Regional Privacy Officer for ASEAN, South Asia, Greater China and North Asia (Asia Pacific)

Advisory - Technology Risk ConsultingData Loss Prevention / Data ProtectionBrandon has been involved in multiple data loss prevention engagements for global banks. He has performed identification of risk areas where confidential data (personal and non personal) could be leaked, and propose sustainable and practical solutions. The risk identification phases required multiple interviews with senior management and country heads. The outcomes of the projects were leveraged as accelerators for execution in the rest of key Asia Pacific offices. Local privacy regulations were taken into consideration and assessed for compliance. Brandon developed confidential data handling guidelines for a global private and investment bank. The developed guidelines consists of recommended good practices, guidelines and controls from industry practices and regulatory requirements, in the context of data loss prevention and the handling of confidential data. The guidelines were rolled out regionally to the rest of the Asia Pacific offices. Brandon was also responsible for coordinating the regional rollout with business heads and preparation of the training and awareness materials.Regulatory and Risk complianceBrandon has conducted multiple compliance review engagements against regulatory requirements from authorities such as MAS and RBI. He has reviewed IT processes such as key IT Service Management processes (i.e.change management, release management, patch management, incident management) and smart card personalisation processes to be inline with the corporate IT security policy and standards, industry best practices (i.e. ITIL, COBIT) and the Monetary Authority of Singapore’s (MAS) “Internet Banking Technology Risk Management Guidelines” (IBTRMG) and the latest Technology Risk Management Guidelines (TRMG).