DBS CEO Sounds the Alarm Cyberattacks the New Battlefield

• DBS CEO Tan Su Shan identifies cybersecurity as the foremost risk, surpassing market volatility and geopolitical shocks.
• The rise of AI introduces fresh vulnerabilities in financial systems, necessitating stringent data lifecycle management.
• Banks are urged to adopt a mindset of perpetual vigilance, assuming nothing and trusting nobody in cybersecurity.
• Institutions must build redundancy and contingency plans to withstand cyberattacks and geopolitical shocks.

Cybersecurity a CEO's Biggest Nightmare

Right then, as someone who's slept in more questionable places than you've had hot dinners, I can tell you, a good night's sleep is worth its weight in gold. But for Tan Su Shan, the CEO of DBS, it ain't rogue wildlife or dodgy jungle juice keeping her up at night. Nope, it's cyberattacks. She reckons the new war is cyber, and that's a battlefield where the stakes are higher than Everest. "Cyber security. I think the new war is cyber. So what keeps me awake at night is cyber. It's who's going to attack who, and how it's going to happen, how people will get affected," she said. Makes you think twice about that online banking, eh

Trust No One Perpetual Vigilance

Now, I've always said, "Improvise, Adapt, Overcome." But in the digital world, that translates to "Assume nothing, trust nothing, trust nobody," as Tan puts it. Banks are now operating in an environment where cyber risks are constant and evolving, requiring a mindset of perpetual vigilance. That has translated into continuous "red teaming," or stress-testing systems by simulating attacks, as well as a culture of what she described as deliberate paranoia. And it's not just about having the latest tech; it's about the mindset. Speaking of mindsets, have you read xAI's Reboot Beneath the Hood Musk Orders Overhaul? Sometimes even the best need a fresh start, a bit like me after a week in the Atacama. The goal is to anticipate vulnerabilities before attackers exploit them, particularly as AI lowers the barrier for more sophisticated cyber threats, she said.

AI The Double Edged Sword

We all know AI is changing the game. But while it promises productivity gains, it also expands the attack surface. Generative and 'agentic' AI has added a new layer of complexity, and Tan warned they also expand the attack surface – or all the points at which an authorized user can attack a system – especially when deployed in critical systems. It's like giving a chimp a grenade; fantastic potential, but someone's gonna get hurt. "When it touches production... make sure that you've got all the relevant guardrails," she said, referring to AI systems that interact directly with customer-facing or core banking infrastructure. So, smart adoption is key, not just blind faith in the shiny new tech. The rise of generative and agentic AI, she noted, has created "fantastic opportunities, but also fantastic challenges and a lot of scariness that comes with it," especially when it comes to safeguarding sensitive data and core banking infrastructure.

Data Lifecycle Management The Key to Survival

For DBS, that has meant building strict frameworks around how data is handled and monitored. Tan emphasized the importance of "data lifecycle management," ensuring that data is properly governed from creation to deletion, with clear controls over access, auditability and transparency. Think of it as cleaning up your campsite; leave no trace, especially digital footprints. If you don't manage your data, someone else will, and trust me, you won't like their methods. So, get your digital house in order.

Volatile Times Call for Resilient Systems

The world's gone a bit wonky, hasn't it Supply chain disruptions, trade tensions, and more conflicts than a poorly planned camping trip. Tan said these shocks have forced companies to rethink resilience across the board, from supply chains to payment systems. It's all about redundancy, alternative pathways, and contingency plans. "Prepare for the worst, hope for the best, but have that playbook ready," she said. It's like packing a spare parachute; you might not need it, but you'll be glad it's there when things go south. And they usually do.

Final Thoughts Adapt or Die

At the end of the day, whether you're navigating a jungle or the digital world, it's all about adapting. Cybersecurity isn't just a tech problem; it's a mindset, a culture, a way of life. So, stay vigilant, trust your instincts, and remember, the best defense is a good offense. And maybe, just maybe, you'll get a decent night's sleep. Now, if you'll excuse me, I've got a cybersecurity course to attend...and a nap to catch.