Sunil Kumar Sharma

The Dubai Financial Services Authority (DFSA) published the report "Cyber and Artificial Intelligence Risk in Financial Services: Strengthening Oversight Through International Dialogue". The publication follows the DFSA’s inaugural Cyber and AI Risk Regulatory College, held in May 2025, which brought together 70 senior representatives from 18 financial authorities across the Middle East, North America, Europe, Africa, and Asia. It analyzes overall #cyber-risk, with focus on #quantum and #AI. On qauantum, it concludes: 👉 Quantum computing poses a direct threat to current public-key cryptography, which underpins secure communications across the financial sector. 👉 Without a timely and coordinated transition to PQC, financial stability could face significant risks within the next decade. 👉 Proactive steps toward PQC adoption should begin well ahead of widespread global standardisation and cross-industry implementation efforts. According to the report, a pathway toward #PQC could involve: 📌 raising awareness of quantumvulnerable cryptographic systems and building a cryptographic inventory; 📌 completing a risk assessment – including implications of ‘harvest now, decrypt later’ tactics, where encrypted data is collected now with the intention of decrypting it once CRQCs emerge; 📌 developing a quantum resilience roadmap, including a hybrid scheme during the transition while classical and PQC would coexist; and 📌 piloting PQC solutions for high-risk infrastructure and monitoring industry developments. It highlights that the tranisition represents not only a technical shift, but also a strategic transformation spanning risk, compliance, operations, and a long-term data management programme. My take: Regulatory and supervisory focus keeps growing in the financial sector, transforming the transition on a topic expanding from cybersecurity into risk and compliance teams. https://lnkd.in/dpxZ-7TE

٤٣

٥ تعليق

The FSRA’s latest guidelines are prompting firms to reassess vendor risks, incident response, and governance from the ground up. Abu Dhabi Global Markets' FSRA expects: - Documented cyber risk governance - Vendor risk oversight - Incident reporting within strict timelines We’ve outlined what needs to be done. Learn more - https://lnkd.in/gJ3vH2aV __ #ADGM #FSRA #Cybersecurity

٢٨

We are pleased to share highlights from Mashreq’s Head of Fraud Prevention & Intelligence, Gurcharan Chhabra CA, CFE’s recent participation at FINteraction 2025 by Perfios, on a panel discussion titled, “The Great AI Arms Race: Fraud Detection vs. Financial Crime”. His global perspective on how criminals stay ahead by being unregulated, agile, and fast-moving brought the challenge into sharp focus. He highlighted the use cases and practical impact of deploying technologies like agentic AI to build analyst efficiency, for similarity analysis and NLP-driven insights. At Mashreq, we believe the future of fraud prevention needs to be addressed through innovation and pioneering technologies. #Mashreq #RiseEveryDay #AI #FraudDetection #AgenticAI

١٠٥

٢ تعليق

Secretariat is proud to sponsor the GRC Today 2025 Forum organized by The Wealth Today on 20 May in Abu Dhabi. This year’s theme “Redefining Compliance: Navigating the Future of Risk and Regulation in Financial Services” brings together regulators, financial services leaders, and compliance professionals to address the rapidly evolving regulatory environment. Our team will contribute to several key sessions throughout the day: 𝗧𝗵𝗲 𝗚𝗹𝗼𝗯𝗮𝗹 𝗙𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 & 𝗘𝗰𝗼𝗻𝗼𝗺𝗶𝗰 𝗖𝗿𝗶𝗺𝗲 𝗢𝘂𝘁𝗹𝗼𝗼𝗸: 𝗧𝗿𝗲𝗻𝗱𝘀 𝗮𝗻𝗱 𝗣𝗿𝗲𝗱𝗶𝗰𝘁𝗶𝗼𝗻𝘀 Bhavin Shah and Ralph Stobwasser will deliver a presentation on emerging threats and regulatory responses to financial and economic crime. 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗼𝗿𝘆 𝗣𝗿𝗶𝗼𝗿𝗶𝘁𝗶𝗲𝘀 𝗮𝗻𝗱 𝗘𝗻𝗵𝗮𝗻𝗰𝗲𝗺𝗲𝗻𝘁𝘀 𝘁𝗼 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗼𝗿𝘆 𝗙𝗿𝗮𝗺𝗲𝘄𝗼𝗿𝗸𝘀 Ralph Stobwasser will moderate a discussion with leaders from Equiti, DFSA, FSRA, Animoca Brands, and Zodia Custody on how regulatory expectations are evolving and how firms can stay ahead. (𝗥𝗲)𝗱𝗲𝗳𝗶𝗻𝗶𝗻𝗴 𝘁𝗵𝗲 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗮𝗻𝗱 𝗖-𝗦𝘂𝗶𝘁𝗲 𝗥𝗲𝗹𝗮𝘁𝗶𝗼𝗻𝘀𝗵𝗶𝗽 Bhavin Shah will moderate a panel of senior executives from Network International, Accenture, KPMG, and ADGM, exploring the growing strategic role of compliance across financial institutions. We look forward to advancing the conversation on risk, governance, and compliance with industry peers. Learn more: https://grcsummit.today/ #GRC2025 #Compliance #RiskManagement #FinancialServices

