RMiT WEEK 2020

Platinum Sponsor Silver Sponsors

RMiT WEEK 2020

Webinar series – 17 to 19 August 2020

Panel discussions covering:

• Board of Directors responsibilities • CISO • Cybersecurity • Technology Risk • Technology Operations • Service Provider Offerings

Risk Management in Technology (RMiT)

SHARE/GUIDE IT Users Association 2020 RMiT WEEK 17th-19th August, 2020

Page 2 of 30

FOREWORD FROM SHARE/GUIDE CHAIRMAN

This year has been a very challenging year for all of us especially with the continuing Covid-19 pandemic. Despite the difficulties, SHARE/GUIDE is determined to keep our members occupied with knowledge sharing events in line with our objective – to ‘share’ and to ‘guide’ each other. It is my pleasure to welcome you to one of our much-anticipated events for this year, the 2020 SHARE/GUIDE RMiT WEEK. This 3-days online webinar sessions covering Risk Management in Technology (RMiT) is related to the compliance Policy Document issued by Bank Negara Malaysia effective 1st January 2020 for all large financial institutions. We are proud that for this event, all the Panelist and invited Speakers who will be sharing their experience, knowledge, products and services are all from our very own members. A very big Thank You to all of them for their willingness to contribute and share their knowledge with our other members. RMiT is a comprehensive set of technology risk Policy Document that all large financial institutions must comply. It relates to the focus of good governance on Technology Risk that if breached, would cause great financial loss, disruption of operations and reputational harm to the financial industry. SHARE/GUIDE members who are from the financial industry have to comply to these Policies, and it has been a challenging task for them since the compliance date. We sincerely hope that this event will enlighten our members with a better understanding of the compliance on RMiT by financial institutions and members are encouraged to learn from one another to ensure their respective organisations can implement the compliance requirements in a more productive manner. Of course, this RMiT WEEK event would not have been possible without the continued support from our major sponsors. On behalf of the Organizing Committee, I would like to thank our Platinum Sponsor: Cisco Systems (Malaysia) Sdn. Bhd; and our Silver Sponsors - Silverlake Group and Hewlett Packard Enterprise, for their tremendous support and major contributions. My appreciation also goes to the Organising Committee, as well as the Management Council of SHARE/GUIDE for their efforts and commitment in making this RMiT WEEK event successful.


Page 3 of 30

To all our members, a very big Thank You for your continued support. I sincerely hope that you will enjoy and learn new knowledge from our RMiT WEEK webinar sessions and continue in the pursuit of technological knowledge sharing with SHARE/GUIDE. Nazrul Hisham Abdul Hamid Chairman SHARE/GUIDE IT Users Association 2018-2020


Page 4 of 30

I. GENERAL INFORMATION

• RMiT WEEK Sessions

• Cisco Webex Webinar Format

• Facts on RMiT Policy Document II. 2020 SHARE/GUIDE MANAGEMENT COUNCIL III. RMiT WEEK AGENDA IV. PANELISTS / SPEAKERS BIO DATA V. SHARE/GUIDE SPONSORS

VI. SPONSORS PRODUCT PAGE VII. SHARE/GUIDE'S MISSION STATEMENT VIII. ACKNOWLEDGEMENTS IX. NOTE PAGE


Page 5 of 30

I. GENERAL INFORMATION

• RMiT WEEK Sessions The RMiT WEEK webinar sessions will be spread over 3 days, from 17 to 19 August 2020. Please refer to the Event Agenda for the respective sessions. Attendees will be given a Meeting Link and can join and leave the sessions at any time during the 3 days.

• Cisco Webex Webinar Format

The webinars will be via Cisco Webex. Attendees are required to download the Cisco Webex software ahead of the event and join the respective webinar sessions early to avoid any downloading issues. Once you have joined the sessions, please ensure that you Mic is muted to avoid audio disruptions to the speakers or panelists.

