IBSi Blogs

The rise of Fintech is a challenge for regulators, as outlined by the IMF earlier this year. Yet legislation isn’t the only area which needs to keep pace with the evolution of finance. As digital services and infrastructure expand, cybersecurity has never been more important.

by Simon Eyre, CISO, Drawbridge

Cyberattacks are on the rise – increasing in both frequency and sophistication – and financial players are a prime target. For instance, research from the Anti-Phishing Working Group, shows the financial sector (including banks) was the most frequently victimised by phishing in Q2 2022, accounting for over a quarter of all phishing attacks. A successful attack of any kind can have catastrophic consequences: in February, cryptocurrency platform Wormhole lost $320 million from an attacker exploiting a signature verification vulnerability.

As finance evolves, it’s imperative that institutions of every size are doing all they can to protect themselves from cybercriminals. But what does that look like in practice? Let’s examine some key actions all companies must take.

Strengthening weak links

You may not be looking for weak links in your security infrastructure – but your adversaries definitely are. A single vulnerability is an open door for criminals.

Businesses must continually search for weak links in their cybersecurity armour – such as through vulnerability management and penetration testing – to identify and strengthen these weaknesses before malicious actors do.

This is especially important as working habits also evolve, with remote and hybrid working established as the norm. These offer many benefits but can also greatly increase risk as employees access systems from numerous locations and devices move on and off networks. In fact, Verizon’s Mobile Security Index report found that 79% of mobile security professionals agreed that recent changes to working practices had adversely affected their organisation’s cybersecurity. This isn’t to say that companies should ban remote working but they need to be aware of their heightened risk and be proactive about managing it.

Educating the team

A crucial part of this risk management involves employee education. Many cyberattacks rely on social engineering techniques like typo-squatting (often used in conjunction with targeted phishing attacks) to impersonate trusted parties and fool employees into providing critical access or even direct funds. Therefore, employees at every level need to know the techniques that are being used against them and be trained in the appropriate cybersecurity response.

The way this education is delivered is also important. A one-off PowerPoint presentation won’t cut it – teams need continuous training and engaging exercises, such as attack simulations, tabletop exercises and quizzes, to ensure that crucial information is taken in.

Creating a cast-iron incident response plan

Part of protecting yourself from the damage of a cyberattack is planning what to do in the event of one.

An incident response plan is a critical part of a firm’s cybersecurity infrastructure, structuring the steps to be taken following an incident. Plans should include key contacts and a division of responsibilities, escalation criteria, details of an incident lifecycle, checklists to help in an emergency and guidance on legal and regulatory requirements. Plans can even include template emails to support communications and companies should draw on knowledge from private resources and industry experts, as well as their government’s resources, to help them create a cast-iron plan.

The road ahead for finance and cybersecurity

Over the coming years, the rate of digital change isn’t set to slow. With BigTech’s eyes on banking, traditional banks innovating to keep up with challengers, the rise of ‘superapps’ and cryptocurrency supporting the emerging metaverse – to name just a few – there’s significant change still yet to occur.

The finance sector’s cybersecurity response must also continue to evolve in order to keep up. Part of this will mean relying more heavily on AI, such as in continuously monitoring networks for threats, although this tech will also be leveraged by cybercriminals. Additionally, it will be crucial for the cybersecurity as a whole to close its skills gap: there is currently an estimated global cybersecurity workforce gap of 3.4 million people.

The future is exciting but without the right protections, it can be dangerous too. If firms are to protect their assets and customers, they must build cybersecurity into the heart of their practices. Reaping the rewards of the FinTech boom means keeping firm control of your security risk.

A low-code application development platform is a visual software development environment that empowers multiple developer personas. It uses visual development tools with drag-and-drop or point-and-click design capabilities, abstracting the code in application design and development, thus providing a simple and intuitive development environment. Low code helps to free up your IT staff to focus on more value-add tasks. It can help enterprises roll out applications with a shorter time to market with high abstraction— Utsav Turray, General Manager – Product Management and Marketing at Newgen Software

What is a low-code platform?

Low code enables enterprises to rapidly develop customized solutions and applications for multiple interfaces like web, mobile, wearable devices, etc., to automate end-to-end customer journeys.

Benefits of low code platform

1. Empower IT, Teams, for Optimum Resource Utilization:

Your IT teams spend long hours maintaining systems with periodic updates, compliance checks, and performance measurements. Low code can help you minimize this burden by automating such recurring tasks, allowing IT experts to focus on other important activities.

