KEYNOTE ADDRESS BY DR. ERNEST ADDISON, GOVERNOR, BANK OF GHANA AT A SUMMIT ON DIGITAL BANKING AND CYBER SECURITY ORGANISED BY STANDARD CHARTERED BANK,ON MARCH 21, 2018
Source: bank_of_ghana
Date: 2019-07-17

BANK OF GHANA EST.1957 1 SUMMIT ON DIGITAL BANKING AND CYBER SECURITY ORGANISED BY STANDARD CHARTERED BANK KEYNOTE ADDRESS BY DR. ERNEST ADDISON GOVERNOR, BANK OF GHANA MOVENPICK AMBASSADOR HOTEL MARCH 21, 2018 BANK OF GHANA EST.1957 2 Mr. Chairman, Executives of the Banking Industry, Distinguished Guests, Ladies and Gentlemen, 1. Good morning and as always, it is a great pleasure to be here today as you discuss digital banking and cyber security which has gained attention recently. Before I continue, let me commend Standard Chartered Bank for bringing together cyber security experts to share experiences on this all important topic, and hope the lessons learnt would strengthen our resolve to counter cyber threats in the industry. 2. Mr. Chairman, the digitization of banking operations has engineered innovative financial products and expanded the scope of financial services alongside improved payments and settlement systems. This continuous technological advancement has radically changed how banks conduct their businesses, transformed ways of engagement with customers, and ultimately expanded the scope for financial inclusion. 3. These notwithstanding, the growth of technology-driven electronic payments are also associated with cyber related risks such as insecure card data systems and identity theft. Cyber-attacks that target customer transactions and online banking services have increased in tandem with financial technology. Indeed, financial institutions are not only targets for cyber-attacks but also bear significant legal and fiduciary responsibility to safeguard customers’ privacy and data. 4. Globally, cyber-attacks on digitized payment products are increasingly becoming sophisticated, especially on financial institutions with insecure IT systems. BANK OF GHANA EST.1957 3 We have witnessed global cyber-attacks which resulted in disruptions to some critical financial services and destroyed financial assets and savings. It is important therefore to ensure that the security of electronic banking products and services are not compromised. 5. As policymakers and regulators, we will continue to exercise firm oversight of the payment system, monitor risks associated with digital innovation and develop appropriate regulatory responses without stifling innovation. So far, the Bank has prepared a banking sector Cyber and Information Security guidelines to protect consumers and create a safer environment for online and e-payments products. Among others, the guidelines seek to; • Create a secure environment for transactions within the cyberspace and guarantee trust and confidence in ICT systems, • Provide an assurance framework for the design of security policies in compliance to global security standards and best practices by way of cyber and information security assessments, and • Protect banks, customers and clients against the potentially devastating consequences of cyber-attacks. 6. In addition to these cyber security regulations, Bank of Ghana would soon require financial institutions to publish bank-specific cyber security policies in line with the provisions in the Payment Systems and Services Bill which is expected to be passed by Parliament soon. 7. Financial Institutions would also be required to implement an integrated approach by adopting enterprise-wide frameworks of cyber risk management in line with business objectives. BANK OF GHANA EST.1957 4 It is anticipated that the integrated approach to cyber security management would support financial institutions achieve both business and security focused objectives, as well as regulatory compliance in an efficient and effective way. 8. Mr. Chairman, regulatory compliance by itself is not cyber security. The onus lies on banks to examine the state of their security systems, identify gaps and design appropriate mechanisms to counter possible cyber threats. 9. Today’s world is completely different from a decade ago as changes in information and communication technology increase exponentially. Consequently, financial institutions need to undertake cyber security-related due diligence and assessments, identify proper detective controls, and enforce third party and insider risk programs. I believe this summit would delve into some of these critical issues on digital banking and its associated cyber security risks. On this score, I wish you all fruitful discussions. Thank You.