• Facts on the RMiT Policy Document

• Published as an ‘Exposure Draft’ on 4 September 2018

• Issued as a Policy Document’ on 18 July 2019

• Requires a Gap Assessment to be completed by 18 October 2019

• Compliance to the Policy Document effective from 1 January 2020


Page 6 of 30

II. 2020 SHARE/GUIDE MANAGEMENT COUNCIL

Position

Name

Chairman

Mr. Nazrul Hisham Abdul Hamid Zurich General Takaful Malaysia Berhad

Vice-Chairman

Mr. Jimmy JC Wong Genting Malaysia Berhad

Secretary

Pn. Noor Farini Napiah Bank Pertanian Malaysia Berhad

Treasurer

Pn. Jamilah Jamaluddin RHB Bank Berhad

Council Member

Mr. Azman Zakaria Tenaga Nasional Berhad

Council Member

Mr. Mohd Farris Khairuddin United Overseas Bank Berhad

Council Member

Ms. Soo Mei Ling HSBC Bank Malaysia Berhad

Council Member

Mr. Chang Kok Khoon Silverlake Axis

Chief Executive Officer

Woo Yuen Seng


Page 7 of 30

III. RMiT WEEK AGENDA


Page 8 of 30

IV. PANELISTS / SPEAKER'S BIO DATA Panelist: Mr. Chu Hong Keong Designation: Board Director Organisation: CIMB Bank Topic: Board Of Director responsibilities Bio data: A multi-award winner, innovator, key ICT & banking industry leader and contributor, international award judge, coach/mentor for national award winners, startups & students, international speaker, regional publication editorial advisor plus many other diverse roles. A current independent director of CIMB Bank Bhd, his past careers include independent director of MyClear (now Paynet), managing director in Silverlake Group, Head of HSBC Global Technology Centre Malaysia, and HSBC Malaysia CIO, Head of e-business and Senior Executive Strategic Planning & Transformation. His diverse experience ranges from IT management, risk, security & fraud management, digital transformation, strategic planning, global outsourcing, e-business, e-payments, e-trade facilitation, interbank payment & clearing systems industry policies & standards to retail merchandise management & accounting system. Chu has contributed numerous industry standards and 1st, and a member of over 20 international/national committees (e.g. MICCI, ASEAN Workgroup on Infrastructure & Tourism, IFIP Technical Committee, Multimedia Act InfoSecurity taskforce, RTGS Policy, FPX Steering & National Payment committees); and Chairman of RTGS/Rentas Industry Working Committee and Malaysia IT Users Group. He had previously conducted IT risk & security courses in SEA Central Banks (SEACEN) centre. His over 15 awards include Pikom-Computimes “ICT Achiever of the Year 2003”, Pikom “Key ICT Industry Leader” Recognition in 2005 and CIO Asia Award 2004 cum being the first Malaysian individual nominated for the World IT & Software Alliance’s Global IT Excellence Awards 2004.


Page 9 of 30

Panelist: En. Mohd. Yuzaidi Mohd. Yusoff Designation: Board Director Organisation: Bank Islam Malaysia Berhad Topic: Board Of Director responsibilities Bio data: Encik Mohd Yuzaidi Mohd Yusoff was appointed as an Independent Non-Executive Director of Bank Islam on July 1, 2019. Encik Yuzaidi has more than 25 years of consulting and entrepreneurial experience in Asia, with experience in various trades across a diversified portfolio of companies and industries. An alumnus of Accenture, Yuzaidi is the founder of Clear Minds Sdn. Bhd., a boutique consulting firm. He has also served as a nominee director for a couple of Perbadanan Nasional Berhad (PNS) invested companies and was the Group Chief Strategy and Corporate Governance Officer for PST Ventures Sdn Bhd. Yuzaidi is the Chairman of the Muslim Professionals Forum (MPF), a group founded to foster intellectual engagement and dialogue on issues that touch on Islamic beliefs, practices, culture, social and thought. On April 5, 2019, he was appointed to the Board of MDEC. He also serves as a Board of Trustee for PADU Corporation, the performance and delivery unit of the education blueprint in the Ministry of Education.


Page 10 of 30

Panelist: Mr. Tan Chee Keong Designation: Chief Information Security Officer Organisation: Alliance Bank Malaysia Berhad Topic: CISO responsibilities

Bio data: Chee Keong has more than 28 years of experience in technology operations and tech risk management. He has helmed leading roles in local and regional organizations, serving in various industries, including financial services, consulting and government-linked organizations. His key skills include setting cyber security strategies and directions, managing cyber security programs and driving technology / process controls to manage cyber risks. .