٨٥

In 2025, the Central Bank of the UAE (CBUAE) has tightened cybersecurity and AML/CFT audit requirements for Licensed Exchange Houses. List of things to consider: 1. Information Security & VAPT Audits - Rulebook Chapter 14 mandates a documented risk-based ISMS, covering network security, access controls, encryption, monitoring, and backup Clear mandates on Conducting independent penetration tests & IT audits annually, or after any major change (systems, infrastructure, or audit findings). 2. AML/CFT Audits - Annual independent AML/CFT audits are required under Federal Decree‑Law No. 20/2018 and CBUAE guidance - A range of violations can result in fines from AED 50,000 – AED 100,000, up to license suspension or revocation linkedin.com - In 2025 alone, six houses faced fines totaling AED 12.3 million 3. Regulatory Inspections & Reporting: - CBUAE conducts ongoing inspections focused on cybersecurity posture, transaction logs, breach protocols, and AML process integrity - Immediate reporting of any cybersecurity breach is mandatory, including detailed remediation plans and timelines. Deadlines & Frequency: - All exchange houses must be audit-ready by July 2025 (one month after the latest guidance took effect), that is, no current extensions exist, firms must complete audits and build remediation frameworks by July 1, 2025. . Annual independent VAPT/IT audits and AML/CFT audits are ongoing, with proactive audits after system changes. Proactive Compliance Steps: - Define your ISMS scope & controls aligned with CBUAE Chapter 14 - Engage a qualified external auditor for VAPT & AML/CFT assessments. - Conduct internal readiness checks 6 months & 1 month before deadline. - Set up breach response planning & tabletop scenarios. Review and automate reports, logs, user access, and controls regularly. How Sandbox Security Supports You: - We help exchange houses achieve audit compliance in 4 structured phases: Phase 1 – Baseline Assessment Identify gaps in ISMS, IT controls, AML/CFT processes, complete with audit prep checklist. Phase 2 – Third‑Party VAPT & AML Audit Support Coordinate assessments, decrypt findings, and prioritize remediation steps. Phase 3 – Implementation & Documentation Deploy technical fixes, refine policies, update logs, and prepare board packages. Phase 4 – Monitoring & Continuous Improvement Provide regular risk reviews, incident simulations, audit-ready reporting, and compliance upkeep. Failing IT audit mandates, even if not explicitly named, can likely result in penalties in the hundreds of thousands, potentially reaching several million AED, depending on severity.

٣٨

ADGM FSRA Introduces Mandatory Cyber Security Risk Management (CSRM) Framework Effective Date: 31 January 2026 The Abu Dhabi Global Market (ADGM) Financial Services Regulatory Authority (FSRA) has issued legally binding CSRM rules to strengthen the cyber resilience of financial institutions. Why it matters Financial firms face growing risks: • Financial losses from ransomware and fraud • Reputational damage from data breaches • Regulatory penalties for non-compliance The CSRM framework ensures consistent risk management, stronger governance, and faster incident response across ADGM. Key changes: • Compliance moves from voluntary → legally mandatory • Firms must have a documented cyber risk framework • 24-hour incident reporting to FSRA • Stricter third-party/vendor risk controls • Board-level accountability for cyber risk management Deadline: 31 Jan 2026 – Organizations have 6 months to comply. How Crowe Can Help • 24/7 SOC monitoring for real-time incident detection • Threat intelligence aligned with FSRA’s requirements • ICT vendor risk monitoring & compliance checks • Incident playbooks & FSRA-ready reporting templates • Compliance evidence packs for audit readiness Don’t wait until it’s too late – act now to ensure resilience, compliance, and trust. Read our article: https://lnkd.in/d5KeHHsN Secure Today. Protect Tomorrow. Contact us to start your CSRM compliance journey. [email protected] | +971 55 343 8693 #ADGM #FSRA #CyberSecurity #RiskManagement #Compliance #FinancialServices #CroweUAE #CSRM

٢٥

٢ تعليق

Al Ahli Bank of Kuwait - UAE has selected BenchMatrix to implement the RiskNucleus® Operational Risk Management (ORM) solution in its UAE operations. This cutting-edge solution will empower ABK to streamline operational risk management within an enterprise risk framework by automating key processes like incident management, loss data analytics, control testing, risk self-assessments, and reporting. With powerful analytics and enhanced efficiency, ABK will now be better equipped to mitigate risks and strengthen compliance across its operations. Established in 1967, Al Ahli Bank of Kuwait - UAE has built a reputation as one of the most innovative banks in the region, with operations spanning Kuwait, UAE, and Egypt. BenchMatrix, as a leading GRC technology provider, brings years of expertise with successful implementations across global markets. Together, this collaboration marks a step toward enhancing ABK’s risk management capabilities and reinforcing its commitment to technology-driven excellence in banking. Click here to read complete story: https://shorturl.at/paOBZ #benchmatrix #riskmanagement #uae #ahlibank #regulations