2. Fulfill Customer Expectations by Responding Quickly

Today’s tech-savvy customers want you to respond quickly to their needs. With these platforms, you can quickly respond to customers’ needs by developing and deploying applications rapidly. Also, you can deliver a personalized customer experience using customizable applications.

3. Enhance Governance and Reduce Shadow IT

Shadow IT is an area of concern for enterprises as it accrues technical debt and affects its overall risk monitoring. Low code offers a collaborative work environment and reduces dependencies on third-party applications. It helps reduce shadow IT through central governance and visibility.

4. Handle Complex Business Needs with Faster Go-to-market

A low code platform with well-designed functional capabilities like drag-and-drop tools helps developers handle a range of complex business and technological needs. These platforms enable faster development of complex business applications in a short period, fostering quick innovation and rapid go-to-market.

What is no code platform?

No code is a tool for nonprofessional developers. Using a no-code platform, anyone in the organization can build and launch applications without coding languages using a visual “what you see is what you get” (WYSIWYG) interface to build an application and intuitive user interface. A no-code platform often uses drag-and-drop functionality to enable development and make it accessible for organization-wide users. No code platforms are mostly directed to serve the needs of business developers who can develop applications with workflows involving fewer work steps, simpler forms, and basic integrations.

Benefits of no code platform

• With no code, organizations can work without IT interference.
• Organizations can make applications in less time and with fewer resources.
• Compared to conventional coding methods, no-code solutions reduce the development time since developers don’t need to hand-code each line of code.
• Functionality and design are more easily changeable than hard coding allows. Developers can also integrate any change easily and enhance functionalities in the applications whenever required; this helps businesses provide a better customer experience.
• No code platforms don’t require similar effort as a conventional coding approach to building applications, thus being cost-effective.

Difference between low code and no code

Working with Newgen, you’ll have access to Newgen’s low-code and no-code intelligent automation capabilities. However, both platforms focus on a visual approach to software development and drag-and-drop interfaces to create applications.

Low code is a Next-gen Rapid Application Development tool for multiple developers, whereas no code is a Self-service application for business users. The primary purpose of low code is the speed of development it offers, whereas, for no code, it’s the ease of use.

If the goal is to develop simple applications that require little to no customization and are based on improving the efficiency of a simple workflow, no code platform should be the ideal choice. An example could be order management, employee onboarding, or scheduling to improve employee efficiency.

Low code, on the other hand, is more suited to enterprise use cases. It is directed towards various personas, including business developers. Low code is more flexible than a no-code platform. An example could be Business Process Automation, Application modernization, Internal applications, and portals. Developers can work with stakeholders in all the stages of the development process, and low code can help them address complex integration scenarios, which gives an organization faster time to market.

Collaborative partnerships can remove barriers to SME borrowing, in turn boosting the global economy. In an already challenging market for businesses of all sizes, SMEs are facing the additional strain of being unable to access the working capital they need to manage cashflow, take advantage of growth opportunities or help them get through quiet periods.

by Martin McCann, CEO, Trade Ledger

The good news for SMEs – and the banks wanting to provide them with a better solution – is that the technology to resolve these pain points already exists. Companies like Trade Ledger provide the technology that lenders need in order to offer businesses fast, easy access to working capital – worthy of a digital economy.  A good example of how that is working in reality is our partnership with HSBC.  Working together, we created a digital solution that cuts the approval process for new receivables finance from up to 2 months, down to within 48 hours.

Utilising the interconnected ecosystem

Even the world’s largest commercial bank cannot do it all in-house, instead seeking agile, enterprise technology partners to fast-track digital transformation strategies and start adding value to customers sooner. We call this collaborative innovation.

Such partnerships are nothing new. Indeed ‘partnership’ seems to be something of a buzzword in the financial services industry today – thanks in part to open banking, but also Covid-19 forcing many to seek alternative solutions quickly in a time of crisis. It is encouraging to see banks, FinTechs and other payment services providers increasingly looking to build partnerships within the financial ecosystem, for the mutual benefit of both organisations as well as their underlying customers. Utilising purpose-built solutions of other providers, financial institutions of all sizes can get new solutions to market more quickly and at lower cost, helping them to remain highly competitive.

Another example of innovative collaboration is the way in which we work with Thought Machine, the cloud-native core banking technology provider. Together, with Trade Ledger’s loan origination and management capabilities, we are able to deliver a fully integrated technology stack for commercial lenders and banks. The API-driven data exchange enables a high level of real-time. Banks can now rapidly configure and launch new digital products such as asset-based-lending, invoice and receivables finance, with ease and control.

