Cyber Security is key in tomorrow’s world of financial services

Von Ute Laun

As a Senior Business Information Security Officer (BISO) at SIX Financial Information, Yaw Donkoh is observing that information security and data protection becomes ever more important. In his contribution to the Compliance Track of the Integrity Europe 2024, he will demonstrate how an agile and flexible cyber risk management approach can be aligned with legal and compliance requirements. We are looking forward to welcoming Yaw Donkoh at the conference, and we already asked him three key questions.

Which milestones on your personal and professional journey led to your current position?

Perseverance, passion for continuous learning and improvement has led me to my current role. Most recently, I completed an EMBA in digital transformation which has enabled me to stay up to date with key developments in technology and the future of cyber security. Additionally, I have also made it a point to build a good diverse network, while exposing myself to different cultures.

In daily business, what are currently the typical questions and greatest challenges for companies you deal with?

In my daily work, I primarily serve as the liaison between the Business, IT and Corporate Security, while also engaging with external partners. Over the years, I have observed that information security is becoming more of a priority which is a good thing.

The financial services sector is experiencing a surge in security-related requests in the form of due diligence questionnaires. This requires additional resources and internal stakeholder engagement to make sure that requests are managed in a timely manner and are in line with existing contractual agreements.

What is your key message for your contribution at the Integrity Europe Conference 2024?

Digital transformation is quickly transforming the world of financial services, and therefore there is a need for more prioritization of cyber security.

In addition, companies and their business partners including third party vendors are required to be more transparent on how they protect their data, their operational resilience and risk management practices. To be successful they must be agile, and flexible in their cyber risk management approach and ensure ongoing alignment with compliance and legal needs.