Professional Documents
Culture Documents
com/sg
Building Digital
Trust
The confidence to
take risks
December 2013
Trust has become essential in the digital age. It must
underpin how you organise and run your business
so that you can be successful. With high profile
international debates on data privacy and security
its not difficult to see why.
Grant Waterfall, PwC Partner
ust
eed for tr
The n
Opportunity
Social media Mobile Analytics Cloud Hyper-connectivity Digital identity Speed of change
The trust dynamic that the digital age unleashes is huge embrace it or miss the next
digital growth opportunity
The digital age is here. The potential Trust means your customers will with resilience built into your systems,
for you to be fast, agile and creative buy your products on-line. It means and with the knowledge that your
is as never before. Embracing the theyre confident youll keep their digital transformations will succeed,
opportunities on offer is the only way data safe and secure. Trust means youll have the confidence to embrace
to stay competitive. your suppliers know your systems your digital future, and enjoy the
wont fail them. And it means you have exponential impact it has on
As your reliance on IT systems grows the confidence to move your business your growth.
and they become a fundamental part forward by embracing technology
of your organisation, they mustnt and the opportunities it has to offer. Growth = opportunity + trust.
fail. Technology is a key player in your Its the new equation for the digital
success. But you and your customers, Organisations need to build trust into age. Let us help you make it work for
shareholders and regulators need the fabric of their digital operation. your business.
to trust it. With trust in your data and security,
Tap into the trust dynamics Social media Businesses can Hyper-connectivity you operate in
unleashed by digital. Or get understand and interact with customers a connected world. You share data, your
left behind. in new ways and can use social media to systems are accessed by your trading
build knowledge. partners, transactions flow in and out
Were in the decade of digital change in
with almost no intervention. Any
which only the fit will survive and thrive.
Businesses with a clearly defined collaboration of this type needs trust.
And to be digitally fit, you need to be
approach to social media and governance You cant afford to get it wrong.
digitally trusted by customers,
around its use will have an advantage.
suppliers, in fact by all the stakeholders Digital identity The next wave of
Social media interaction will increasingly
in your business. digital relies on knowing who you are
form part of the trust relationship
between a business and its stakeholders. dealing with. In addition, customers
More than ever before, the growth of your will want more access to, and control of,
Are you listening to them, engaging with
organisation depends on your ability to their own data their digital identity
them and driving the agenda to manage
embrace the new trust dynamic. as they share their consumption data
your reputation?
and transact on line.
Barely a week goes by without another
Mobile smartphones offer new
reminder of how the power of digital Emerging data protection legislation,
opportunities for businesses. Your
technology continues to disrupt the rapidly evolving cyber security threats
customers and your own users are
traditional way business is done and and issues of digital trust across
consuming information, transacting and
offers innovative opportunities to create international boarders will drive this to
communicating from the palm of their
new ways of creating value. Not the top of the agenda.
hand. Their mobile device has become an
embracing digital opportunities is no
essential, everyday experience for them. Speed of change your business is
longer an option. But acting too quickly
Mobile payments will underpin the becoming increasingly dependent on
and being unclear on your direction is
digital economy. Trust is essential for technology-driven transformation
dangerous and could harm your business.
them to feel safe using it. programmes. Only by seeking new ways
You need to manage risk and build trust
to feel secure in the choices you make. of delivering your products and services
Analytics data is everywhere, and its will you stay ahead of the competition
value to your business is on the increase. and maintain a strategic edge. You need
Weve identified seven key digital
Learn to exploit data, share it, manage a transformation process that will deliver
developments which are already
it and protect it or get left behind. You on business outcomes. Businesses that
changing the face of how your business
need to know what you can and cant are confident in their ability to deliver
operates. Theyre vital to the success
do with it. And your staff must be technology enabled transformation
story of your digital business, and theyre
well-versed in their data-handling will have a distinct advantage in this
all founded on trust.
responsibilities. Management need new world.
to trust the data and the analyses
that are driving business decisions. Digital trust combined with a new
attitude to risk will free you to
Cloud by storing data and sourcing unleash your potential in these areas.
services and applications through cloud Well help you develop a digital trust
operators, you lose the sense of security strategy for your business. Itll give
of a defined physical location. Cost and you the confidence to make the right
convenience will drive the adoption of choices for your organisation, and
cloud services far faster than most drive profitable growth.
businesses imagine. A cloud based
internet of applications is emerging and
users will switch seamlessly and
unknowing between in-house and cloud
based applications. Trusting providers to
manage your data and services requires
new approaches to managing and
sourcing services.
lat
o
Gl
ory
central to business strategy, boards
and audit committees must have the
digital expertise to set the level of risk
Suppliers
that they are willing to accept. They
Customer
must be able to ask the right questions
and hold management to account.