Page 11 of 30

Panelist: En. Shamsul Baharin Deraman, CISA, CISSP Designation: Chief Information Security Officer Organisation: RHB Bank Berhad Topic: CISO responsibilities Bio data: Shamsul is currently playing the role of Chief Information Security Officer (CISO) in RHB Banking Group (RHB), one of the major banks in Malaysia. He is responsible for the overall technology and cyber risk management for the Group through formulation of relevant framework, policies, guidelines and deployment of risk management tools. He leads the 2nd Line of Defense within the Group through strategic plans, risk advisory, monitoring & reporting of technology and cyber risk matters. Before RHB, he was with a few multinational and local Information Security firms. There he led a group of consultants to provide information security and risk management services to local and multinational organisations. As far as his IT career is concerned, Shamsul actually grew up and spent his first nine years of professional career in a major Oil and Gas company. There, he accumulated the skills and know-how of various Information, Telecommunication and Networking Technologies. He is both a Certified Information Systems Security Professional (CISSP) and Certified Information Systems Auditor (CISA).


Page 12 of 30

Panelist: Mr. Devinder Singh Designation: Head of Technology Risk Organisation: Maybank Topic: Technology Risk Bio data: Devinder Singh , Head Technology Risk & Compliance Maybank, has been in the organisation for almost 7 years spending most of time focusing on Group Technology Risk and expanding into Regulatory compliance relating to Technology. Prior to Maybank , he was with Ernst & Young performing his role as IT Advisory consulting to multiple local clients. Part of his responsibilities is managing risk and ensure controls are adequately applied, developing of various internal tools / assessment kits , strengthening governance as the 2nd line of defence and regularly providing series of updates to Senior Management and Board level Committees on matters relating to Technology risk and Compliance. He works closely with external stakeholders in particular BNM, closely engaging them with regards to the recent RMiT and thereafter internalising them within Maybank .


Page 13 of 30

Panelist: Ts. Dr. Maslina Daud Designation: Senior Vice President

Cyber Security Proactive Services Division Organisation: CyberSecurity Malaysia Topic: Cyber security Bio data:

Dr. Maslina binti Daud is the Senior Vice President of the Cyber Security Proactive Services division in Cybersecurity Malaysia. Being a certified information security professional, she has vast experience in information and cyber security where security areas under her purview include; Security Management, Risk, Governance and Compliance, Cloud security, Business Continuity, IoT, Industrial Control Systems and Block Chain. She is also an Associate Fellow of National University of Malaysia and has published various papers in her focused areas.


Page 14 of 30

Panelist: Mr. Victor Lo Designation: Head of CyberSecurity Organisation: MDEC Topic: Cyber security Bio data: Victor Lo is an experienced professional more than (20) years of information security and risk consulting experience in both enterprise information security solution and specialize on Cyber Threat Intelligence Framework. Over the years, he has served businesses Across the region of the Asia South countries such as India, Turkey, Thailand, Vietnam, Philippines, Indonesia, Malaysia, and Singapore. Experience dealing with vertical industry primarily in South East Asia market and including Fortune 500 companies. Victor currently attach with MDEC heading the Cyber Security industry development. His key role will be driving Cyber Security as Catalyst for Digital Economy and promote collaboration among Cyber security industry Partner and innovation for cyber security ecosystem. Brief background of MDEC Malaysia Digital Economy Corporation is Malaysia government agency tasked to lead the digital economy development and lead implementation of digital economy roadmap.


Page 15 of 30

Panelist: Mr. Raymond Wong Designation: Chief Technology Officer Organisation: Zurich Life Insurance Malaysia Berhad Topic: Technology Operations Bio data: Raymond is the Chief Technology Officer for Zurich Malaysia. He has 24 years of experience in General insurance, Life Insurance and Takaful industry; as well as IT governance and consultancy. A hands-on person who started the career as a programmer, he specialized in application development and maintenance; IT management, and digital transformation. He has led and participated in many regulatory projects such as Y2K, JPJ E-Cover Note, GST, Motor De-Tariffication, Investment Link Sustainability Test and etc. Raymond is a Steering Committee Member of PIAM Fraud Intelligence System (FIS) implementation as well as national 5G implementation FSI sub committee member. Other career achievements include a successful merger and acquisition of a Takaful company, setting up and operationalizing of a new Takaful company, and a portfolio transfer from a Takaful company that had surrendered the operator license.


