1. Copyright The Asian Banker 2010. All rights reserved 1 The Asian Banker This paper “Fraud is the key issue in operational risk among Asian banks”

2. Copyright The Asian Banker 2010. All rights reserved 2 Key discussion notes Interest and ambition in operational risk measurement is surprisingly at an infant level despite the potential cost respectively saving Awareness rising mostly through rise in fraudulent transactions and event related issues Incremental losses in retail banking add up but high value low frequency events are the most dangerous aspect that is not well managed Although most solutions are IT based, insufficient spending is considered

3. Copyright The Asian Banker 2009. All rights reserved 3 Predictive modelling techniques are not sufficiently adopted to detect fraudulent transactions, and 30% of banks have yet to establish automated authorization systems Please indicate the extent to which you are using each fraud detection method below Source: The Asian Banker Consumer Credit Practice Survey 2007

4. Copyright The Asian Banker 2009. All rights reserved 4 Historical data references alone as the primary scoring mechanisms alone in emerging markets is insufficient. 80% of emerging market banks has difficulty finding reliable data Source: The Asian Banker Consumer Credit Practice Survey 2007

5. Copyright The Asian Banker 2008. All rights reserved. 8.1.5.Risk Management External and internal fraud is a key concern among Asian banks Average fraud levels in Asia exceeds world average Source: Asian Banker Research

6. Copyright The Asian Banker 2009. All rights reserved 6 Fraud detection capabilities are forced to evolve as financial fraud becomes more sophisticated Evolution of consumer credit / payment fraud Source: Asian Banker Research

7. Copyright The Asian Banker 2010. All rights reserved 7 Operational risk tools are highly IT driven Establish team High level assessment & diagnostic review Assessment of detailed requirements Design and build systems/ models Implementation and integration Testing and validation Project planning 30 days window Ops Risk Committee decides “What is the most important Op risk infrastructure must the bank put in place?” “What tools can be implemented on an enterprise wide scale?” 2003 Pilot Prog: critical units Retail Treasury Audit Rating part of KPIs Stabilisation 2H 2002 18 member Ops Risk Taskforce appointed by Committee Processing & Services Audits BUs IT HR & others 90 days window Controlled Self- Assessment Group Risk Key Events Reporting Group Risk Key Risk Indicators Processing & Services Policies IT Rep. Overall Definitions Group Risk Source: Asian Banker Research

8. Copyright The Asian Banker 2010. All rights reserved 8 “The banks we like” Banks which set following Key Risk Indicators P&S replicate knowledge on enterprise wide level Top-down assessment of key exposure spots Qualitative assessment of key risk issues – Customer complains – Outsourcing risks – Settlement failures – Staff turnover – Documentation breaks – General Ledger accounts

9. Copyright The Asian Banker 2010. All rights reserved 9 The questions we ask Can IT investment really improve operational risk control capability?

10. Copyright The Asian Banker 2010. All rights reserved 10 For further information Members and subscribers to this programme may discuss with The Asian Banker research analysts your specific needs arising from the information contained in this section. You may request for additional analyst explanation to the information presented in this set of slides or paper. If the additional information you require can be repackaged from primary data we have already collected previously, the analyst will send it to you as part of your subscription or membership. If the additional information you request requires new primary work that is unique to your organisation, then a small fee may be applicable. Please contact us at analyst@theasianbanker.com or phone 65-62366516.analyst@theasianbanker.com