Overview

 

Strategic investments in digitalisation and technological innovation are central to CIMB’s journey towards becoming a resilient, customer-centred bank that is ready for the future. Through these innovations, we make it easier and safer for our individual customers and business clients to manage their finances and make data-driven decisions. Strengthening our digital platforms also enables us to enhance security, manage risks effectively and fortify our operations – all supporting our role as a responsible regional bank.

Digitalisation Governance​

 

Our digital agenda is led and enabled by the Group Technology Division, with oversight from the Group Transformation Committee on strategic initiatives and the Board on key strategic matters. The Group Technology Division provides quarterly updates to the Group Operational and Resiliency Risk Committee and bi-monthly updates to the Board Risk and Compliance Committee.​

 

At the operational level, technology governance includes policies and guidelines, risk control and assurance, quality assurance, and audit management to ensure compliance with internal policies and procedures. We adhere to Financial Services Industry Standards and local regulatory requirements in the countries where we operate, including those related to technology risk management.​

Prudent and Cautious Adoption of New Technologies​

 

CIMB has articulated its updated "Journey to the Cloud" as a strategic roadmap and risk management plan. This phased approach takes into account the successful pilot and early adoption of cloud platforms and services for non-customer/personal data and non-critical systems.

 

We have embarked on several projects to incrementally deploy services and products via cloud-based solutions. This ensures that our data and systems are ready for customers to continue enjoying our services safely and securely. ​

CIMB continues to make progress in developing our approach to ethical AI adoption, guided by emerging regulatory standards. Our overall strategy evolves in line with these developments, ensuring that our controls and governance frameworks remain robust. We assess and test AI models in alignment with industry best practices, and currently do not allow analytical or operational AI models to function without human oversight and intervention.