S-Teambuilding 2026: Ride the Infinite Wave
Against the breathtaking backdrop of Angsana Lang Co, Hue, S-Teambuilding 2026 officially kicked off, marking an unforgettable summer for every SAVYINT member. Under the inspiring theme “Ride the Infinite Wave,” the event set the stage for a new journey of resilience, collaboration, and limitless ambition. Three Legendary Teams Ready to Ride the Big Waves The excitement began with the spirited entrance of three dynamic teams, each showcasing its own unique identity and energy. King & Queen 2026 – Where Confidence Meets Charisma Keeping the excitement alive, the much-anticipated King & Queen 2026 competition returned as one of SAVYINT’s signature teambuilding traditions. Contestants competed through three challenging rounds: a freestyle catwalk in self-selected outfits, a creative catwalk featuring surprise props prepared by the organizing committee, and finally, an intelligence round designed to crown the most outstanding King and Queen. After a series of entertaining performances and impressive displays of confidence, King Hine Minh and Queen Nhung Mira from Long Phung Sum Vay claimed the prestigious titles. Beyond their captivating stage presence, both winners impressed the judges with remarkable confidence, effortlessly embracing even the most unconventional accessories provided by the organizers, while delivering outstanding performances in the intelligence round by answering three out of five questions brilliantly. Team Challenges – Where Strength and Unity Prevail Following the emotional coronation ceremony, the three teams dove straight into a series of action-packed challenges filled with laughter, determination, and teamwork. The first challenge, “Relay Together,” required participants to coordinate seamlessly while spinning and passing a rope from one teammate to another before the final member attempted a basketball shot. Although seemingly straightforward, the challenge demanded agility, precise coordination, and even a strong sense of balance to complete successfully. Next came “Ball Collection,” where players had to keep a hoop around their bodies while racing to transport balls back to their team’s basket. The challenge tested not only endurance and agility but also concentration and teamwork under time pressure. The final challenge, “Magic Flying Carpet,” proved to be the ultimate test of synchronization. Four teammates worked together to stretch a fabric sheet and transport cups of water safely to the finish line without spilling. The more water preserved, the greater the chance of victory. Success depended not only on physical coordination but also on strategic planning and flawless teamwork – one mistimed movement meant starting all over again. Gala Dinner – Redefining the Future, Honoring the Journey As the sun set over the stunning Lang Co Bay, SAVYINT’s Gala Dinner unfolded in a warm and inspiring atmosphere. During the evening, Chairman Mr. Steve Huang shared SAVYINT’s strategic vision for the years ahead. Looking toward expansion across the Asia-Pacific region and global markets, SAVYINT aims to become a multinational technology company built upon three strategic pillars: Accelerating platformization, with AI serving as the “operating system” of its technology platforms.; Investing heavily in AI Security research and developmen and expanding a comprehensive partner ecosystem with core strengths in cryptography and data security, digital identity and authentication, Open Banking & Open Finance, payment security, and digital assets. One of the most memorable highlights of the evening was the S-Award 2026 Ceremony, honoring employees who have dedicated 5, 10, and 15 years to SAVYINT. While time may pass in the blink of an eye, every milestone, contribution, and achievement reflects the unwavering commitment and lasting value each individual has brought to the organization. If the afternoon showcased everyone’s physical endurance through exciting team challenges, the Gala Dinner became the stage where hidden artistic talents truly shined. Team All-in-one energized the audience with a lively performance of the hit song APT, getting everyone on their feet. Team Visilead captivated the crowd with a vibrant summer dance performance, perfectly capturing the carefree spirit of the season. Meanwhile, team Long Phung Sum Vay leveraged both its impressive team size and remarkable synchronization to deliver an unforgettable contemporary dance performance. At the end of an exhilarating day, after tallying the scores from every competition, Team Long Phung Sum Vay emerged as the overall champion with a commanding lead. Team Visilead secured second place, while Team All-in-one proudly finished in third. Riding the Infinite Wave Together S-Teambuilding 2026 concluded amid the breathtaking blue waters of Lăng Cô Bay, leaving behind unforgettable memories and an enduring spirit of “Ride the Infinite Wave.” Thank you to every SAVYINT member for making this extraordinary summer possible—where every challenge strengthened our unity, every achievement reflected our determination, and every shared moment became a lasting memory. Together, we will continue riding new waves, embracing new opportunities, and conquering even greater horizons in the journeys ahead. Highlights:
