SCB is also certified under ISO/IEC 27001, the global standard for Information Security Management Systems (ISMS).

ISO/IEC 27001 outlines best practices for managing information security risks, ensuring that critical data and systems are protected in terms of Confidentiality, Integrity, and Availability.

This certification reflects SCB’s commitment to safeguarding information resources and delivering secure, reliable services to customers.

SCB continuously designs, develops, and enhances the security of its mobile banking services, prioritizing both financial security and customer experience. Our systems comply with regulatory standards for financial institutions, including requirements on approved device types and usage guidelines as well as monitoring unusual transaction patterns to detect and prevent unauthorized access.

SCB proactively strengthens cybersecurity, by integrating threat intelligence analysis, ongoing monitoring, and simulated attack testing. We ensure that our personnel, processes, and technologies remain resilient and aligned with the ever evolving threat landscape.

SCB leverages proactive threat intelligence to understand risks, attack techniques, and exploited vulnerabilities. This knowledge is applied to the Bank’s environment to assess risks and implement preventive measures before similar threats can impact actual systems.
At the same time, SCB employs threat monitoring systems to detect and analyze irregularities in system usage and status, enabling early identification and response to potential risks.

For testing, we conduct simulated attack scenarios to evaluate the readiness of personnel, processes, and technologies, while also validating the effectiveness of existing defense mechanisms.

Insights gained from analysis, monitoring, and testing are continuously used to refine prevention, detection, and response measures. This ensures that customer services and transactions remain secure and uninterrupted.

SCB provides a channel for external parties to report any potential security vulnerabilities they may discover in the Bank’s systems. This allows the Bank to investigate and remediate risks that could compromise system functionality.

Reported issues are assessed and addressed according to the Bank’s security protocols to mitigate risks and improve security measures.

This approach enables us to gain security insights from diverse perspectives, ensuring that customer data and services are protected appropriately.