The additional capital requirement on DBS Bank is now a multiplier of 1.8 times to its risk-weighted assets for operational risk, an increase from the multiplier of 1.5 times that MAS applied in February 2022 following the November 2021 disruption. MAS may subsequently vary the size of the multiplier depending on the outcome of ongoing reviews.
After the March incident, DBS Bank had convened a Special Board Committee to oversee a full review of the bank’s IT resiliency, to be performed by an independent external expert. MAS had then directed DBS Bank to conduct a comprehensive review, including an assessment of the adequacy of management oversight, staff competencies, operational processes, system resiliency, and architecture design for its digital banking services. Although the causes of the March and May incidents appear distinct from each other, MAS has now required the review to cover the May incident as well.
MAS has also required DBS Bank to take immediate steps to improve the resiliency and recoverability of its existing system, including enhanced monitoring, more comprehensive testing, and additional system redundancies, in order to minimize disruption of its services to its customers.
Ho Hern Shin, Deputy Managing Director (Financial Supervision), MAS, said, “DBS Bank has fallen short of MAS’ expectations for banks to deliver reliable services to their customers. The repeated inconvenience caused to the public is unacceptable. The additional capital requirement imposed at this time underscores the seriousness with which MAS treats this matter. DBS Bank must spare no effort in dealing with the underlying issues leading to these disruptions.”