Page 16 of 30

Speaker: Mr. Timothy Snow Designation: Multi-domain Architect, Cisco APJC Organisation: Cisco Topic: Strategic framework for a growing threat landscape Bio data: Mr. Timothy Snow has over 20 years of experience in infrastructure and information security systems design. His goal is to help his customers realize their strategic business goals, leveraging security technology as an enabler. A 12-year veteran of Cisco, Tim has been providing detailed architectural service consulting to Enterprise, SP and Government customers with a focus on infrastructure security and threat response. Mr. Snow is also a member of the Cisco’s Technical Advisory Board (TAG) for its security products, vision and strategy. Prior to the current role at Cisco, he has had various roles in software development and TAC. A distinguished speaker with a passion for technology, Tim is a go-to-expert for his customers, partners and sales teams. Tim holds a Bachelor’s of Science in Computer Science from the University of Windsor (Canada), a Masters in Computer Science from the University of Michigan amongst multiple CCIE’s. He enjoys creating IoT home automation devices and sensors, retro arcade games and cooking.


Page 17 of 30

Speaker: Datuk Teoh Eng Kee Designation: Managing Director Organisation: Ektech Communications Sdn. Bhd. Topic: Mitigating Operational Risks through a Resilient Network Bio data: Datuk Teoh Eng Kee, is the founder and MD of EKTECH Group of companies. He has successful led and grown EKTECH from a small startup in 2002 to a group of companies providing ICT solutions and services to enterprises in Malaysia and Indonesia. Today EKTECH is one of the leading Managed Service Provider for enterprise wireless services over 4G, having pioneered the idea of using cellular wireless for enterprise-level data communication. Eng Kee brings with him a wealth of experience, in ICT and also from the Financial Industry, having started his early career as an analyst programmer in a major US investment bank and then moving up to be an IT Head for a local Bank later in his career, before venturing out to start EKTECH.


Page 18 of 30

Speaker: Mr. Khor Lee Pang

Designation: Country Solution Manager

HPE Pointnext Services

Organisation: Hewlett Packard Enterprise Topic: RMiT Co-Location as a Service Bio data:

Lee Pang is the country solution manager for HPE Pointnext services. In this role, he

has direct responsibility to manage services business related to hybrid cloud, data

center, ICT platform, storage, and securities across all customer segments. He is a

seasonal ICT professional specialize in helping customer with digital transformation

journey using Hybrid Cloud strategies and pioneering in on premise Cloud based pay-

per-use model.

Before taking on this role, Lee Pang spent 5 years driving Data Center and Cloud

business in South East Asia, Taiwan and Hong Kong markets; focusing in on premise

cloud computing technologies, Data Centre platform, storage, and security

technologies.

Prior to HPE, Lee Pang has held a number of management and technical positions,

including Country Cloud Leader and Service Delivery Manager in IBM Malaysia.


Page 19 of 30

Speaker: Mr. Ong Ting Yu Designation: Head of Consulting Organisation: Powerware Systems Sdn. Bhd. Topic: Data Centre Risk and Resilience Assessment (DCRA) – PWS Framework and Offering

Bio data: Ting Yu is the Head of Consulting for Powerware Systems Sdn. Bhd., a leading Data Centre Consultancy, Design and Build Provider in the country. Ting Yu graduated from University College London with a MEng Electronic and Electrical Engineering undergraduate master’s degree. Ting Yu is also an Uptime Institute Accredited Tier Designer as well as a Certified TIA 942-B Design Consultant. Ting Yu is involved in the design of many data centres and conducted several DCRAs for financial institutions.


