Day 1
Understanding Fraud and Cybercrime Risks
- Define and differentiate internal, external, and cyber-enabled fraud.
- Recognise typologies like phishing, social engineering, business email compromise (BEC), and identity theft.
- Understand compliance obligations under MAS AML/CFT Notices, PDPA, Cybersecurity Act, and Computer Misuse Act.
- Assess fraud vulnerabilities in digital banking, fintech, and payment ecosystems.
Compliance Frameworks and Governance Structures
- Roles of compliance, IT, audit, and management in fraud/cyber governance.
- Design anti-fraud policies, internal controls, and escalation procedures.
- Align fraud/cyber governance to GRC models and board-level oversight.
Detection and Prevention Techniques
- Use red flags, KRIs, and real-time monitoring tools for early detection.
- Apply user behaviour analytics to identify anomalies.
- Implement internal controls such as maker-checker rules, access segregation, and whistleblower mechanisms.
Digital Forensics and Investigation Readiness
- Understand digital evidence sources: logs, devices, browser metadata.
- Basics of evidence handling, chain of custody, and coordination with law enforcement and MAS reporting expectations.
- Reporting obligations and regulatory expectations post-incident.
Day 2
Cybersecurity and Technology Integration
- Understand MAS TRM Guidelines and PDPA requirements.
- Leverage RegTech, biometric security, device fingerprinting, and transaction monitoring tools.
- Mitigate biometric spoofing, QR code fraud, and deepfake risks.
Incident Response and Crisis Management
- Develop a robust incident response plan (IRP) for fraud and cyber events.
- Simulate a cyberattack: real-time decision making, internal comms, and breach containment.
- Roles of compliance, IT security, PR, and legal in crisis response.
Emerging Fraud and Cybercrime Typologies
- Deepfakes, AI-generated scams, synthetic identities, and insider threats.
- Cryptocurrency fraud and DeFi misuse: laundering, theft, and exchange-based schemes.
- Lessons from major cases in Singapore, ASEAN, and global financial services.
Building a Fraud-Resistant Compliance Culture
- Foster fraud and cybersecurity awareness at all levels.
- Design effective training, communication, and testing strategies.
- Audit readiness, policy updates, and continuous improvement cycles.