SecureMAG Volume 6 - 2014
2 likes1,731 views
This document provides summaries of several events involving SecureMetric Technology: 1) SecureMetric hosted the ASEAN Financial Institution Conference in Yangon, Myanmar in March 2013 which brought together senior delegates from 20 Myanmar banks. 2) SecureMetric won the National Cyber Security Company of the Year Award in Malaysia in November 2013, recognizing its innovations and contributions to the cyber security industry. 3) SecureMetric participated in conferences in Cambodia and the Philippines to promote its mobile payment solutions like iReader and gained interest from banks in both countries.
SecureMAG Volume 6 - 2014
- 1. Not for Sale VOLUME 6 2014 SECUREMETRIC TECHNOLOGY GROUP A Continual Improvement Journey For ICT Industries About ASEAN Special column by Clifton Infographic About Asean Page 8 & 9 Page 14 &15 Page 16 SecureMetric Technology Wins National Cyber Security Company of the Year Award! CONTINUES ON PAGE 3 > Great Start to a Successful ASEANFIC in Yangon! MYANMAR: The ASEAN Financial Institution Conference (ASEANFIC) was first held in Myanmar on 1st March 2013 at ParkRoyal Hotel, Yangon. The conference was organized by SecureMetric Technology, hosted by Myanma Computer Company (MCC) and supported by MSC Malaysia. ASEANFIC successfully gathered around 60 senior level delegates from 20 banks all over Myanmar together with our distinguish speakers from Sweden, Germany, Malaysia and Thailand. This event facilitated a highly effective one day knowledge sharing session from the best brains in the financial and ICT industry. CONTINUES ON PAGE 5 > SecureMetric Technology Editorial Team Address: SecureMetric Technology 2-2, Incubator 2, Technology Park Malaysia, Bukit Jalil, 57000 Kuala Lumpur, Malaysia. Tel: +603 8996 8225 Fax: +603 8996 7225 THANK YOU Joining hands together with us throughout ASEANFIC 2013 TM Supported by
- 2. Payment Settlement Remittance Asia 2013 Delegates discussing SecureMetric’s mobile payment solution. Delegates being enlighten by Danny on SecureMetric solutions and products. SecureMetric Joins the 4th Annual Mobile Payments & Banking CAMBODIA: SecureMetric joins the 4th Annual Mobile Payments & Banking for Greater Mekong & Emerging Market in NagaWorld Hotel, Phnom Penh, Cambodia on the 12th and 13th June 2013. The conference was organized by Magenta Global Singapore and SecureMetric was one of the only three exhibitors in the conference. Although it was a small conference featuring only approximately 60 delegates, it was a successful conference because it was a highly focused conference where most delegates are middle and high level managerial officers from ASEAN financial institutions and corporations, the speakers were also carefully selected by the organizer with informative and interesting presentations. During the conference SecureMetric was focused on promoting mobile smart card reader which amaze every delegates who came by the booth, there are not many mobile smart card reader in the market are designed and built just like iReader. There have been countless enquiries on iReader and other mobile smart card reader as well, other than that, Cambodia bankers are also interested with SecureOTP solution which offers multi-factor authentication method. Overall, the delegates are happy with the conference and SecureMetric has manage to build relationship with several Cambodian banks and with the response from the conference, it is possible SecureMetric might move up the date to open a branch office in Phnom Penh to provide support for the Cambodian market. PKI-in-the-Box PKI Appliance Saves time and resources needed to deploy PKI, while reducing risks associated with integration of multiple, complex, technologies. PKI-in-the-Box South East Asia Exclusive Partner PHILIPPINES: Held last May 30 and 31, 2013 – SecureMetric recently joined the Payments Settlements Remittances Asia 2013, attended by high-level decision makers by different industries such as Philippine Government Procurement Service or PhilGEPS and PAGIBIG or Home Development Mutual Fund, Banking Industry, Manufacturers and Retailers, Mobile Payment Solution Partners who is very much interested in what is new in their markets today. SecureMetric also got the opportunity to meet the delegates on the Day 1 Plenary and got inside information on where they positioned themselves in the technology and information market. Attendees from different parts of the globe have conveyed interest in visiting SecureMetricÊs booth on the IReader which we are actively promoting in the Philippines and have expressed curiosity in who is SecureMetric in the business of providing Digital Security. On hand to readily introduce the company is Edward Law, CEO of SecureMetric and Chin Wan Lim, Regional Sales Director. Noteworthy information, Banko Sentral ng Pilipinas (PhilippineÊs Central Bank) or BSPÊs own Director for Payments and Settlements System, Ms. Bella Santos, have expressed acknowledgment when in a discussion found out that it was a Joint Venture between SecureMetric and Primekey have just recently finished the Public Key Infrastructure project for Philippine Government thru DOSTÊs ASTI (Advanced Science and Technology Institute). This is definitely a break-through project for Philippine Government and SecureMetric. The attendance of SecureMetric in this conference has made sure that IReader is readily available in the market, made known to high level decision makers and IT Directors of this kind of technology EMV Level 1 Certified, abilities of accepting payments on a mobile device has impressed delegates who visited the SecureMetricÊs Booth. Reactions have been very positive in SecureMetricÊs iReader, delegates are curious what is the way and future trends in technology. As they say, Its just a matter of time when all people will have their digital wallet and SecureMetric is leading the way.