Strengthening Authentication, Fraud Prevention and Risk Governance Become Top Priorities for Philippine Banks
To strengthen fraud prevention, the Bangko Sentral ng Pilipinas (BSP), under Circular No. 1213, requires institutions to adopt enhanced authentication methods in place of SMS and email OTPs, while also strengthening automated fraud management systems. According to BSP Circular No. 1213, issued in May 2025, the central bank requires BSP-supervised financial institutions to replace SMS- and email-based OTPs with stronger authentication methods such as biometrics, behavioural authentication, adaptive authentication, or passwordless authentication by 25 June 2026. In addition, the circular sets out specific requirements for strengthening automated fraud monitoring. This directive applies to banks and e-wallet operators with average online transaction revenues of more than PHP 75 million per month, including most commercial banks, digital banks, cooperative banks, and rural banks. Banks that fail to comply must reimburse customers for funds lost due to fraud. 1. Authentication and Compliance Requirements Circular 1213 requires institutions to move away from authentication mechanisms that can be shared with or intercepted by third parties. SMS and email OTPs fall under this definition. By 30 June 2026, high-risk transactions and critical account changes must use phishing-resistant, device-bound alternatives, such as server-side biometrics authenticated against templates stored by the bank, or FIDO2/WebAuthn passkeys with device authentication. OTPs may only be used to confirm ownership of a registered mobile phone number. Biometrics BSP requires financial institutions to adopt server-side biometric authentication, where customer identity is verified within the bank’s secure backend system based on biometric templates stored on the bank’s server. The use of biometrics is expected to reduce the risks of account takeover, device compromise, spoofing, and unauthorized changes to authentication credentials. FIDO2 Passkey FIDO2/WebAuthn is a passwordless authentication standard designated by BSP as a mandatory solution for high-risk transactions and critical account changes, which must use phishing-resistant and device-bound alternatives. Smart OTP As mentioned above, Smart OTP is used for one purpose only: confirming ownership of a registered mobile phone number. It must not be used for transaction authentication. This is an important distinction that banks should note to avoid confusion with traditional OTPs. 2. Fraud Prevention and Management Requirements In addition to strong authentication methods, Circular 1213 also requires financial and banking institutions to strengthen their proactive fraud monitoring and detection capabilities by identifying suspicious transactions, unfamiliar devices, and abnormal customer behaviour before financial losses occur. Accordingly, fraud management systems must operate in real time and be capable of: BSP emphasizes that batch processing or end-of-day reconciliation does not meet this standard. 3. AI-Powered Strong Authentication and Fraud Prevention Solutions from Savyint With extensive experience working with and supporting financial institutions, SAVYINT provides a security and fraud prevention solution suite that supports compliance with AFASA and BSP Circulars 1213, 1214, and 1215. The solution suite is built around four pillars: strong and passwordless authentication; AI-powered fraud management; security, data encryption, and application protection; and risk management and compliance with local and international regulatory requirements. It ensures end-to-end protection across the entire customer journey, from registration, login, and transaction authentication to post-transaction monitoring. Key differentiators of the SAVYINT solution suite include: In particular, Savyint’s solution suite supports compliance with regulatory requirements in multiple countries, including the Philippines, such as AFASA and BSP Circulars 1213-1215; Vietnam, such as Circulars 50, 64, and 77 of the State Bank of Vietnam; and Singapore, such as MAS requirements. It also aligns with international security standards including FIDO2, PSD2/PSD3, eIDAS, GDPR, PCI DSS,… Connect with our experts today to quickly achieve compliance with AFASA and BSP Circulars 1213-1215.
