Virtual Global Banking Series
12th December | 23rd January | 13th February
14:30-16:00 CET
Powered By
In today’s regulatory environment, Third-Party Mandated Applications (TPMAs) have become indispensable tools for data submission, client integration, and cross-border collaboration in banking. However, their adoption can present significant challenges for CISOs, who must navigate stringent regulatory oversight while ensuring security, compliance and operational integrity. This exclusive three-part series provides an opportunity for CISOs to share peer-driven strategies to address these complexities.
Across the three sessions, participants will explore critical issues such as managing liability across regulated, client owned and partner bank platforms; ways to implement essential controls even when governance is constrained; and how to take collaborative action to secure cross-institutional operations within the banking sector. Designed by CISOs, for CISOs, this series offers an invaluable opportunity to benchmark approaches, exchange ideas, and develop confidence in navigating the challenges of TPMAs.
Register Now
RSVP here to attend this three-part banking series
Redefining Compliance: Navigating the Complexities of Regulatory Mandated Applications
As regulatory bodies increasingly mandate the use of Third-Party Mandated Applications (TPMAs) for data submission, financial institutions face unique challenges in balancing control, liability, and compliance. These platforms, essential for regulatory data submission and oversight, often limit the ability of institutions to implement independent security controls, positioning them in a complex landscape of compliance without full oversight.
This session will examine key issues surrounding TPMAs, focusing on:
- Control and Liability: Defining liability in the event of security incidents and clarifying the extent of institutional accountability for data submitted through TPMAs.
- Minimal Control Measures: Identifying essential controls, such as user access management and onboarding/offboarding protocols, to meet compliance requirements within restricted governance boundaries.
- Benchmarking Best Practices: Leveraging peer insights to understand how institutions in the U.S. and Europe manage TPMAs, balance compliance needs with operational constraints, and define their role in platform governance.
Led by Osama Jamaleddine, Divisional CISO for Corporate Banking, and Sholeen Barodawara, Deputy Divisional CISO at Deutsche Bank, alongside ISMG’s Anna Delaney, this 90-minute session—part of a three-part series—will follow ISMG’s Anti-Trust Framework. This framework ensures that discussions comply with antitrust laws, promoting a fair, open exchange on cybersecurity best practices and compliance while safeguarding competitive integrity.
Key Takeaways:
- An overview of TPMAs and their distinctive role in regulatory compliance.
- Peer insights on managing liability and implementing essential controls in environments with limited platform oversight.
- Strategic considerations for compliance that also support operational efficiency.
Meeting Client Expectations: Compliance and Integration in Client-Mandated TPMAs
As clients increasingly seek integration of financial services within their digital ecosystems, institutions face unique challenges in meeting client-mandated requirements through Third-Party Mandated Applications (TPMAs). These platforms, often integrated directly into client workflows, demand that institutions balance client expectations with the need for security and compliance while navigating liability complexities.
This session will explore key aspects of managing client-mandated TPMAs, focusing on:
- Integration and Compliance: Addressing how institutions meet compliance while supporting seamless integration into client platforms and workflows.
- Liability and Risk Management: Examining where liability rests when security incidents occur within client-driven TPMAs, and how institutions protect themselves.
- Client-driven Best Practices: Learning from industry peers about the strategies that work best for balancing client demands with secure operations.
Led by Osama Jamaleddine, Divisional CISO for Corporate Banking, and Sholeen Barodawara, Deputy Divisional CISO at Deutsche Bank, alongside ISMG’s Anna Delaney, this 90-minute session—part of a three-part series—will follow ISMG’s Anti-Trust Framework. This framework ensures that discussions comply with antitrust laws, promoting a fair, open exchange on cybersecurity best practices and compliance while safeguarding competitive integrity.
Key Takeaways:
- Strategies for navigating compliance within client-driven TPMAs.
- Insights on mitigating liability in platforms governed by client demands.
- Peer perspectives on balancing integration with operational security.
Collaborating Across Borders: Ensuring Security and Compliance in Market-Driven and Partner Bank TPMAs
In a global financial landscape increasingly reliant on cross-bank platforms and industry-wide TPMAs, financial institutions must adapt to complex environments dominated by partner banks and market expectations. This session will address how institutions can maintain control and compliance while navigating these collaborative platforms, where liability and influence are often shared or limited.
Key areas of discussion will include:
- Cross-Institutional Compliance: Exploring how to manage compliance across platforms shared with other financial institutions, where regulations may vary across regions.
- Shared Liability and Risk: Understanding the shared nature of liability on partner-dominated platforms and strategies for mitigating associated risks.
- Standardisation and Best Practices: Discussing how institutions can align on industry standards and leverage best practices for secure and compliant operations.
Led by Osama Jamaleddine, Divisional CISO for Corporate Banking, and Sholeen Barodawara, Deputy Divisional CISO at Deutsche Bank, alongside ISMG’s Anna Delaney, this 90-minute session—part of a three-part series—will follow ISMG’s Anti-Trust Framework. This framework ensures that discussions comply with antitrust laws, promoting a fair, open exchange on cybersecurity best practices and compliance while safeguarding competitive integrity..
Key Takeaways:
- Methods for maintaining compliance across cross-border TPMAs.
- Strategies for managing shared risks and liability within partner-driven platforms.
- Perspectives on setting and aligning with industry standards for secure and efficient operations.
Register
RSVP here to attend this three-part banking series