- 3. SECUREMAG VOLUME COVER STORY 6 2014 03 MALAYSIA SecureMetric Technology Wins National Cyber Security Company of the Year Award! Organized by: K UALA LUMPUR: SecureMetric Technology Sdn. Bhd. was named the Cyber Security Company of the Year, during the Cyber Security Malaysia, annual awards gala dinner held on 14th November 2013. This awards was presented by the Deputy Minister of Ministry of Science, Technology and Innovation, Datuk Abu Bakar bin Mohamad Diah. Endorsed by: Technology & Innovation. Every year, these awards were presented to distinguished individuals and organizations in recognition of their excellence achievements and contribution to the cyber security industry in Malaysia. SecureMetric was assessed based on a few factors including, degree of innovation, impact of innovation on the industry, financial success, growth, customer wins and commitment on research and development. Awards nominations were individually evaluated by Deloitte Consulting Malaysia. As the Company of the Year Award winner, A big congratulations to SecureMetricÊs management & personnel on this proud accomplishment. This is a great milestone achievement by SecureMetric Technology where this award marks SecureMetric as an Innovative Information Security Company that shows excellence in developing new products and technologies within the digital security industry. The Malaysia Cyber Security Awards are intended not only to recognise the efforts of information security professionals, homegrown SMEs and global organisations, but also to encourage innovation and spark strategic alliances within the local security and ICT industry; thus, emphasising the importance and growth of information security in Malaysia's vibrant ICT landscape. The 2013 edition of Cyber Security Malaysia - Awards, Conference and Exhibition (CSM-ACE 2013) is an annual awards program organized by Cyber Security Malaysia, which is MalaysiaÊs national cyber security professional and also an agency under the Ministry of Science, CHARTER & OBJECTIVES To promote and highlight organisations that have demonstrated best practices in the information security arena. SecureMetric Technology at CSM-ACE 2013 Y.B. Datuk Dr. Abu Bakar bin Mohamad Diah for Malaysian companies to ensure their digital assets are protected and safeguarded against cyber security risks such as data loss, damages, cyber-attacks and other cyber-criminal acts. He cited a report from Gartner which says that Malaysia's total information technology (IT) spending for 2013 is expected to reach RM61.9 billion this year, up 6.4 per cent over 2012; and that Worldwide IT spending is forecast to reach US$3.8 trillion in 2014, a 3.6 percent increase from 2013. CSM-ACE delegates asking questions to find out more about SecureMetric The 2013 edition of Cyber Security Malaysia - Awards, Conference and Exhibition (CSM-ACE 2013) officially began at The Royale Chulan Hotel with a call by the Deputy Minister of Science Technology and InnovationsÊ (MOSTI) The Malaysia Cyber Security Awards were created to honour individuals and organisations who contributed to Malaysia's cyber security or information security. The awards are conferred in recognition of their innovativeness, commitment, industry/product/service leadership, and sound business strategies. With the theme, ÂSecuring Cyberspace for Economic GrowthÊ, the CSM-ACE 2013 focuses on the strategic role of cyber security in powering MalaysiaÊs economy. CyberSecurity MalaysiaÊs Chief Executive Officer Dr. Amirudin bin Abdul Wahab said on his welcome speech that the CSM-ACE has become one of the most anticipated annual events in the regionÊs cyber security industry calendar. „The CSM-ACE is the only 3-in-1 event that consists of an Awards ceremony, a Conference, and an Exhibition‰, said Dr. Amirudin. CSM-ACE 2013 conference is a platform for cyber security researchers and industry practitioners to discuss cyber security policies at national and global perspectives with an aim to develop more robust governance and compliance mechanisms. This event brings together over 300 leading cyber security experts and leaders from Malaysia and within the region participating in multi-track conference sessions. SecureMetric Technology is proud to participate in CSM-ACE 2013 as an exhibitor and also Award winner at the Gala Dinner. To uphold the cyber security profession by recognising innovativeness and contributions by the professionals and practitioners. To encourage volunteerism and participation in cyber security awareness programmes that would result in cyber security acculturation in the country. To encourage innovation, commitment, leadership and corporate excellence in the sector, and promote healthy competition within the industry. To ensure fair, transparent and robust award selection and recognition. To enhance the reputation of CyberSecurity Malaysia as the preeminent industry player in the country. Y.B. Datuk Dr. Abu Bakar bin Mohamad Diah and Chief Executive Officer Dr. Amirudin bin Abdul Wahab visiting SecureMetric booth during CSM-ACE conference
- 4. SecureMetric Honored to be a Part of the National Digital Conference 2013 KUALA LUMPUR: SecureMetric was honored to be a part of The National Digital Conference 2013, a national level initiative that focuses on existing and future trends in enhancing civil service delivery via digital technologies. NDC 2013 is also a platform to promote innovation as well as to forge synergistic alliances between ICT industries in the digital sphere. This conference which was held on the 2nd and 3rd July 2013, laid out thought provoking topics by renowned speakers as well as encourage open interaction and collaboration between the Government and the ICT industry. products that we showcased during NDC 2013 is iReader; a mobile smart card reader that is perfect for mobile payment as it reads credit and debit cards. NDC 2013 supports the Government Digital Transformation agenda and adds momentum to existing initiatives besides creating a forum for information sharing and networking. Therefore, we at SecureMetric think that it is the best avenue to showcase all of our products since we have broad solutions that are in line with the Government Digital Transformation agenda. For example, one of the interesting The use of iReader directly supports The Economic Dimension of Digital Malaysia which covers enterprise enablement and e-commerce. This will in turn increase GNI contribution, wealth generation and market capitalization. However, the highlight of our exhibition is the Advanced Digital Signature Solution (ADSS), a comprehensive, high-performance digital signature solution that can be used to sign all digital documents such as invoices, statements, forms and etc. This solution managed to attract the interest of a few government agencies as they believe the use of this solution in their website can enhance the interaction between government and the public as documents like application forms can be sign digitally so that the public does not have to take time off from work in order to submit the form to a government office. The public can now upload or email electronic forms to related agencies and the form can be signed digitally by a government officer. This will also increase MSC Malaysia Certified Solutions ews Straits Times (NST), MalaysiaÊs oldest newspaper still in print features SecureMetric Technology in their July 13th 2012 issue newspaper titled „MSC Malaysia Certified Solutions – Immense impact to industry and consumers‰, SecureMetric Technology is the only MSC certified company among other 8 companies that specialized in digital security featured in the same issue. N MSC Malaysia Certified Solutions Immense impact to industry and consumers The article was about MSC certified companies undergoing assessment under MSC Malaysia Certified Solution which was independently reviewed by TUV Rheinland. „When you deal with organizations where digital security is their top priority, you have to make sure that your security is impeccable.‰ – Mr. Edward Law, SecureMetricÊs CEO. SecureMetric SecureTMS-RA has been assessed and tested against stringent criteria specified in the MSC Malaysia Certified Solutions „PaSs-RF‰ Standard and successfully fulfilled all the criteria and certified with MSC Malaysia Software Product Rating Assessment & Rating Standard requirements. SecureTMS-RA is a complete lifecycle management system where it also offers end-user self-service facilities to minimize efficiency and transparency and at the same time eliminate expensive paper based process. This is in line with The Governance Dimension of Digital Malaysia, which encompasses both the public and private sectors, aiming to enable the government to better reach out to the rakyat, enhance transparency and further democratize the nation. SecureMetric was glad that we took part in NDC 2013 as it was a well-organized event where we had a great time introducing our amazing products and solutions to high quality delegates from the public and private sector. When you deal with organizations where digital security is their top priority, you have to make sure that your security is impeccable. Mr. Edward Law SecureMetric’s CEO administrator intervention, it is built on open standard architecture and a JAVA based system therefore it provide maximum flexibility and a cross-platform compatibility.
