As cybercrime operations become increasingly structured and financially motivated, banks must treat cybersecurity as a strategic business issue. Resilience depends on leadership ownership, real-time coordination, and integration across operations, technology, and customer engagement.
Cyber threats have evolved into complex, well-financed campaigns by criminal networks targeting financial institutions with precision and scale. These groups exploit weaknesses in systems, user behaviour, customer channels, and third-party ecosystems. Banks face mounting pressure to safeguard data, ensure operational continuity, and preserve public trust in a highly exposed digital environment.
Cybersecurity now stands alongside capital, liquidity, and compliance as a foundation of banking stability. It influences a bank’s ability to operate, protect customer data, and meet supervisory expectations. Addressing cyber risk demands executive ownership, integrated controls, and collaboration across departments. The boardroom, not the server room, has become the decision-making centre for cyber resilience.
Threat actors now target trust, not only systems
Cybercriminals are increasingly exploiting professional networks and developer platforms. Chatchawat Asawarakwong, vice chairman and group CISO at Kasikorn Business Technology Group (KBTG), explained how attackers set up fake forums to distribute malware. “They create fake developer pages and ask others to help fix supposedly broken code. Then they convince people to install software that turns out to be malware,” he said. These techniques bypass filters and target bank-managed devices and employees directly.
Aurora Unnanuntana, senior director of technology risk at the Bank of Thailand, noted a rise in large-scale attacks through non-traditional channels. “Distributed denial of service (DDoS) attacks, which overwhelm systems with traffic, and data breaches have increased, particularly through mobile apps, subsidiaries, and third-party providers,” she said. This has expanded the threat landscape far beyond traditional boundaries.
The increase in digital exposure has driven stronger interbank collaboration. Asawarakwong highlighted the Thailand Banking–Computer Emergency Response Team (TB-CERT). “The sector works together through TB-CERT to handle threats in real time and build stronger collective defences,” he said. It has become a vital early-warning and coordination mechanism for financial institutions.
Ransomware attacks involving encryption and data theft have compelled banks to simulate recovery scenarios. “Ensure your data is properly backed up, and test regularly to confirm you can recover it. That makes all the difference,” Asawarakwong said. Resilience now relies on practice and process, not policy alone.
Readiness depends on coordination, not only controls
Technology alone cannot contain cyber incidents. Internal communication and swift coordination often determine whether a breach escalates or is controlled. Nongnuch Tantisantiwong, senior vice president and head of enterprise risk and infrastructure at CIMB Thai Bank, described how response begins with internal clarity. “We need to communicate the facts to our employees as soon as a breach happens. Timely action starts with clear internal information,” she said.
Her team conducts regular escalation drills and communication checks across departments and vendors. These exercises include password resets and escalation rehearsals with third parties. “We track response rates and follow up quickly. We also ensure third-party contracts clearly state what must happen if an incident originates outside the bank,” she said. This ensures that operational dependencies are understood and documented before an incident occurs.
Asawarakwong warned that reputational damage often stems from poor internal messaging. “We must prepare our employees to respond. If someone asks them about an incident, they need to know exactly what to say,” he said. Standardised scripts are prepared for all staff levels.
Unnanuntana reinforced the regulatory requirement for comprehensive planning. “The continuity plan must cover technical protocols, business operations, internal and external communication, and regulatory reporting,” she said. Scenario testing must include executive decision-makers. “If executives do not understand their roles during a cyber crisis, decisions will be delayed,” she added.
Cyber readiness must be embedded across the organisation through simulation, leadership involvement, and clear accountability.
Fraud response must shift upstream to prevent loss
Banks, customers, and digital platforms must coordinate more closely to prevent fraud. Tantisantiwong explained how real-time transaction monitoring interrupts scams. “We interrupt suspicious transactions to give customers time to think and avoid being misled,” she said.
Regulatory approaches are evolving to define shared accountability. “If a bank’s system is compromised, they are fully responsible. If a customer is tricked into taking action, the case is more complex,” said Unnanuntana. The Bank of Thailand is advancing frameworks that clarify responsibilities among banks, telecoms, and platforms. “We need cross-industry standards that clarify where liability lies and how banks, platforms, and customers each contribute to risk.”
Operationally, banks have phased out short message service (SMS) links in favour of in-app messaging, done within the secure banking app to reduce spoofing. “The sector is moving to in-app messaging to reduce scam exposure,” said Asawarakwong. Banks also work with telecoms and regulators to detect and block fraudulent messages at the network level. This coordinated approach reflects a shift toward systemic deterrence.
AI is becoming the new frontline of defence
As fraud tactics become more agile, banks are deploying artificial intelligence (AI) and behavioural analytics for detection. These tools assess user interaction patterns and trigger identity checks when anomalies arise. “If a customer’s behaviour changes, we trigger an additional authentication step to confirm their identity,” said Asawarakwong.