SME lending to boost the economy

By leveraging open banking APIs and data modelling to build a real-time view of the customer, banks can get a richness and quality of data that removes traditional blockers to extending credit to the mid-market and SME sectors.

I believe there is also a moral obligation for the industry to provide critical global supply chains with access to liquidity in order to fuel a global economic recovery. SMEs play a vital role in the global economy, so the industry must come together to remove the barriers that hold them back – including the inability to access external capital. Innovation happens where capital flows!

Trade is the engine that powers development and competitiveness in the global economy, thereby encouraging fairness, creativity, and productivity. When trade flows in a rules-based system, jobs, wages, and investment accelerate immensely.

By Swati Babel, a cross-border trade finance business specialist, and VP at Triterras

Trade financing supports trade at every level of the global supply chain. Trade finance makes ensuring that buyers get their products and sellers get their money by supplying liquidity, and cash flows, and reducing risks. Simply expressed, trade finance is necessary for the cross-border movement of products and services.

With the Global Trade Finance Market estimated to reach $85.85 billion by 2027, growing at a CAGR of 7.06%, it becomes an integral part of every country’s economy. The world’s vast domestic market and a large pool of skilled workers make trade finance an attractive destination for foreign investors. However, the complex regulatory environment and lack of access to financing restrict the expansion of business operations across various markets.

However, the emergence of FinTech platforms over the years is paving the way to simplify and seamlessly align the trade finance industry. FinTech platforms are providing much-needed solutions for businesses by offering innovative financing products that are tailored to the needs of enterprises. These platforms are helping businesses to overcome the challenges they face in accessing traditional bank financing, and they are playing a key role in promoting economic growth and development. The platforms provide businesses with the financing they need to grow and expand their operations and also help the businesses manage and improve their financial planning.

The role of FinTech platforms in the trade finance industry is to provide an efficient and cost-effective way for businesses to finance their international trade transactions. The platforms offer several advantages over traditional banking products, including:

• Access to capital: Fintech platforms provide businesses with access to capital that they may not be able to obtain through traditional banking channels. This can be particularly helpful for small businesses and startups that may not have the collateral or credit history required by banks. Moreover, Fintech platforms provide businesses with enhanced access to funding, which can be used to finance trade transactions. Another key advantage of fintech platforms is their ability to connect borrowers and lenders from around the world, which gives borrowers greater access to capital. In addition, fintech platforms usually have lower transaction costs than traditional banks.

• Flexibility and Cost Effectiveness: Fintech platforms offer more flexible terms than traditional bank loans, which can be important for businesses that have the irregular cash flow or are expanding into new markets. Fintech platforms offer flexible products and services that can be customized to meet the specific needs of businesses. Fintech platforms offer cost-effective solutions that can help businesses save on costs associated with financing trade transactions. Various fintech platforms have relationships with multiple lenders, which gives them the ability to get customers the best possible terms for loans and can often provide more flexible repayment terms than banks. This means that businesses can choose a repayment schedule that works best for them, instead of being tied into a rigid repayment plan from a bank.

• Agility and Efficiency: Fintech platforms typically offer a faster and more convenient application process than banks. This can be critical for businesses that need to quickly obtain financing for time-sensitive trade transactions. Fintech platforms for trade financing are a lot faster than going through a bank or other financial institution because the process is often much simpler and there is less paperwork involved. Fintech-led events and activities such as the Singapore Fintech Festival also enable an ecosystem of networking and partnerships. Because of these reasons, banks and financial institutions with sufficient capital often team up and participate with the Fintech platforms for lending/co-lending opportunities. Additionally, they also enable businesses to streamline their trade finance operations and improve overall efficiency. Innovative solutions such as AINOCR or Electronic B/L help in digitizing analog data, such as paper documents, bills, etc. These platforms provide valuable data and analytics to help businesses make informed decisions about their trade finance need and help businesses streamline their operations by automating key processes.
• Enhanced security: Fintech platforms often utilize cutting-edge security features, such as blockchain technology, which can provide an additional layer of protection for businesses and their customers. Many platforms use such next-gen technologies to protect borrower information and ensure that transactions are processed securely. This can give borrowers peace of mind when taking out a loan or making a payment.

FinTech platforms are playing an increasingly important role in the trade finance industry. By providing a digital infrastructure for the entire supply chain, from producers to retailers, they are making it easier for businesses to connect and trade with each other. This is particularly important in the current climate, where businesses are under pressure to move faster and be more agile. FinTech platforms can help them do this by streamlining processes and reducing costs. While credit assessment and due diligence should be carried out manually to avoid Trade-based Money Laundering, however for everything else, Fintech platforms are changing the landscape of Global Trade Finance.