- 5. SECUREMAG VOLUME EVENT & NEWS 6 2014 05 ASEANFIC a Further Successful Event in Kuala Lumpur ASEANFIC KL was attended by more than 40 delegates from almost all the major banks in Malaysia such includes Maybank, CIMB, RHB Bank, Bank Islam, Affin Bank, Hong Leong Bank, Ambank, Bank Muamalat and UBS. Mr Bharat Singh, our distinguish guest from Central Bank of Myammar had added a lot more excitement into this event. There were also representatives from Bank Negara Malaysia (Central Bank of Malaysia) and MIMOS (R&D Agency of Malaysian Government). 2nd Edition FIC 21 May 2013 Kuala Lumpur, Malaysia ASEAN Financial Institution Conference he 2nd edition of ASEAN Financial Institution Conference (ASEANFIC) was held on 21st May 2013 at The Royale Chulan, Kuala Lumpur with great success. Kuala Lumpur is chosen to host to the 2nd edition of the conference after the 1st edition kicks off in Yangon, Myanmar on 1st March 2013. ASEANFIC T is a roadshow based non-profit initiative ICT for Banking Industry centric conferences that is catered for financial institutions across South East Asia. It was organized by SecureMetric Technology and supported by Cyber Security Malaysia (CSM) and MSC Malaysia. The next destination for this conference is in Jakarta, Indonesia. This Kuala Lumpur edition was officiated by CSMÊs CEO, Dr. Amirudin Abdul Wahab and follow by the VP of MDEC, Mr. Michael Warren giving an opening speech. The VIP for this event was Mr. Bharat Singh, the Deputy Director General of Myanmar Central Bank. Mr. Bharat shared interesting insights on Myanmar banking market and some of its future roadmap, surely it attracted many participants interests into this newly emerging market. Other MSC companies that supported this event with their speakers for the knowledge sharing sessions are Cyber Intelligence Sdn Bhd, ManagePay Sdn Bhd, UNOS and Tess International. PrimeKey Solution AB from Sweden also attended to present during ASEANFIC Kuala Lumpur. As with the first ASEANFIC in Yangon, the KL edition also wraps up with a cocktail party and Lucky Draw. Four consolation prizes of ASEANFIC exclusive tumblers were given. The main prizes of iPad, iPad mini and iPhone 5 were given to three lucky winners. During the cocktail party, the delegates had more time to interact with the speakers and sponsors of ASEANFIC KL. It was a good time to find out what is currently needed by the financial industry and also their future road map. This conference was a great way for the IT Industry to touch base with Financial Industry in order to create products that will have ready users. FROM PAGE 1 > 3rd Edition FIC ASEAN Financial Institution Conference Jakarta 2013 23rd May 2013 Jakarta, Indonesia ASEANFIC Jakarta Triumph ASEANFICÊs third chapter was held in Jakarta, Indonesia on Thursday, May 23, 2013. The venue of the event was in World Trade Center SudirmanÊs Penthouse Floor, where Mercantile Club is. It is a prestigious athletic club and one of the oldest in Indonesia of its kind. The event was successfully accommodated around 100 guests ranging from Banks, Insurance Companies and other Financial Institution Companies. This event successfully organized with great cooperation between SecureMetric as the organizer and Sarana Yukti Bandhana (SYB) as the local host for IndonesiaÊs chapter with the support from MSC Malaysia. ASEANFIC started with a welcome speech delivered by the organizing chairman of ASEANFIC, Mr. Lim Chin Wan and opening remarks by Ms. Angela Ker, Senior EVP of SYB. Mr. Bharat Singh, Deputy Director General of Central bank of Myanmar gave his presentation by sharing interesting insights on Myanmar banking market and the national roadmap on developing the financial sectors in the country. Mr. Raymond S. Santoso, Vice President of Business Development of SecureMetric gave his presentation about Threats & Opportunity of Mobile Device Technology for the Financial Industries in Bahasa Indonesia. Then, the presentation is followed by detail presentation of Mobile POS presentation by Mr. Ng Kian Seng, CTO of ManagePay. The first edition of ASEANFIC started off with welcoming remarks from Mr. Lim Chin Wan, the Regional Sales Director of SecureMetric who is also the conference Chairman followed by opening remarks by Mr. Brian Aung Soe Lin, CEO of MCC. The conference then continues with the presentations from MSC Status companies from Malaysia such as Cyber Intelligence, SecureMetric Technology, ManagePay, Cyber Village and eProtea. There were also speakers from BCG Sweden, the Swedish clearing house who has shared on how is their approach on introducing the highly innovative eID services in Sweden; Utimaco from Germany, they shared about the European way of protection banking transaction via highly secured Hardware Security Module; and lastly a Data Centre expert from Site Preparation Management Co. Ltd. Thailand. Throughout the presentations, all of the delegates showed interest and asked relevant questions to the speakers. Since Myanmar has been touted as the new Other participating partners who given their presentation are Mr. Kirby Diong, Regional Sales Director of Unos, Mr. Sivanathan Subramaniam, CEO of Cyber Intelligence, Mr. Satish Rai, Vice President of TESS International. All the speakers are given amazing astonishing souvenirs. The conference wraps up with a Lucky Draw with brand new iPad Mini, iPad and iPhone 5. Many are very grateful on attending ASEANFIC event due to not just gaining precious knowledge, acquaintances and even new prospect for business. 