Savyint Attends Entrust IGNITE APAC Partner Bootcamp FY27 in Bali
From June 2 to 5, 2026, Savyint joined leading technology partners from across Asia-Pacific in Bali, Indonesia, to attend Entrust IGNITE APAC Partner Bootcamp FY27 – Entrust’s annual intensive training program designed for its strategic partner ecosystem. This year, IGNITE APAC Partner Bootcamp FY27 brought together 79 delegates from 49 companies across 14 countries in the Asia-Pacific region. Under the theme “IGNITE”, the Bootcamp aimed to accelerate growth, strengthen deployment capabilities, and empower partners to capture new opportunities in the evolving markets of data security, digital identity, and cryptographic protection. During the three-day training program, Entrust experts shared key insights into the FY27 market strategy, focusing on enhancing the value of the Cryptographic Security Platform (CSP), modernizing Hardware Security Modules (HSM), and addressing today’s critical security challenges, including: Beyond theoretical training, IGNITE APAC Partner Bootcamp FY27 also provided an interactive learning environment through group activities, case discussions, and hands-on project presentations. Partners from different countries were divided into teams to analyze real-world scenarios, develop solution messaging, respond to customer challenges, and present practical use cases. Ms. Rose Nguyen, BD Sales Director of Savyint, shared: “Participating in IGNITE APAC Partner Bootcamp FY27 was a valuable opportunity for Savyint to stay updated on Entrust’s strategic directions for the new fiscal year, especially key trends in cryptographic security, PKI modernization, and the expanded application of HSM. These insights will help us further enhance our consulting and implementation capabilities, while continuing to support customers in Vietnam.” With the strategic direction and valuable connections gained from this year’s Bootcamp, Savyint will continue to strengthen its technological capabilities and deliver advanced security solutions that address the practical needs of customers. Highlights from the event: Day 1 + Day 2: Day 3:
Savyint Showcases Comprehensive Security Capabilities at Vietnam – Asia DX Summit 2026
At Vietnam – Asia DX Summit 2026, Savyint Group showcased its comprehensive solution ecosystem, pioneering PQC algorithms to address critical challenges in data encryption, digital trust, fraud prevention, and open banking. Held in Hanoi from May 27–28, 2026, Vietnam – Asia DX Summit 2026 was organized by VINASA under the patronage of the Ministry of Science and Technology. As one of Asia’s leading digital transformation forums, the event gathered government leaders, ministries, local authorities, and 2,000 delegates from 12 economies to discuss solutions for Vietnam’s double-digit growth goals. Under the theme “Creating New Drivers for Double-Digit Growth”, the forum focused on key topics including AI, Data & Automation; Digital Government & Smart Cities; Safety, Security & Digital Sovereignty; Smart Manufacturing & ESG. It also opened up opportunities for strategic connection and cooperation between Vietnam and the broader Asian region in the 2026–2030 deep digital transformation phase. Digital safety, security, and sovereignty remain among the most pressing priorities globally and in Vietnam. A secure, trusted, and resilient digital infrastructure is becoming a critical foundation for businesses, financial institutions, and government agencies to accelerate growth and adapt to emerging risks. Against this backdrop, Savyint introduced at Vietnam – Asia DX Summit 2026 a security solution portfolio including SAM Appliance, Savyint Digital Trust, and Open Banking Tech Stack. Designed on a Zero Trust architecture, with flexible integration and compliance with international standards, these solutions help organizations protect data, verify identities, prevent fraud, and expand digital connectivity. SAM Appliance – An All-in-one Data Encryption, Digital Signature Authentication, and Mobile Identity Solution At the forum, Savyint introduced SAM Appliance, an all-in-one solution for data encryption, digital signature authentication and mobile identification, built on the Cryptographic Security Platform (CSP). SAM Appliance integrates SCA and MFA authentication, PKI-based passwordless authentication, tokenization, transaction signing with End-to-End Encryption, advanced mobile security using cryptography, and support for PQC algorithms. The solution is designed for the next era of security, enabling secure data and transaction encryption, blockchain and cryptocurrency integration, mobile payment and digital wallet connectivity, timestamped digital signing, and long-term electronic archiving for 5, 10, and 20 years. Beyond its technology capabilities, Savyint’s SAM Appliance complies with regional technical standards and international regulations including FIPS 140-2 Level 3, ISO 9001:2015, ISO 14001:2015, ISO 27001:2022, GDPR, SOC 2 Type II, HIPAA, and PCI DSS. It is well suited for sectors with stringent requirements for security, compliance, and data protection, such as finance, banking, e-government, healthcare, and digital commerce. Savyint Digital Trust Solutions – Strengthening Digital Trust from Authentication to Fraud Prevention Alongside its encryption and authentication capabilities, Savyint also presented its Digital Trust Solutions ecosystem, designed to build digital trust across the entire user journey, from identity verification, authentication, device protection, and application protection to real-time fraud detection and prevention. Open Banking Tech Stack – Secure, Open Infrastructure for Financial Ecosystem Connectivity The global financial sector is shifting rapidly toward open finance. Open banking