Page 20 of 30

V. SHARE/GUIDE SPONSORS PLATINUM SPONSOR: Cisco Systems (Malaysia) Sdn. Bhd.

1. Silverlake

SILVER SPONSORS: Silverlake Group

Hewlett- Packard Enterprise


Page 21 of 30

VI. SHARE/GUIDE SPONSORS PRODUCT PAGES


Page 22 of 30


Page 23 of 30


Page 24 of 30


Page 25 of 30


Page 26 of 30


Page 27 of 30

VII. SHARE/GUIDE'S MISSION STATEMENT What is the SHARE/GUIDE Association? PERTUBUHAN PENGGUNA IT (I T U S E R S ASSOCIATION) or more commonly known as ‘SHARE/GUIDE’ is a non-profit association, whose member organizations are primarily end-users of technology and IT services. The association has served as a forum for IT users in Malaysia to network and exchange information, experience, thoughts, views and best practices since 1989. It is also an avenue for working collaboratively with IT service providers and other related groups to help members leapfrog in harnessing technology for their businesses and for greater mutual benefits. SHARE/GUIDE association members comprise o f organisations in the application of information technologies ranging from large and most sophisticated users of information technologies to small organisations in the country, and from diverse number of industries including government, banking and finance, insurance, telecommunications, petroleum, airlines, utilities, re t a i l , manufacturing and other commercial a n d p r i v a t e sectors. SHARE/GUIDE off ice bearers are elected during the B iennial AGM and serves a 2 year term. They are all volunteers with the common passion and dedication to help IT users and organizations make better use of IT in their respective industries and businesses. SHARE/GUIDE Mission To provide a forum representing organisations in Malaysia to “Share” (share information & experience) and “Guide” (guide each member) in the ever changing and increasingly challenging IT roles. SHARE/GUIDE Objective The primary objective is to promote greater exchange of information, experience, views and best practices among organisations and networking with each other to foster collaboration and development in the use of information technology amongst its members for the continued growth and development of the member organizations, the local IT industry and the country in general. Industry Influence SHARE/GUIDE provides its members with the added opportunity to work closer with service providers and provide them with more focused user feedback and suggestions to further enhance their solutions and services for mutual benefits. It also facilitates


Page 28 of 30

networking with other related industry groups or associations and/or related government bodies to enhance industry collaboration. Annual Activities SHARE/GUIDE organises many activities for the benefit of its members throughout the year with the above objectives as guidance. These activities include: - Selective technical training programs in collaboration with industry providers; - Site visits to learn about how IT is deployed in a customer environment; - CIO talk series where industry IT leaders gather to share; - Special Interest Groups (SIGs); - A 2 days’ Annual Conference where the latest technology and most relevant IT

subjects are presented and discussed (Note: Conference Fees are HRDF claimable); - Industry feedback group representing IT users when dealing with vendors/service

providers on collective issues or challenges. - Annual sports events, i.e. bowling, futsal, golf, treasure hunt. Benefits of joining SHARE/GUIDE:

• Participation in all SHARE/GUIDE activities throughout the year for staff of the member organization.

• Networking with other members to foster greater IT relationship, collaboration and knowledge sharing.

• 100% ROI as most of the activities are fully subsidized. Who can join SHARE/GUIDE? Open to all organisations of IT technology and services. Current members comprise of organisations from government bodies, banking, insurance, airline, telecommunications, manufacturing, utility, retail, automobile, services industries and IT suppliers. Membership Fee Membership Fee is RM1,000 per annum for each organization.


Page 29 of 30

VIII. ACKNOWLEDGEMENTS MANAGEMENT COUNCIL, SHARE/GUIDE IT USERS ASSOCIATION

CISCO SYSTEMS (MALAYSIA) SDN. BHD.

SILVERLAKE GROUP

HEWLETT-PACKARD ENTERPRISE

CYBERSECURITY MALAYSIA

Mr. Chu Hong Keong, CIMB

En. Mohd. Yuzaidi Mohd Yusoff, Bank Islam

Mr. Tan Chee Keong, Alliance Bank

En. Shamsul Baharin, RHB Bank

Ts. Dr. Maslina Daud, CyberSecurity Malaysia

Mr. Victor Lo, MDEC

Mr. Raymond Wong, Zurich Insurance

Mr. Devinder Singh, Maybank

Mr. Timothy Snow, Cisco

Datuk Teoh Eng Kee, Ektech Communications

Mr. Khor Lee Pang, HPE

Mr. Ong Ting Yu, Powerware

En. Mohd Suhail, Maybank

Mr. Ong Chin Seong, Powerware

The Management Council of t h e SHARE/GUIDE a ssociation wishes to thank everyone who has contributed in making the SHARE/GUIDE 2020 RMiT WEEK a success.


Page 30 of 30

IX. NOTES:

RMiT WEEK 2020

Documents