1st Edition FIC ASEAN Financial Institution Conference 1 March 2013 Yangon, Myanmar emerging market, it is clear that the people from the financial industry are really open to new ideas and understand the importance of learning from other countriesÊ experiences will shorten their learning curve. All the supporting partners were also impressed with the quality of the event and enjoyed the warm atmosphere and manage to network with the delegates during the coffee and lunch breaks, most of them were confident this will give them the kick start to consider serious venture into Myanmar market eventually. The conference wraped up with a cocktail party where attractive prizes such as iPad, iPad mini and iPhone 5 were given out to 3 lucky winners. It was a great chance for the delegates, sponsors and organizer to interact under a more relaxed setting. Overall, everyone was satisfied with how the conference was organized and benefitted from the contents of the conference. We at SecureMetric look forward to enjoy Myanmar hospitality and graciousness at next yearÊs edition of this conference.
- 6. Manila Delegates Looks Forward to ASEANFIC 2014! MANILA: Attended by more than 80 delegates from 30 banks, the 4th Edition of the ASEAN Financial Institution Conference, held in Manila gave the delegates an experience they truly enjoyed. It was a great day of sharing and networking for everyone who attended. The event started with a welcoming speech from ASEANFIC ManilaÊs local host, eTeligent. Right from the start, we can feel the excitement in the atmosphere. The enthusiasm showed by the delegates only gave the speakers more energy to present the topics. The first topics presented was by Lim Chin Wan, the Regional Sales Director of SecureMetric Technology Inc. which talks about Vulnerability Management. This topic garnered a lot of inquiries from the floor. Mr. Chin Wan also invite the banks which attended to try out a free Vulnerability Scan on their bankÊs website. domain where PT Aprisma Indonesia presented their technology which spellbound the delegates. The last presentation slot was a workshop where SecureMetricÊs team show the delegates how to use Vulnerability Management to secure the bankÊs IT resources. A total of 5 banks signed up for the free Vulnerability Scan. About ASEANFIC The event was divided into 2 session. The session before lunch focused on IT security where the session after lunch focused on payments. Most of the delegates were also very interested in the mobile banking HANOI: The final edition of ASEANFIC 2013 was held in Hanoi, Vietnam. The event saw more collaboration between the bankers and the IT security community to further boost the IT security landscape in Vietnam. Speaking during the event, Mr. Le Manh Hung, Director General, State Bank of Vietnam, is excited that the delegates were so engaging and so many questions were asked. He is very encouraged to find that many banks in Vietnam is looking at technology to help secure their IT resrouces. ASEANFIC hope to be a one-stop shop for FIC ASEAN Financial Institution Conference Manila 2013 3rd September 2013 Makati City, Philippines Highly Engaging Session at ASEANFIC Hanoi bankers and IT security specialist, with everything from getting knowledge to networking; from fellowship to facilities for training, coaching and mentoring. During the morning session, there was a lot of interest in the topic of Branchless Banking. A video about Brancless Banking was played to show the concept and how it will work in Vietnam. FIC ASEAN Financial Institution Conference The event ended with the big bang lucky draw where we saw 3 lucky winners taking home an iPad Mini, the New iPad and the iPhone 5. The closing ceremony was officiated by Cyber Security MalaysiaÊs, Mohd. Anwer. The delegates who were tired towards the end of the event found ASEANFIC to be very informative. One of the delegates mentioned that ASEANFIC should be held on a yearly basis and more speakers should be invited to share their experience. Previous edition of the ASEAN Financial Institution Conference 2013 5th Edition Hanoi 2013 18 th September 2013 Hanoi, Vietnam SEAN Financial Institution conference was founded by SecureMetric Technology together with a group of volunteers from ICT and Financial Institutions across ASEAN. This initiative was conceptualised after many negative comments were received from both vendors and also top level officers from financial institutions who had regularly participated many similar conferences. It has been too costly for sponsoring or participating while sometimes there were too many selling presentations. We decided to take the initiative to transform and create another alternative event to the industry thus ASEANFIC is formed. A 4th Edition Eric Tachibana, COO of the Swiss UBS Bank, delivered a very interesting paper about implementing Social Networking in banks. It was interesting to know that a private social network in a big organisation such as UBS can help make the whole organisation more efficient while at the same time get everyone in the bank to be come more friendly to each other. There was also a workshop with SecureMetric in Vulnerability Management. Volunteer banks who submitted their bank website for vulnerability scans benefited the most from the workshop. Eric Tachibana, Tachibana, a COO of the Swiss UBS Bank. The event ended with after conference cocktail at New World Hotel. During this time, the delegates and the speakers got to know each other in a more relax environment. Chats and laughter can be heard from everyone at the cocktail hall. The lucky draw was also held at the same venue where an iPad Mini, a New iPad and an iPhone 5 was given away. ASEANFICÊs intention is to establish a highly effective knowledge sharing and industrial focus business networking event across the region. This event will be running purely on Non-Profit initiative where all the costs will be shared and borne by the supporting vendors and/ or organisation. It will also aim to bring in only high quality focused speaking topic without any selling approach; and to encourage vendors to send in their speakers at very minimal costs. 