This dynamic model strengthens static authentication like face or fingerprint ID, which can now be spoofed using AI. “It is not about one factor. We combine what you know, what you have, and how you behave,” he said.
Unnanuntana added that the Bank of Thailand supports AI development within governance frameworks. “Our AI guidelines are not about restricting banks. They are designed to promote responsible innovation and safe adoption,” she said. The guidance aligns with international norms and promotes model transparency.
AI is becoming a central part of risk detection and mitigation strategies. Banks that integrate behavioural analytics into core systems will be better positioned to detect fraud, reduce false positives, and intervene early.
CISO leadership now defines institutional resilience
The chief information security officer (CISO) has become a central figure in shaping strategic resilience, not only managing technical risks but guiding security-informed decisions across the organisation. “We integrate security at the design stage, not after systems are built,” said Asawarakwong.
“We are not only technical specialists anymore. We advise the business on how security decisions impact operations and resilience,” he added. CISOs today influence procurement, third-party governance, data privacy, and even how boards allocate risk budgets. Their ability to frame cyber threats in commercial terms determines how effectively institutions prioritise defences.
Tantisantiwong described how her team enforces internal accountability. “We set limits for medium- and high-risk issues and monitor whether teams act within the window,” she said. Her unit also scans social media during incidents to guide communications and flag emerging reputational risks.
Unnanuntana underscored that cybersecurity is no longer the sole domain of IT teams. “Every department must treat cybersecurity as part of its core responsibility, not something handled by a separate team,” she said. Banks are now expected to appoint CISOs with cross-functional mandate and direct access to board discussions.
This structural shift signals that resilience depends not only on robust controls, but also on clear authority, internal influence, and leadership visibility.
Cybersecurity is now a measure of business competence
Cyber threats no longer occur in isolation. They expose weaknesses not only in systems, but in governance, operations, and decision-making under pressure. Maintaining customer trust, meeting regulatory obligations, and avoiding operational disruption now depend on how effectively leadership anticipates and responds to cyber risk.
Cybersecurity has become a strategic pillar shaping how banks design digital services, manage third-party exposure, and engage with customers. Institutions that integrate cyber readiness into executive agendas, product development, and staff culture will be better prepared for disruption.
© Copyright , TABInsights. All Rights Reserved
Mai Kaneko leads international business and marketing at DeCurret DCP, a Japanese fintech firm operating a multi-bank network for tokenized deposit under the DCJPY framework. She oversees international expansion initiatives, bank-fintech partnerships and global go-to-market strategy. She holds a Master’s in International Relations from Georgetown University and a Bachelor’s in Economics from University of Tokyo.
Kinoshita has been involved in product development projects across a wide range of industries in Japan, including e-commerce, retail, banking, insurance, and manufacturing. He joined DeCurret DCP in 2024, where he has been engaged in the development of digital currency infrastructure. In addition to building the underlying infrastructure, he supports digital transformation (DX) initiatives associated with the adoption of digital currency solutions across various industries, and promotes projects aimed at enabling cross-border transactions.
Jason Hunt works within ANZ's Industry & Innovation function, engaging with industry challenges, trends and disruptive technologies across payments, digital assets, platforms and data-driven solutions. ANZ was a participant in Project Acacia, the joint Reserve Bank of Australia (RBA) and Digital Finance Cooperative Research Centre (DFCRC) initiative exploring digital money in wholesale tokenised asset markets, which concluded with its final report in May 2026. ANZ has also previously issued its own Australian dollar-denominated stablecoin, A$DC, to settle a real-money digital asset transaction.
Zhu Kuang Lee leads UOB's Innovation Group, formed in April 2025 to consolidate the bank's work across digital assets, data management, blockchain and enterprise artificial intelligence. He represents UOB in regional digital money and tokenisation initiatives, including collaboration with the Monetary Authority of Singapore (MAS), and has described the bank's approach as embedding compliance into system design from the outset rather than adding it later.
Abhinav is currently based in Singapore and leads Client solutions and Sales for Partior. In this capacity, he oversees clients' journeys including commercial and central banks, from defining use cases to product integration. Before taking on this role, Abhinav gained extensive experience working with both global and local banks. He spearheaded transformative initiatives in Payments and Core Banking, requiring him to coordinate efforts across business units, technology teams, and regulatory bodies. Abhinav played a pivotal role in implementing Faster Payments projects throughout Asia, including notable projects like Singapore G3 Fast, Malaysia Duit Now, and Hong Kong FPS. Prior to his tenure in the banking sector, Abhinav served as a Payments Financial Services consultant to various banks and payment fintech companies such as ANZ, Deutsche Bank, and Bank of America. Originally from India, Abhinav holds an Engineering degree and a Postgraduate qualification in Machine Learning and Artificial Intelligence. He is also a dedicated father of two, and he enjoys spending his weekends playing tennis and cherishing moments with his family.
