIs must stay on their toes. By deploying a bug bounty program, FIs can work with ethical hackers that have a wealth of experience and unique skills when it comes to identifying security weaknesses within a FI’s defence, thus helping to implement effective security measures to help prevent data breaches.

Building trust among various stakeholders such as customers, suppliers and investors is critical for achieving business goals. By deploying a bug bounty program, FIs send out a message that they care about protecting the security of the data of those they work with – which in turn can have a cascading effect resulting in better business performance.

 

Improving accountability  

For FIs to win customers and keep them happy, amidst the growing threat of neo banks and customer-centric fintech organisations, speed of innovation is crucial. As such, many FIs have adopted an agile approach to build, test, and release software faster to bring online and mobile banking solutions to market quicker. However, this can create frictions between development and security teams. Security mandates are deemed to be unnecessarily intrusive and a cause of delayed application development and deployment.

Yet, with DevOps teams needing to build and deploy applications faster than ever before, an epidemic of insecure applications has emerged. According to Osterman Research, 81% of developers admit to knowingly releasing vulnerable applications, while research from WhiteSource found 73% of developers are forced to cut corners and sacrifice security over speed.

With developers often not having the time, tools, skills, or motivation to write impeccably secure code, there is an evident need to provide developers with more support when it comes to building applications securely Fortunately, bug bounty programs can provide a “fact-based” financial implication of inherent security flaws within the process. This makes it possible to hold development teams and service providers accountable for creating or delivering insecure products, thus addressing inherent security gaps within the business units and helping to drive continuous improvement.

Moreover, security awareness and education of developments teams can be improved significantly for those developers that are directly involved with the management of vulnerability reports for their bug bounty programs. This is because, the mere fact of exchanging information with ethical hackers, or assimilating the thinking of a potential hacker and having proof of concepts of vulnerability exploitation on their application components, naturally accelerates consideration of security early in the development stage and provides ongoing learning.

 

Get more return on your investment

According to Gartner, 30% of CISOs effectiveness will be directly measured on their ability to create value for the business. When security budgets are challenged, CISOs need to demonstrate business value through initiatives designed to enhance efficiency whilst stretching the dollar.

This is where bug bounties can help tremendously. Compared to conventional penetration testing, bug bounty offers a fast, complete, and measurable return on your security investment, with businesses only paying out for successful discovery of vulnerabilities. Equally, businesses get access to hundreds of ethical hackers that can test their programs, each with their own unique skillsets as opposed to only one skilled researcher testing the network. This results-driven model ensures you pay for the vulnerabilities that pose a threat to your organisation and not for the time or effort it took to find them.

Bug bounty programs also deliver rapid vulnerability discovery across multiple attack surfaces. With this approach, organisations receive prioritised vulnerabilities and real-time remediation advice throughout the process to accelerate the discovery of, and solution to vulnerabilities.

Another appeal of bug bounties is that due to the continuous nature of testing, more vulnerabilities are found over time as opposed to pen-testing. This is key to financial institutions that require agility to keep up with the continuous roll-out and updates of applications.

 

The cornerstone to a successful security programme

The risk posed to financial institutions by cyber threats will only continue, as evidenced by the number of data breaches seen in recent times. The COVID-19 pandemic has only exacerbated these risks, especially with almost all FIs having needed to shift to a remote working environment – which has only widened the attack landscape.

For FIs, a bug bounty program should be considered a fundamental cornerstone of any security strategy, with it being a modern-day cybersecurity solution that is well-equipped to tackle the immediate security challenges they face. In doing so, FIs will not only prove to customers and stakeholders their commitment to data protection and security but this will also be help them to avoid the monetary damages that could be imposed by regulators if a breach was to take place.

 

Continue Reading

Magazine

Trending

Business2 days ago

What Every Small Business Should Do

The majority of the difficulties associated with establishing a business stem from failing to accomplish the small things correctly. The...

Business2 days ago

5 Ways That Businesses Can Get the Most Out of Their Digital Marketing

Everyone knows that the world of marketing has been changing for the last two or three decades. The days of...

News2 days ago

Transact365 launches seamless cross border payments in India

Transact365 enables merchants to transact locally in India Merchants can partner directly with Transact365 without needing to source local partners...

Banking2 days ago

Cloud technology in banking: Why adoption is on the rise

Alpesh Tailor, Executive Director at digital transformation specialist GFT   The banking sector has never shied away from innovation, whether...

Technology2 days ago

A Smarter World: What role will electronics play in 2022

There has been a sharp increase in technology and devices designed to make our lives simpler, faster and more productive...

Business2 days ago

Top 4 Electronics Development from 2021

Phil Simmonds, Chief Executive Officer of EC Electronics.   As we embark on a new year of business, it is a good time to...

Top 102 days ago

Investing in workforce intelligence now, leads to an optimised tomorrow

Michael Cupps (Senior VP, Marketing, ActiveOps) discusses four critical ways in which a new world of workforce data improves organisational...

CRACKING THE CRYPTO CODE CRACKING THE CRYPTO CODE
Business2 days ago

The Evolution and Challenges of Crypto Regulation

Cryptocurrency regulations are evolving quickly around the globe with authorities responding to developing risks professed by criminals exploiting the latest payment...

News2 days ago

Europe’s first blockchain neobank, BENKER, opens for pre-registration

BENKER(http://www.benker.io/) is to become the first officially licensed blockchain neobank launched in Europe following approval by the Bank of Lithuania under the Electronic Money Institution...

Technology5 days ago

AI-Powered Fraud Prevention for Digital Transactions

By Martin Rehak, CEO of Resistant AI Fraud is on the rise, thanks to the rapid escalation of digital channels...

Top 105 days ago

The future of retail trading

Joe Jowett, CEO of StrikeX   The 2020s look set to be the decade of the retail trader. As the...

Business5 days ago

Dissecting the expansion of online checkouts

Daniel Kornitzer, Chief Business Development Officer   Card payments have long existed as the preferred payment method for online consumers....

Business5 days ago

How bug bounty programs can help financial institutions be more secure

Rodolphe Harand, Managing Director at YesWeHack   Financial services have been one of the most heavily targeted industries by cybercriminals...

Business5 days ago

Resolving the unintended friction of Web 3.0

Marten Nelson, CEO, M10 Networks   Media is buzzing about Web 3.0 and the metaverse. Companies and investors are scrambling to get...

Wealth Management5 days ago

Predictions for Alternative Data in 2022

Neil Chapman, CEO of Exabel   2021 saw various firsts for alternative data. The $1.6bn flotation of SimilarWeb evidenced the...

News5 days ago

Why Zero Trust and securing the supply chain is key to post-pandemic recovery

Jim Hietala, Vice President, Business Development and Security at The Open Group   Banking and finance have grown to provide...

Finance5 days ago

Five predictions set impact the finance teams in 2022

By Rob Israch, GM Europe at Tipalti   The CFO now has a very different set of responsibilities in comparison...

Finance5 days ago

Three ways to reduce uncertainty in financial services marketing

By Patrick Costello, Senior Product Strategy Director, Optimizely    According to Bain & Company, uncertainty is one of the key factors affecting marketing...

Banking6 days ago

Bringing Automation to Banking

Ron Benegbi, Founder & CEO, Uplinq Financial Technologies   Automation is everywhere you look these days; from supermarkets to warehouses...

Finance6 days ago

Why financial services is stepping into a new era

by James Mingard, Head of Retail & Finance at Maintel   When comparing industries, financial services has arguably fallen behind when...

Trending