01 ASEAN Financial Institution Conference 02 ASEAN Financial Institution Conference 03 ASEAN Financial Institution Conference 04 ASEAN Financial Institution Conference 05 ASEAN Financial Institution Conference FIC 1st March 2013 Yangon, Myanmar FIC FIC 21st May 2013 Kuala Lumpur, Malaysia Jakarta 2013 23rd May 2013 Jakarta, Indonesia FIC Manila 3rd September 2013 Makati City, Philippines FIC Hanoi 18th September 2013 Hanoi, Vietnam 2013 2013
- 7. Affiliate Partner PARTNERS and SPONSORSHIP Premium Partner USD 3000 USD 6000 Keynote Speaking Slot One of the Following: Partners and Sponsorship Collaborations Tech / Knowledge Sharing Speaking Slot (20 minutes) ASEANFIC & ASEANDIF welcomes all sponsoring partners and collaborations from any government entities, professional firms and e-commerce enterprise. ASEANFIC 2013 is proudly supported by MSC Malaysia. Being a non-profit initiated platform, we are able to deliver great content and benefits to our partners and delegates who participate in the event. Speaker Profile on Marketing Materials Panel Discussion Speaker Information Counter/ Booth Full Delegate List Company Profile on Marketing Materials 500 words Article Write Up on Yearly Newsletter Half Page Advertisement on Marketing Materials on Yearly Newsletter Cocktail Speaking Session Logo Printing on Merchandise & Gift Half Day Tailored Workshop ASEAN Digital Identity Forum USD 7500 Preparing for Your Next Transaction Issue ounded in 2013, ASEAN Digital Identity Forum („ASEANDIF‰) was established by a non-profit initiative group of collaboration agencies and partners across South East Asia with the following objectives: F Myanmar Yangon FEBRUARY ASEAN Digital Identity Forum • To enhance public and industry understanding of the significance of public key infrastructure („PKI‰) products and services by focusing the concerns of authenticity, integrity, confidentiality and non-repudiation in electronic communication between Government, Banking, Commerce and Enterprises. • To resolve issues regarding open network security, cross country PKI interoperability between South East Asia; • To promote the adoption of PKI products and services locally, regionally and globally by recommending international accepted technology standards and guidelines for use of PKI in various industries. Therefore, ASEANDIF is inviting and USD 1000 Thailand Bangkok welcoming all entities from Government, Universities, Professionals firms as well as commercial enterprise to share and promote the knowledge of PKI products and services. ASEANDIF will create an open dialogue about all PKI related topics presenting innovative new formats and contents. We are looking for constructive, challenging, and enjoyable dialogues always at a great venue with marvelous food, nice coffee, cool gift and less collateral. Vietnam Hanoi MAY Philippines Makati MARCH APRIL Indonesia Jakarta AUGUST * Five editions of ASEANFIC will be organized in year 2014. The exact date and venue will be comfirmed on December 2013. The Laos and Cambodia editions are still yet to be decide. Laos Vientiane Cambodia Phnom Penh Malaysia Kuala Lumpur NOVEMBER
- 9. Malaysia, a middle-income country, has transformed itself since the 1970s from a producer of raw materials into an emerging multi-sector economy. Under current Prime Minister Najib Razak, Malaysia is attempting to achieve high-income status by 2020 and to move farther up the value-added production chain by attracting investments in Islamic finance, high technology industries, biotechnology and services. The country is multi-ethnic and multi-cultural, which plays a large role in politics. The constitution declares Islam the state religion while protecting freedom of religion. The government system is closely modelled on the Westminster parliamentary system and the legal system is based on English Common Law. Petronas Twin Towers KLCC, Kuala Lumpur
- 10. 10 SECUREMAG VOLUME EVENT & NEWS Mr Brian Aung Soe Lin, CEO of Myanma Computer Company giving opening remark during ASEANFIC Yangon. Registration in the early morning 1st March at ParkRoyal Hotel, Yangon Myanmar. 6 2014 Left to right: Mr Bjoern Jansen from Utimaco Germany, Mr Konstantin Papaxanthis, CEO of Primekey AB and Mr Edward Law, CEO of SecureMetric Technology in deep discussion during one of the coffee break. ASEANFIC Yangon was a success with a full house attendance from most of the banks in Myanmar. Mr Ng Kian Seng, the CTO of Manage Pay Berhad giving a talk on ‘Empowering SME with Mobile Payment’ . Mr. Fredrik Eriksson from BCG, Sweden sharing success story with BankID. Captivating the audience with his onstage presence is Mr Jeffrey Fok from eProtea. Mr Fok’s presentation was about One Stop Epayment and Card Management System. One of the speakers during ASEANFIC Kuala Lumpur Mr. Satish S. S. exchanging business cards with the VIP during the event, Mr Michael Warren. Opening remarks by the CEO of Cyber Security Malaysia, Dr. Amirudin Abdul Wahab. During the registration counter process at the Royale Chulan Hotel, Kuala Lumpur on 21st May.