٦٢

١٠ تعليق

🔐 Cybersecurity Compliance in the DIFC: The DFSA Raises the Bar The DFSA 2025–2026 Business Plan puts cybersecurity front and center with stricter expectations around cyber resilience, third-party risk, and real-time threat supervision. From ISO 27001 alignment to AI-driven risk assessments, the message is clear: cybersecurity risk management is non-negotiable. At Swyt, we support regulated firms in the DIFC with: ✅ DFSA-aligned IT Risk Assessments ✅ MDM, MFA, encryption & secure access control ✅ 24/7 incident response & IT support ✅ Audit-ready documentation, policies, and controls Cybersecurity isn’t just IT anymore — it’s compliance. 📄 Full DFSA Business Plan attached. #DFSA #DIFC #CyberSecurity #Compliance #ITSecurity #Swyt #NextGenMSP

١٨

Interested in the latest developments shaping the Middle East regulatory landscape? Explore our April 2025 Regulatory Update, where we cover key updates including: - The UAE’s completion of its National Risk Assessment on AML/CFT - A new Consultation Paper on Cyber Risk issued by the FSRA - The DFSA’s “Dear SEO” letter addressing engagement with newly authorised firms in 2025 Read the full update here: https://lnkd.in/evQqVn9w

٢٩

١ تعليق واحد

𝐃𝐅𝐒𝐀 𝐂𝐲𝐛𝐞𝐫 𝐑𝐢𝐬𝐤 𝐑𝐞𝐯𝐢𝐞𝐰𝐬 𝐀𝐫𝐞 𝐆𝐞𝐭𝐭𝐢𝐧𝐠 𝐒𝐡𝐚𝐫𝐩𝐞𝐫. 𝐈𝐬 𝐘𝐨𝐮𝐫 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐑𝐞𝐚𝐝𝐲? The DFSA’s expectations on cybersecurity have evolved — and so has their approach to supervision. Today, regulated firms in the DIFC must show implementation maturity across governance, risk, and third-party oversight — not just paperwork or policies on file. Our Dubai Financial Services Authority (DFSA) Cybersecurity Compliance Brief covers: • What 𝐃𝐈𝐅𝐂 firms are getting wrong — and how to fix it • Governance and risk controls DFSA expects at board level • How to map a time-phased, audit-ready remediation plan Download the 𝐃𝐅𝐒𝐀 Cybersecurity Compliance Brief from j. awan & partners and start building a compliance-ready cyber programme. Link: https://lnkd.in/eRgESEAm #CyberSecurity #DFSA #DIFC #Compliance #RiskManagement #FinancialServices #JawanPartners

١٧

Expert Panel 4: The Future of GRC – Balancing Risk, Compliance & Business Agility 9th edition of Global Security Symposium Moderated by Jeevan Badigari, Head of Cybersecurity, ARADA Group, this panel convenes leading experts, Ilias Spyridon Efthymiopoulos (CISO, Instashop) Osama Salah (Senior IT Security Architect, Abu Dhabi Government) Ibrahim Adedeji Adefila (IT Security and Governance Manager, Al Rostamani Group) This session provides attendees with actionable insights into building resilient, compliant, and agile organizations capable of navigating today’s complex risk environment. Ronak Samantaray | Tushar S. | Richa S | Anushree Dixit | Jennefer Lorraine Mendoza | Akashdeep Singh | Ningil Talaman | Miko Panes | S.M Muzamil | ajay arya | Vijay Bakshi | DEEPAK SINGH | Deepak Ravi | Shadab Khan | Shoeb Mohammad Choudhari | kumari Ambika | Jeevan Thankappan | Francis Longa | Mohammed kagzi | Vansh Chadha | Rehisha PE | Anshuman J Prakash | Santosh Pania | Tuba Khan | Arun Shankar #AIDrivensecurity #Governance #Security

١٤٦

١ تعليق واحد

Resecurity, a U.S.-based cybersecurity company protecting Fortune 500 companies and government agencies globally, has announced a strategic #partnership with the Union of Arab Banks (UAB) to enhance #cybersecurity capabilities, fraud prevention, and threat intelligence sharing across the #Arabbanking and #financialsectors. Read more: https://lnkd.in/d8qify86 Resecurity, Union of Arab Banks, Wissam Fattouh, Gene Y., Ahmad Halabi #FintechNewsSaudiArabia #Resecurity #UAB #Partnership #CybersecuritySolutions #FraudPrevention #FinancialSector #GCC #ArabWorld #MiddleEast #KSA #SaudiArabia #Fintech #SaudiArabiaFintechNews

٨٩

٥ تعليق