Environmental
Legal
Enterprise
technology risk In the digital age
building trust will provide the context
for managing technology risk. Our
Service Digital Trust Framework helps
Consumer providers businesses achieve this. Managing
the risk in this ever changing world
needs new and more dynamic
approaches based on up-to-date
ral
JV/
Ge
lt u
-
cu
ti c
al cio Businesses should develop KPIs to
So
help them understand and measure
digital trust.
Technology
Now: Develop a business strategy for the
Connectivity and collaboration extend to all facets of business
digital age Whats certain is that
you will need a business strategy for
Integration with wide range of business stakeholders, competitors and trading
partners, in a dynamic environment built on trust
the digital age not a digital strategy.
Your organisation will need to foster
High risk, high opportunity
more collaboration, greater innovation
and faster decisionmaking than
Then:
youve experienced before. As part of
Few strands of connectivity and collaboration this you will need to master building
Integration limited to supply chain/consumer digital trust to have the confidence to
Low risk, low opportunity embrace your digital future.
and Resilience
IT Risk No two businesses are the same.
Our Digital Trust Framework gives
us the flexibility to respond to the
IT Governance
specific needs of your organisation.
Compliance Technology
with regulation Well address all the segments of
mega trends
the Framework to decide what
help you need to protect your
IT processes business and enable profitable
Global IT o
t the pport and assets digital growth.
ec
un
t
Pro
ity
al E n ble m e
Di
e
se
nfi ata
nc
systems
be
delivery risk
c
de
D
y
r
co
sys B io n
te m u s i n e s s n s f o r m at
a
s co Tr ence
nfidence confid
How we help
What does good look like? Cyber security confidence in your will give you that confidence by helping
You continually monitor your security. While cyber security risks have you manage risks, while staying connected.
risk profile. You understand dramatically evolved, the approach Well help you in shaping a broader strategic
what matters for the success of businesses use to manage them has not response to cyber risk by helping to
your business. You realise this kept pace. The traditional information understand current capability and putting
changes as you move forward security model one that is technology in place a focused plan to target cyber
with your business. focused, compliance-based, perimeter- security investment in the right places.
oriented, and aimed at securing the Our specialists will help also you respond
You understand in real time, the back-office does not address the realities to actual cyber incidents. And theyll
new threats within the digital of today. Cyber security isnt just about advise on the legal issues surrounding
landscape. And youre fully technology and computers. Its about breaches, data privacy and protection. To
people, information, systems, processes, target investment on what matters most
aware of the risks youre
culture and physical surroundings. PwC we focus on the six areas outlined below:
exposing the organisation
to as you execute your
You cant secure everything Seize the advantage
strategic plan.
We help you set the right priorities. We help you exploit digital
Enterprise security architecture opportunity with confidence.
You understand how digital Protect what matters Risk
Digital trust is embedded in
Priorities
the strategy
is changing the fabric of your Strategy, organisation and
Privacy and cyber security
business, introducing new governance
legal compliance
Threat intelligence
threats and changing your Risk management and risk
risk profile. appetiteThreat intelligence
nfi dence in
Co
Your eyes are fully open to Crisis
digital threats. Connections
rd
igi ta l f u t
have shifted: your business Its not if but when Their risk is your risk
architecture has changed, We help you build an intelligenceled We help you understand and
defence, enabling rapid detection manage risk in your
so have the risks within your andcontainment. People interconnected business
Technology
digital supply chain. The threats Continuity and resilience ecosystem.
How we help
What does good look like? Data confidence confidence in your data test your systems and processes to ensure
You know what data is important is fundamental to an efficient and agile that your data is accurately processed and
to you and you have the organisation. When you exploit your data properly reported. For completeness we
confidence to exploit it for and implement good governance, it cover where data is stored, how long it is
competitive advantage. provides the basis for others to trust you kept and who should have access.
and want to do business with you. We can The result is a transparent and reliable
You understand how to use third help you to know what data you need and governance process, enabling your
party data, where it works and how good it needs to be. We can ensure employees and customers to make the
where it doesnt. that you get your data right, focussing on right decisions.
whats important. We can help you embed
You know the impact on your good governance and also independently
data of system change.