- 11. SECUREMAG VOLUME EVENT & NEWS 6 2014 A lot of the delegates are looking foward to the first presentation from the Deputy Director General, Central Bank of Myanmar, Mr. Bharat Singh on the Myanmar Banking market. ASEANFIC Conference is a good event for networking as seen in this picture between Mr Bharat Singh, Deputy Director General, Central Bank of Myanmar and Angela Ker. Mr. Sivanathan Subramaniam, CEO of Cyber Intelligence Sdn. Bhd. was one of the speakers during ASEANFIC Kuala Lumpur. Danny, one of Planning Manager team cum as the emcee on that day was so excited to kicked off the event. SecureMetric’s Regional Sales Director, Mr. Lim Chin Wan sharing a light moment with a delegate. The VIPs at ASEANFIC Kuala Lumpur using this conference as a great networking apportunity. Some of the delegates seating on their seats and exchange contact numbers while waiting for the event to start. Mr Ng Kian Seng, CTO ManagePay Systems Berhad (right) entertaining Mr Leo Nugraha (left), the bussiness Development Director from Softkey e-Solution. Angela Ker. the Senior EVP of SYB Indonesia giving the opening remark, welcome all delegates and speakers to ASEANFIC Jakarta. The Organizers are busy registering the delegates during ASEANFIC Jakarta at Mercantile Athletic Club Penthouse 18th Floor World Trade Centre on 23rd May 2013. After the conference event is over, some of the staff from SYB who helped to organize ASEANFIC Jakarta were happy to be photographed. 11
- 12. 12 SECUREMAG VOLUME EVENT & NEWS Rage Callao, Philippines Government PKI Project Head Division Chief, Knowledge Management ASTI giving a speech title: How the PH Government PKI can help banks secure their resources? All participants enjoying their lunch during lunch break. Lunch is served by New World Makati Hotel, Philippines. One of the delegates took the opportunity of asking a questions during the question and answer session. Erinandes (right), one of ASEANFIC Manila speakers is exchanging business card with representative from MSC Malaysia. Mr Zaw Lin Htut (left) CEO Myanmar Payment Union having a deep conversation with one of the delegate. Mr Zaw has been in the banking industry for more than 8 years. Kim Ong Business Development Director, TRIASET Sdn. Bhd. sharing something interesting. Kim is responsible for the business development activities of the organization in the international region. 6 2014 Mohamed Anwer Mohd. Yusof, Head, Innovation & Commercialisation, Cyber Security Malaysia gave a speech that conveys a message with a good sense of humour. ASEANFIC Hanoi keynote speaker, Eric Tachibana, Chief Operating Officer APAC, UBS is sharing the knowledge about “People Engagement via Enterprise Social Networks”. Outside of work, Eric is a teacher in the MBA program for the National University of Singapore. Delegates enjoy listening to the presentation from the speakers. A networking session with the speakers of ASEANFIC Hanoi. Mr Navin Vasdave, Cyber Security Specialist presenting and discussion about vScan during a discussing workshop by SecureMetric . Participants feeling refreshed after a little bit of stretching .
- 13. SECUREMAG VOLUME ARTICLE 6 2014 13 MULTIFACTOR Multifactor Authentication the Current Trend Multi factor authentication or two-step verification has been a hot topic among users and consumers. Google trends of these terms have been seeing significant increase since 2011. ItÊs been fact and most of the users know that passwords alone are not enough to protect us from hackers and cyber criminals. Multi Factor Authentication What is Multi Factor Authentication? In the world of Internet where hackers are easily able to jailbreak secure websites, single factor authentications like a mere seven letters password can no longer hold your information from the hands of wrong doers. Keeping that in mind, most of the big brands like the Facebook, Yahoo, Microsoft and Apple have implemented a security feature The Two factor authentication/ Two step verification that requires two pieces of secret information that would grant access to your secure stuff online. Like the scenario mentioned above, when there is an implementation of more than one form of authentication to verify the legitimacy of a particular correspondence, it is called as Multifactor Authentication (MFA). The notion of this secure measure is to create a layered defense mechanism, which makes it difficult for the hackers to find their way to the secure information. In general, the three important factors that are considered for a multifactor authentication are: MULTI-FACTOR AUTHENTICATION REQUIRES AT LEAST TWO OF THE FOLLOWING THREE FACTORS SOMETHING YOU HAVE, SOMETHING YOU KNOW, SOMETHING YOU ARE One Time Password 2 Step Verification 2007 2009 2011 Something You Know (Knowledge factor) - namely the Passwords, PIN numbers, Patterns etc. Something You Have (Possession factor) - Connected/Disconnected tokens, Smartcards, Mobile phones etc. Something You Are (Inherence factor) - The biometrics of the individual. In most of the security measures pertaining to the Internet, the first two factors are taken for serious consideration in order to validate a transaction. Multi factor authentication passcode are used depending on the service and the security settings. These additional passcodes can be required on every login, every transactions or just when logging in on new machines or from new locations. Google first offered two factor authentication for its Google Apps and Gmail account back in 2010. Facebook comes up with its own version on 2011, and following by other big Internet brands, LinkedIn, Dropbox, Apple, Evernote, Microsoft and Twitter has been implementing multi factor authentication to their system last year. We believe passwords could be replaced by something better in the future but multi factor authentications or two-step verification could be the best defense in this near future. 2013 Here is how to activate multi factor authentication or two-step verification in some popular service. Google. Click Account under your user tile in the upper right corner. ClickSecurity and then click Settings under two-step verification. Twitter. Click the gear and then Settings. On the Account tab, scroll down and choose Require a verification code when I sign in. LinkedIn. Click Privacy & Settings (under your profile photo in the upper right corner). Click the Account tab, then Manage security settings, and choose to Turn On two-step verification for sign-in. PayPal. Click Profile, then My Settings. Then click Get started next to Security key. Facebook. Click the Setting gear in the upper right corner, then Account Settings. Click Security and choose Login Approvals.