Markets have been stunned recently by regulators hitting high-profile organizations, including tier one investment banks and trading platforms, with significant fines for cases involving ‘spoofing’.

by Steve Wilcockson, Product Marketing, Data Science, KX

Spoofing is a form of market manipulation where a trader places a large series of orders to buy or sell a financial asset, such as a stock, bond, or futures contract, with no intention of executing them. With increasing varieties of interconnected asset classes being traded, organizations must be more alert across all of their markets or risk severe sanctions.

For example, in one case, a trader took advantage of the close correlation between U.S. Treasury securities and U.S. Treasury futures contracts and engaged in cross-market manipulation by placing spoof orders in the futures market to profit in the cash market. This resulted in a $35million fine! Or take the case of precious-metals traders who consistently manipulated the gold and silver market over seven years and lied about their conduct to regulators who investigated them. Penalties are in the order of a billion USD.

A revolution in detection

Such cases represent a clear failure to prevent instances of market abuse, and we might ask how that is possible given recent investments in detection systems designed to help protect organizations from such activity.

Technology on its own is not a solution. Personal ethics are, and always will be, an issue. However, technical evolution in how spoofing is conducted must be countered with a revolution in spoof detection. Traditional spoofing operates where false, but manipulative, orders are placed on the same asset where the unlawful profits may get realized. Traditional systems may capture such instances well. However, systems can and have failed in cases of more furtive manipulation, such as realizing the profit on a derivative by placing the spoofing orders on an underlying asset, not the derivative contract itself.

Successful future-proofed technologies must look for correlations across assets, business units, and markets. But more monitoring means more data and compute overhead, as well as team and workflow challenges.

When monitoring so many more data combinations, static detection systems face challenges. They need to be sufficiently agile and dynamic to handle greater data dimensionality. Robust statistics, machine learning, and behavioural analytics can help quickly synthesize data, provide early indicators of suspicious activities, and quickly eliminate false positives, but more is needed. Delivering rigorous historical event analysis and real-time insights, detection systems and their owners need dimension-busting algorithms that can work with ever-increasing volumes and complexities of data at speed.

Scalable analytics

Detection technologies must adapt to evolving market needs: new data types, the sheer volume of data, and constant updates over time. Time-series data – collections of data, often from different sources and types, organized through time – is the most efficient base unit, enabling ready processing to seek correlations, anomalies, and patterns. For example, when looking for spoofing and “layering” specifically, internal order/quote actions and trades are compared to market quotes, not just top of the book but also in their depth and consolidated trades. This helps determine if deceptive orders and cancellations that formed part of the strategy were marketable (i.e., likely to execute) at the time of the transaction. This can consist of hundreds of millions of records or more. The North American futures industry, for instance, generates over 100 billion order messages each day, and the securities markets billions more!

Choosing the right haystack

Another challenge is finding meaning in the masses of data. In plain terms, when looking for a needle in a haystack, select the right haystack to start with, and then minimize the disruption to finding the needle. In such cases, machine learning can deliver more efficacy over such high-dimensional data than rules-based solutions. Yet rightly or wrongly, and for reasons of regulatory compliance and governance around explainability and reproducibility, machine learning models tend to augment easier-to-validate rules-based processes.

However, machine learning techniques can compute over as many axes as there are useful features, easily. One popular method deployed across many industries and applications – from police surveillance to cybersecurity, from search engine recommendations to predictive healthcare and financial surveillance – is a Support Vector Machine (SVM). This is a great algorithm to identify and score features – measurable pieces of data – such as colours and distances on an image, or, in the financial world, trade characteristics and trading patterns including fraudulent features across different data sets.

Many other algorithms and tests apply in addition to SVMs. Whatever the model approach – clustering or regression, linear or nonlinear, machine or deep learning algorithms – their parameterization is invaluable in financial surveillance. For spoofing, they can navigate well the frontiers and layers of normal and abnormal market activities, and assess balanced and unbalanced markets, where liquidity might be illusory or volume artificial.

Conclusion

Spoofing is hard to detect. Its very existence relies on trades likely not being executed, increasingly across different markets and assets. As the examples have shown, regulators have the teeth to find and punish such market-abusing spoofers, so regulated entities need to ensure they have the tools to find them too. Personal ethics will forever challenge financial organizations and regulators, but dynamic, flexible, fast technologies navigating highly complex data sets can future-proof organizations, adding agility and scalability to their fraud detection, crime, and AML stacks.