Insights
How we help
What does good look like? Business systems confidence systems landscape, including a range of
Your control environment Confidence in your systems: design, ERP, EPM and GRC technologies, and
provides you sustainable, strengthen, sustain. You need an extensive experience in defining and
reliable and cost-efficient integrated and holistic approach to deploying risk and control frameworks.
management of your risks. Its designing, deploying, operating and This is how weve been able to help
efficient, effective and optimising your control environment. As address financial and operational risk for
integrated with, underlying the business system landscape changes clients across a whole spectrum of
(ERP) and Enterprise with users moving seamlessly between processes and industries. Working across
Performance Management in-house systems and cloud based web the entire control life-cycle, well apply a
(EPM) systems, internet/cloud services and mobile applications, a risk and controls lens to your processes
based and mobile applications. comprehensive approach to business and system design, strengthen your
systems control becomes even more overall design, and help you increase the
important. Youll benefit from our deep reliability and maturity of your existing
Management carries out
technical expertise of the business control environment in a cost-effective
real-time monitoring and
and sustainable manner.
periodic assessment of your
systems, strengthening the ERP
Standardisation
systems. Dedicated Governance,
Risk and Compliance (GRC) Confidence in your systems and processes
technology provides vital Process and control
support strengthening the ERP
and EPM systems.
Quality Automation Adherence
You have thorough insight on
performance, process adherence
and compliance by continuously
monitoring transactional data.
Outcomes
Controls culture
Documentation
Continuous
GRC Control monitoring and
technology design auditing
Integration
Controls maturity
Prepared for the Well help you arm your people with
worst the skills and tools they need to
respond in a crisis.
How we help
What does good look like? IT risk resilience giving you the changes faster at lower cost and an
Your digital risks are proactively confidence to take risks. Businesses increasing need for real time data
identified, assessed, owned, across sectors have recently been shaken transfers means that approaches to
managed and monitored. by the impact of several high profile IT managing risk and resilience must adapt
outages and glitches, eroding digital fast. Well help you identify a complete
The information you need to trust. IT services are increasingly set of IT risks and to design the IT
make risk-aware decisions is intertwined with a complex combination governance and risk management
available at the click of a button. of: layers of infrastructure, service and processes to better manage them. The
process interdependencies, including PwC Risk Assurance Framework provides
You are well placed to mitigate legacy systems, mobile technology and a comprehensive and proven approach to
and avoid high impact system 3rd party vendors. This combined with managing this process. Being good at this
fragmented understanding of the IT will give you the confidence to embrace
outages.
landscape, pressure to implement digital the next digital opportunity.
When IT incidents or disasters
do occur, you are fully prepared
and able to respond quickly.
Risk
Approach
1 2 3 4 5 6
Risk Risk Design Monitoring Assurance Outcomes
strategy assesment implementation
management
Lines of defence
Response
1 2 3 4
How we help
What does good look like? Transformation confidence confidence You need to focus on the right
Technology-enabled in your digital transformation program. opportunities and maximise your
transformation is complex but Your business is becoming increasingly chances of achieving them by aligning
delivers strategic change to your dependent on technology-driven your projects and programmes
business. You can realise the full transformation programmes. You need to appropriately. Acting as your critical
extent of your investment and take the lead in these digital change friend well give you insight and
position yourself ahead of the agendas. Doing so will give you the challenge to help you make those
competition. strategic edge, competitive advantage, tough decisions and support you in
lower operating costs, and greater agility. realising your digital future.
Shareholders and market
analysts recognise your
commitment to evolving or
Executive board External
innovating your business and Audit
are confident in your approach
Dominic Nixon
Singapore Risk Leader
dominic.nixon@sg.pwc.com
Greg Unsworth
Asia Pacific Technology Leader
greg.unsworth@sg.pwc.com
Tan Shong Ye
IT Risk and Cyber Security Leader
shong.ye.tan@sg.pwc.com
Mark Jansen
Singapore Risk Partner
mark.jansen@sg.pwc.com
www.pwc.com/sg
2013 PricewaterhouseCoopers LLP. All rights reserved. PricewaterhouseCoopers and PwC refer to the network of member firms of
PricewaterhouseCoopers International Limited (PwCIL), or, as the context requires, individual member firms of the PwC network.
Each member firm is a separate legal entity and does not act as an agent of PwCIL or any other member firm.