- 14. 14 SECUREMAG VOLUME ARTICLE 6 2014 CERTIFICATION Beyond ISO 9001:2008 (QMS), A Continual Improvement Journey for ICT Industries - ISO 27001:2013 (ISMS) By Clifton H. Fernandez, Training and Certification Director for Royalcert International Registrar (South East Asia), he can be contacted at clifton@royalcert.com.my serves to reduce the chance of mistakes and thus reduce rework, mistakes and ambiguity • By increasing the motivation of your workforce through participation and enhancement to business ISO 9001:2008 is an International Quality Management management by the management team Standard which companies can use to demonstrate their • By reducing the margin for error the system will ability to meet their customer's requirements. In order to ensure a marked consistency in the delivery of meet the requirements of the Standard, businesses will need goods and services which in turn will afford you a to have in place a documented Quality Management System noticeable improvement in your business and to be able to demonstrate its implementation and performance. ongoing maintenance of the 8 renowned management principles ie. customer focus, process & system approach, supplier management, leadership, factual decision making, ISO 27001 involvement of people and a continual improvement business objective approach. Businesses can benefit from some if not all areas of the standard. It is a tool to ensure effective and efficient practices are put into place and that once in place they are consistently monitored and reviewed in order to continually improve upon them. What is ISO 9001:2008 (Quality Management System, QMS) Why ISO 9001:2008 Achieving accredited registration to ISO9001:2008 will not only improve the efficiency of the business, but will open up further opportunities with potential customers who recognize registration as an indicator of your company's ability to efficiently and professionally fulfil or exceed their requirements. ISO 9001:2008 is beneficial to small and large businesses alike. You may think that your business is too small to need a set of manual and procedures, however it is a good idea to implement these while the business is at a level where this adaptation is a relatively small task. By taking this approach while the business is small it will not only mean that it becomes part and parcel of inducting new staff to the organization but it in itself will be a beneficial tool for any future business growth. ISO 9001 Information is an asset. Which, like other important business assets, needs to be protected. Dependence on information systems leaves an organization vulnerable to security threats such as data loss, breach of confidentiality, hacking and even terrorism. Legal and contractual requirements, as identified in Sarbanes-Oxley, PCI-DSS, and numerous different country regulations dictate controls and levels of assurance needed for practice. Information assets include tangible and intangible asset, eg. paper documents, electronic files, business applications, server and storage, client terminals and computers, intangibles (People, intellectual property, know how) etc. Information security is often represented by the following three aspects, known as the CIA of information security: • Confidentiality Ensuring that information is accessible only to those authorised to have access • Integrity Safeguarding the accuracy and completeness of information and processing methods • Availability Ensuring that authorised users have access to information and associated assets when required Continual Improvement approach of ISO Information security is not just about firewalls, passwords 9001 (QMS) and antivirus tools. Organizations need to effectively ISO 9001 places emphasis on the continual review of company performance and attention to any internal or external changes that could affect the business. Monitoring these areas closely and taking any necessary preventative action, paves the way for a successful growth. Addressing potential problems before they occur as opposed to adopting a fire fighting practice supports the smooth running of the business and promotes greater efficiency. Many companies Gaining accreditation is indicative of a conscientious, who have implemented ISO 9001 report clearly visible efficient and well run organisation that takes the issue of improvements in their productivity, increased levels of quality seriously at all levels of operation both internally customer satisfaction and a reduction in product returns and and externally. customer complaints. A well implemented quality system helps to define the processes you use every day and develop External Benefits working guidelines, this ensures the continuity of a • Increasing your chances of success when tendering structured process within your business. for new contracts • Supporting your case when applying to be a Performance becomes easily measurable and areas for preferred contractor / service provider or business further improvement easily identifiable through continual partner reviews of business practice carried out through all levels of • Gaining a competitive advantage over those the organization via the PDCA Cycle. without ISO certification • Enhancing your professional status within your The „Improvement mechanisms‰ for 9001 (QMS) includes industry sectors management reviews, periodic committee meetings, quality • Ensuring a higher retention rate of your existing and key performance indicators analysis and reporting, customers internal and external audits, non conformity and preventive • Assist in the reduction of chargeable insurance premiums actions reviews, process and document reviews etc. Internal Benefits • By providing guiding frameworks that support current practice and re-enforce mission statements, employees benefit from clear direction which What is Information security Potential and existing customers find it re-assuring to know that the company they intend to conduct business with adheres to a defined set of standards that bears international recognition. combine people, processes and technology to secure its critical assets. To protect itself, an organization needs to actively manage the security of all forms of information exchange and data storage taking into consideration of a risk management framework. ASSETS endangered by to protect THREATS CONTROLS that exploit mitigated by RISK WEAKNESS resulting in leading to EXPOSURE Diagram 1 (Basic understanding of an ISMS risk assessment approach base on a security cycle)
- 15. SECUREMAG VOLUME ARTICLE 6 2014 15 CERTIFICATION Security Policy ce Or ga Se niza cu tio rit na y l ian What is Risk Assessment? pl m Co One of the motivations of having an information security management framework is to implement a risk assessment process, whereby reviewing the overall security cycle of the business, (Diagram 1, Security Cycle). PLAN ACT 1. Identify information assets critical to the operations of technology services are identified and classified based on their importance 2. Risks (threats and vulnerabilities) are identified and rated based on likelihood and impact value 3. Existing controls are identified that are in place to mitigate the risks 4. Identify any gaps that result in significant risks that may require further treatment DO CHECK Risk ,Threat, Vulnerability and Controls are defined as follows in the context of ISMS: Risk Threat Something that can potentially cause damage to the organisation, IT Systems or network. Vulnerability A weakness in the people, process or technology that can be exploited by a threat agent. Control Diagram 2 (PDCA Approach – Optional for ISO 27001:2013) Likelihood that a threat exploits a vulnerability and causes loss of information security. Safeguards in place to reduce