Sakae Hamasaki joined Sanwa Bank (currently MUFG Bank) in April 1993 and worked in corporate banking across five domestic locations. From 2006 onward, he gained extensive experience in the planning, development, and sales of payment-related services for corporate clients in Japan and overseas. He joined DeCurret DCP in 2022, where he has been leading initiatives to support banks in evaluating the adoption of tokenized deposits, as well as collaborating with overseas partners to build cross-border networks utilizing tokenized deposits.
Anouska Ladds is Executive Vice President of Commercial & New Payment Flows, Asia Pacific at Mastercard, based in Singapore. With over 17 years at Mastercard, she has held senior roles across sales, strategy, operations, market development, consultancy, and product development, spanning Asia Pacific, Europe, the Middle East, and Africa. Previously at Barclaycard, she specialised in strategy, customer experience, communications, and SME/acquiring businesses.
David is a seasoned technology executive with significant experience and has over 25 years' experience in CISO and CIO roles across different industries and countries. David has served as a CIO spans across multiple industries and geographies. He was winner Australia CIO of the Year for driving CUA's Transformation. Also, David was CISO for HSBC and Global Head Technology, Cyber and Data Risk Macquarie Group.
A regular conference keynote speaker and thought leader he writes for CIO, CSO, Computerworld and Australian Institute of Company Directors (AICD). His best-selling book - the Aspiring CIO & CISO was published in June 2024 and his second book A Day in the Life of a CISO launched in October 2025 and is already best seller in UK, Singapore, Japan and Australia.
Johnson is a seasoned executive and data and AI leader with over 15 years of experience across the public and private sectors. He is currently Assistant Chief Executive at IMDA, where he helps shape Singapore’s digital future and advance the digital economy. He has held senior data and AI roles in regional banking and global consulting, and began his career in defence and critical infrastructure.
A distinguished leader who has spent over two decades shaping the future of technology and digital finance. Barani Sundaram has held senior leadership positions across Dubai, Singapore, Malaysia, India, and Vietnam, building an impressive track record of delivering large-scale technology transformations across diverse and dynamic markets. As Chief Technology Officer of EastWest Bank in the Philippines, Barani has been instrumental in modernizing the bank's core technology infrastructure, elevating its cybersecurity posture, and championing the adoption of Artificial Intelligence and machine learning. Under his leadership, EastWest Bank has harnessed AI to enhance customer experiences, strengthen fraud detection, and enable data-driven decision-making — while ensuring the highest standards of cyber resilience and regulatory compliance. His strategic vision, technical expertise, and ability to navigate complex challenges have earned him recognition as a pivotal force in shaping intelligent and secure digital banking in the Philippines.
Daniele Tonella is Chief Technology Officer (CTO) and member of the Management Board Banking since August 2024. Daniele is responsible for overseeing and managing the total IT landscape and advising on technology-driven business opportunities. Daniele is a member of the Tech Advisory Board of The Hg Foundation. He holds an engineering MSc from the Swiss Federal Institute of Technology in Zurich (ETHZ) and completed various executive education programmes at Harvard, IMD, INSEAD and MIT Sloan.
Virag Masuraha is a seasoned executive with over 25 years of experience leading Fraud, Financial Crime, and Risk functions for top U.S. financial institutions. He is widely recognized for driving strategic initiatives that reduce costs, enhance profitability, and enable sustainable growth, while successfully managing complex regulatory engagements.
Currently, Virag serves as Managing Director of US AML Financial Crime Modeling at Bank of America. Prior to this role, he held leadership positions at Citi and PNC, where he spearheaded global fraud and anti-money laundering (AML) analytics and modeling functions.
With deep expertise in financial crime and fraud data, analytics, and modeling, Virag has led enterprise-wide strategies in advanced analytics—including big data, AI/ML, entity linkages, network analysis, and machine learning—alongside cyber and digital fraud prevention across consumer and commercial portfolios.
Virag holds an MBA from the Kellogg School of Management and a Master’s in Engineering from Vanderbilt University.
Jackson Oh is the Chief Technology Officer at ANEXT Bank, where he leads the bank’s technology strategy, architecture, and engineering execution as ANEXT scales its digital banking platform for local SMEs and foreign business owners in Singapore.
With close to two decades of experience across banking, fintech, and enterprise technology, Jackson brings a rare blend of deep financial services expertise and hands-on product and platform leadership. Prior to ANEXT Bank, he served as Chief Product Officer at Tribe Fintech and held senior technology and product leadership roles at 360F, SunGard (now part of FIS), AirWatch by VMware, Samsung Electronics, and Bank of America.
Jackson has led large-scale, cloud-native platforms across corporate banking, payments, capital markets, and SaaS environments. He is passionate about building resilient, scalable financial infrastructure, and enabling innovation while meeting the realities of regulatory and operational complexity.
.png)
.png)
Banner.png)
Google 
LinkedIn
