At DBS Tech India, robust corporate governance is paramount. Our Board of Directors, supported by the Risk Culture and Conduct Committee, provides comprehensive oversight and strategic direction for our risk culture and conduct agenda. This commitment is underpinned by our three-lines-of-defense model for risk management.

Our Three Lines of Defense

• First Line: Business technology and support units ensure meticulous implementation and compliance with risk, information security policies, standards, regulations, and internal controls, including operational resiliency.
• Second Line: The Business Continuity, Risk and Information Security Management (BRISM) team provides robust risk and information security frameworks, while the Legal & Compliance Team manages legal and regulatory adherence.
• Third Line: Our independent Internal Audit function objectively evaluates the effectiveness of our risk governance framework, internal controls, and compliance.

Operational Resilience and Business Continuity

At BRISM, we prioritize operational resiliency and business continuity to ensure uninterrupted services and maintain trust. We align with DBS Group's standards, adopting a zero-tolerance approach to operational, technology, and reputational risks. Our robust framework covers technology risk management, from identifying and assessing threats like software vulnerabilities and cyberattacks (i.e., cybersecurity), to comprehensive response strategies in various scenarios.

Regular exercises, including fallback simulations, validate our capabilities in incident management and critical business service recovery. This commitment to a strong technology risk culture, open communication and a shared sense of responsibility to safeguard the bank's interest, meet regulatory expectations, and make DBS Tech India a more joyful place to work.

Legal Compliance & Secretarial (LCS)

Our LCS function ensures strict adherence to applicable external laws and internal group policies. LCS key responsibilities include liaison with the Board, management of corporate secretarial matters, and ensuring DTI's overall regulatory compliance. LCS oversees six critical risk management areas and ensures effective applicability of group policies across the organization. Additionally, LCS provides comprehensive legal and compliance support for production activities, manages SEZ-related regulatory compliances, and offers legal support for vendor agreements and broader business matters. The function is also actively developing a robust Data Privacy Framework, alongside other compliance methodologies, to further strengthen the organization's governance and risk posture.

Internal Audit Insights

An integrated audit of DBS Tech India affirmed the overall control environment as satisfactory. While no systemic breakdown was found, areas for enhanced management attention include governance and management oversight, information security monitoring, and consistent execution of Group policies. Management Control Awareness was rated satisfactory, with an increased emphasis on corporate and risk governance following the appointment of a new Country Head, leading to improved processes and the development of a "Rules of the Road" framework. Management is committed to defining specific monitoring criteria and metrics, and local management units are encouraged to engage with Group functional units to enhance oversight, strengthen staff awareness of Group policies, and incorporate audit issues into risk and control self-assessments.