risks. Implementing ISO 27001 ISMS can bring the following benefits to an organization: • ISO 27001:2013 (Information Security Management System, ISMS) management systems relating to more than one standard can be more easily integrated and much duplication efforts removed. (Diagram 4). Like other ISO standards, the ISO 27001 document starts with several sections covering scope and definitions as depicted in diagram 3. The „working‰ requirements of the ISMS begin in Section 4. Sections 4 through 8 describes: Some of the requirements are the same in both systems and in principal, and they just needed minor adjustments to address specific ISO 27001 requirements. such as : i) General Requirements: The foundational requirements to put an Information Security Management System in place – like creating and communicating policies, defining processes, creating a system for documentation and records. ii) Management Responsibility: Every successful organizational effort requires a strong commitment from top management. iii) Continual Improvement: The standard requires evidence that processes are being reviewed for effectiveness, and that the ISMS is regularly audited to ensure it is operating as defined. The New ISO 27001 and an Integration approach to ISO 9001 ISO 27001, the international management systems standard for Information Security was extensively revised since its first edition in 2005 and published on 25th September 2013. The significant change is that it has been aligned to the ISO 9001 principals for harmonization of standards so • • • • Documentation Requirements (Control of Documents, Control of Records) • Management Responsibility (Management Commitment, Resource Management, Provision of Resources, Training, Awareness and Competence) • Internal Audits • Management Review • Improvement (Continual Improvement, Corrective Action, Preventive Action) • Independently demonstrates that applicable laws and regulations are observed and complied upon Independently verifies that organizational risks are properly identified, assessed and managed, while formalizing information security processes, procedures and documentation Provides confidence and a competitive edge by meeting contractual requirements and demonstrating that the security of information is paramount to the organization and its management team Demonstrates the independent assurance of internal security controls that meets corporate governance and business continuity requirements The regular assessment process helps to continually monitor performance, and improve the ISMS framework. The purpose of the ISMS implementation is not getting it perfect the first time. One of the critical aspect of the ISMS framework is continuous and sustainable improvement alike the QMS approach. Similar to ISO 9001 (QMS), the ISMS can be summarized as a Plan-Do-Check-Act (PDCA) cycle of continual improvement, as depicted in diagram 2. ISO 27001 provides a leveled playing field with industry giants thanks to ISO 27001 being a generic, process led standard, it can be applied to any organisation. With the news media often filled with headlines of hacking, virus attacks and doubts over cloud computing security, ISO 27001 can provide real weight behind an organisationÊs argument of having robust information security processes in place and relatively increased its security credentials. Not only are the goal posts moving constantly with changing technology and threat landscape, our business needs and focus are constantly changing as well and as the ISMS framework has a built-in mechanisms of meeting the information security needs of businesses today. This standard should be perceived as a must have for ICT industry wishing for not only a competitive but sustainable advantage in the market place. Moreover to further enhance the approach of continual improvement principle, ICT industry players should embark on a continued journey of excellence towards the ISO 27001:2013 integrated management approach. Internal Audit Management Report Correction/ Preventive Actions Document Management Organization: Roles And Responsibilities Development ISO/IEC 27001 ISO 9001 Process Approach Supplier Management Customer Satisfication Quality (Of Service) Diagram 3 (Key sections of the ISMS standard) ISO/IEC 20000 Incident Management Change Management Availability Continuity Security Capacity Diagram 4 (Integrated approach of the ISMS management system)
- 16. SPECIAL JOURNAL By Lim Chin Wan National eID & ePassport Conference 2013 at Berlin a Huge Success Hosted by: I t was a cold and quiet morning in Berlin, Germany on the 28th October 2013. The leaves on the trees were turning brown; getting ready for the coming winter. Inside the Intercontinental Berlin Hotel, a team of SecureMetric people were preparing for an exciting day at the 5th Edition of the National eID & ePassport Conference. The event, hosted by PrimeKey, Utimaco and Multicert saw some 200 delegates from around the world attending and sharing their ideas with each other. It was supported by the German government under the Öffentliche IT Ministry. The agenda for Day 1 was filled with 6 keynote speakers who spoke about eID usage around the world namely from Europe, US and Africa. There were also 2 panel discussions where the former Executive US State Department of USA was the chair. One of the hottest topic was on why the USA did not have a single National ID. There were many questions raised when the USA single National ID topic was discussed. Among the key points raised during the Q&A session was the Constitution of the USA which prohibits the issuance of a single National ID for the citizens of USA. During the event, SecureMetric positioned itself as the preferred partner for European companies who wish to get into the ASEAN market. There were many inquiries on the ASEAN market as it is the new booming National eID & ePassport Conference – the Global Forum on the drivers behind the digitalization of citizen ID documents proudly announces the 5th edition in BERLIN 2013. 300 top level government delegates together with the brightest minds in the industry, come together from all around the world, in Berlin, to discuss the foundation and evolution of a global eID infrastructure, based on the digitalization of citizen ID documents. The Program Committee 2013 is working closely together with the European Commission, the Industry, and national Government representatives in creating the most dynamic agenda keeping pace with the latest trends and developments. market which is seen as the counter weight to the BRIC economies. SecureMetric made a special SecureMAG supplement for this event introducing ASEAN to the delegates in Berlin. One of the interesting fact was that in ASEAN, more than 1000 languages were spoken and this has proven to be a challenge when implementing eID in some countries. It is interesting to see how these countries overcome the multiple language problem when it comes to issuing eID. On Day 2 of the event, one of SecureMetric's invited guest, Dr. Suhazimah from MAMPU (a government agency in Malaysia) presented a 30 minute talk about the usage of Malaysia's eID also known as MyKad. She then proceed to discuss about how Malaysia was the first country in the world to introduce the concept of ePassport. She ended her talk with her in-depth knowledge about PKI and its role in helping Malaysia to become a developed nation. The event ended with an after event networking cocktail where the delegates, sponsors and speakers were able to get to know each other better and share a laugh after a long day at the event. The conference chairman, Mr. Konstantin officially declare the event a success and closed it with a toast and announcing the 6th Edition will be held in Budapest, Hungary. Silver Sponsor: