Singapore’s Payment Services Act Download The Payments Services Act (PSA) has now been in force for several years, and many firms have received their licences, while others are still in the process of obtaining them. Whether already licensed or still awaiting in-principle or final approval, the challenges for firms are the mandatory obligations under the the Monetary Authority of Singapore’s (MAS) Payment Services Act with which they must comply on an ongoing basis. Areas of compliance largely include AML and KYC-related requirements, transaction monitoring, safeguarding of customer funds, regulatory reporting and, for some firms, trade surveillance. To ensure ongoing compliance with payment services regulations, organisations need the right interplay between technology and personnel, and to implement the right target operating model and solution design that can scale rapidly- all underpinned by a robust risk management and control framework. Download How can Protiviti help your business stabilise and grow Business review Ongoing review of the business plan for a possible expansion of the licence, communication to MAS and adoption of additional compliance structuresNew customer acquisition strategyApply for MAS’s Digital Acceleration Grant (DAG)Revenue modellingOrganisational structure development Process augmentation Review current state and design future state process to meet regulationsRegularly update TOM and solution stack for expanded regulatory supervision and reportingReview business operationsKeep all relevant policy & procedures and SOPs updatedRefresh enterprise-wide risk assessment Infrastructure and people development Business transformation for the digital futureOrganisational structure review to deliver change and monitor adoptionTRM including cybersecurity assessmentImplement new systems for compliance, reporting and operationsBuild knowledge base to manage and address new PSA requirementsOngoing L&D Business operations revamp Meet AML/KYC processing, assurance and reporting requirementsReview current operational footprint and design future state lean organisational structure to meet new regulatory obligations supported via technologyBuild/outsource risk & compliance and internal audit functions Payments consulting services Protiviti helps payments firms to be more effective and efficient in a way that is risk-sensitive, regulatory compliant, well-controlled, and enabled by leading technologies. Learn more Topics Internal Audit and Corporate Governance Risk Management and Regulatory Compliance Find out more about risk & complianceCompliance supportRisk managementInternal audit Preparation of licence applicationsDevelop/refresh policy & proceduresOutsourced compliance functionAML/KYC support –managed serviceCo-sourced/outsourcedRisk functionRisk assessmentsModel validationVendor selection –riskCo-sourced/outsourced internal audit functionDigital & IT audits Technology transformationDigital enablementBusiness process improvementTechnology, strategy and IT operations TransformationSecurity & privacy assessmentsPenetration testingAgile software implementationFull stack developmentRPA, AI and ML in risk managementCloud strategyUX/UIData analytics and visualisationAI-enabled forensicsChange management-manual to digitalOperating model redesignTraining & communicationOperations & process enhancementPolicies, Procedures & SOPsFinancial reporting, remediation & complianceCost & performance management Leadership Gregor Neveling Gregor is a director with more than 20 years of experience in the financial services industry, both in Europe and Asia. He has extensive experience in corporate, retail and investment banking, wealth and asset management, compliance, AML/CFT, KYC, and risk. He started ... Learn More Whitepaper April 21, 2022 PCI Security Standards Council publishes updated data security standard DSS 4.0 addresses rapidly evolving threat environment and provides flexibility for how organisations can achieve compliance On March 31, 2022, the PCI Security Standards Council (PCI SSC) released a new version of the PCI Data Security Standard (DSS). PCI DSS 4.0 is the first revision to the DSS in almost four years. It represents a major update to the standard as... Read more