is no longer just a trend, but a strategic requirement for financial institutions to maintain competitive advantage. Savyint’s Open Banking Tech Stack is developed to help banks, financial institutions, and enterprises accelerate digital transformation, expand ecosystem connectivity, and foster innovation in financial services. Compliant with rigorous global standards such as Berlin Group, UK Open Banking, Singapore, Australia, and Hong Kong frameworks, while also meeting domestic and regional regulations, Open Banking Tech Stack provides a complete toolkit for building a modern open banking system, including: Notably, Open Banking Tech Stack can also integrate with secure online payment gateways, creating an end-to-end process for banks and third-party providers participating in open banking, from registration, identity verification, authentication, integration, and data sharing to payment. With core security technologies built in and a comprehensive security ecosystem spanning SAM Appliance, Digital Trust, and Open Banking Tech Stack, Savyint reaffirms its commitment to supporting organizations, enterprises, and the Government in building a solid digital trust foundation for Vietnam’s digital transformation journey. Some snapshots from the event:
Savyint wins two Sao Khue 2026 Awards, with Savyint Digital Trust rated 5 stars
In its second year participating in the Sao Khue Awards, Savyint continues to stay committed to its mission of strengthening cybersecurity and digital trust, with two technology solutions honored at the Sao Khue Awards 2026: Savyint Digital Trust and SAM Appliance. Notably, Savyint Digital Trust received a 5-star rating in the Application and Data Security category. On May 28, the Sao Khue Awards 2026 Ceremony was solemnly held in Hanoi by the Vietnam Software and IT Services Association (VINASA), under the patronage of the Ministry of Science and Technology. Entering its 23rd year, Sao Khue 2026 marks an important transformation as it is redesigned under the “new-generation Sao Khue” model—not only as an event honoring outstanding digital technology products and services, but also as a system for evaluating, validating and positioning the digital technology capabilities of Vietnamese enterprises. After rigorous assessment rounds, the Final Jury of the Sao Khue Awards 2026 selected 123 outstanding digital platforms, services and solutions. These recognized solutions clearly reflect the strong shift in technology trends toward platforms capable of solving practical problems, optimizing operations, protecting data, enhancing transaction security and building trust in the digital environment. This year, Savyint’s award-winning solutions at Sao Khue demonstrate the company’s research, development and mastery of core technologies in cybersecurity, cryptography, electronic identification, digital signatures and online fraud prevention through Savyint Digital Trust and SAM Appliance. In particular, Savyint Digital Trust received a 5-star rating for its relevance and ability to keep pace with global fraud prevention trends. Savyint Digital Trust – A comprehensive security and fraud prevention platform In response to the growing need for proactive fraud prevention and increasingly stringent international regulatory requirements, Savyint Digital Trust is a unified security platform designed to protect the entire digital journey of users and transactions. Built on a Zero Trust security architecture powered by cryptography, Savyint Digital Trust helps organizations strengthen security, enhance user experience and build sustainable digital trust. The solution integrates key capabilities, including: With high scalability and flexible integration with internal enterprise systems, Savyint Digital Trust is suitable for various sectors, including digital banking, fintech, e-wallets, payments, e-commerce, enterprises, government, public services and systems that process sensitive data. SAM Appliance – An all-in-one solution for data encryption, digital signature authentication and mobile identification Alongside Savyint Digital Trust, SAM Appliance is also one of SAVYINT’s two solutions honored at Sao Khue 2026. It is an all-in-one solution for data encryption, digital signature authentication and mobile identity, built on a Cloud HSM platform. The solution ensures compliance with standards for remote signing, blockchain, crypto assets, mobile payment, data encryption, transaction encryption, timestamping, security, system authentication, IoT, Car2X and more. SAM Appliance includes: SAM Appliance confidently complies with regional technical standards as well as international legal and regulatory requirements such as FIPS 140-2 Level 3, ISO 9001:2015, ISO 14001:2015, ISO 27001:2022, GDPR, SOC 2 Type II, HIPAA and PCI DSS. Notably, SAM Appliance supports Post-Quantum algorithms such as ML-KEM, ML-DSA and SLH-DSA, helping shape organizations’ security strategies in the quantum era. The Sao Khue Awards 2026 are not only a recognition of SAVYINT’s innovation efforts, but also a motivation for the company to continue researching, improving and bringing to market more comprehensive solutions for security, identity and digital trust, contributing to the development of a safe, reliable and sustainable digital infrastructure for Vietnam and international markets. Two consecutive years of participation and two consecutive awards at Sao Khue stand as proof of the steadfast journey the company has pursued from the very beginning: strengthening security and building digital trust. Savyint will continue contributing to the development of a secure, trusted and sustainable digital infrastructure for Vietnam and the global market. Some snapshots from the event:
From PSD3 and eIDAS 2.0 to Zero Trust: A New Security Strategy for the Finance and Banking Sector
The financial sector is entering a period of profound transformation. Amid the rapid increase in both the frequency and financial impact of scams and payment fraud – alongside emerging risks from quantum computing and tighter regulatory requirements under PSD3 and eIDAS 2.0, financial institutions need a well-structured, proactive, flexible, and future-ready security strategy. From PSD1, PSD2 to PSD3: A new standard for digital payments and fraud prevention In 2007, the European Union’s first Payment Services Directive, PSD1, established a unified payments market, improved transparency, and enabled cross-border e-commerce. A decade later, PSD2 was introduced, driving competition through open banking, requiring Strong Customer Authentication (SCA), and creating a legal foundation for third-party access to payment accounts. By November 2025, the European Parliament and the Council of the European Union reached a provisional political agreement on PSD3, addressing emerging challenges in digital payments, open banking, and fraud prevention. One of the most notable aspects of PSD3 is the strengthened requirement for Strong Customer Authentication. SCA is no longer limited to payment authentication, but is also extended to a wider range of customer actions, such as changing transaction limits, updating contact information, restoring devices, setting up authorization, or changing authentication methods. Strong authentication is becoming an integral layer across the entire customer journey. Under the latest directive, PSD3 also reinforces the responsibility of payment service providers in fraud prevention. When incidents occur involving authentication failures or suspicious transactions, legal liability must be clearly defined. This is a key driver for financial institutions to invest more heavily in multi-layered authentication, risk analytics, transaction monitoring, and digital identity protection. In addition, PSD3 continues to promote API standardization in open banking, compliance with FAPI, and greater consistency, interoperability, and service quality among banks, fintech companies, and third-party providers. If PSD3 raises the question of how to strengthen customer authentication, reduce fraud, and ensure accountability in digital payments, then eIDAS 2.0 provides part of the answer – by positioning digital identity and electronic identity wallets as a trusted, standardized, and cross-border foundation for user verification. eIDAS 2.0: Digital identity as the foundation of digital trust While PSD3 focuses heavily on payments and financial services, eIDAS 2.0 places electronic identity and trust services at its core. One of the most prominent elements of eIDAS 2.0 is the European Digital Identity Wallet, or EUDI Wallet. The EU DI Wallet enables individuals and businesses to store, manage, and use their digital identity across a wide range of services. When integrated into the financial sector, digital identity wallets can become a powerful authentication method, helping customers access banking services, verify their identity, and conduct transactions more securely. Beyond promoting the EUDI Wallet, eIDAS 2.0 also introduces stricter requirements for Trust Service Providers, or TSPs, in areas such as governance, risk management, and auditability. In particular, crypto-agility and readiness for Post Quantum Cryptography, or PQC, are identified as critical factors to ensure the long-term resilience of trust services. The requirements under PSD3 and eIDAS 2.0 reflect a clear trend: financial security is becoming inseparable from digital identity. A secure transaction requires not only a protected payment system, but also a trusted and verifiable identity authentication foundation. For banks and fintech companies, this creates an urgent need to prepare modern authentication infrastructure that can integrate with digital identity wallets, support passwordless authentication, manage the identity lifecycle, and provide compliance evidence when required. Zero Trust Security Architecture: Never trust by default, always verify Zero Trust is one of the most widely discussed security architectures today, thanks to its strong security posture and core principles: Instead of assuming that users, devices, or applications inside the system are secure, the Zero Trust model starts from the principle that no user, device, or application should be trusted by default. As a result, every access request must be continuously verified, rather than checked only once at login. For the Finance and Banking sector – where sensitive data, high-value transactions, and multiple third-party connection points are involved – a well-implemented Zero Trust security architecture can help organizations reduce the risk of unauthorized access, minimize potential damage when incidents occur, and strengthen control over activities across the entire system. Further reading on Zero Trust: Savyint Group: A trusted partner in building digital trust Bringing together leading experts in open banking, data encryption, and payment security, Savyint is ready to accompany enterprises and global partner ecosystems throughout the journey – from assessment and roadmap consulting to testing and implementation of Zero Trust-aligned security solutions. These solutions are designed to meet stringent international standards such as PSD3, eIDAS 2.0, PCI DSS,… and to prepare organizations for the Post Quantum era. Savyint’s comprehensive security and fraud prevention solution suite, built on a Zero Trust architecture, addresses multiple critical challenges at once: Notably, Savyint is also the first organization to announce a PQC Lab in Vietnam. The lab enables organizations to explore NIST-approved PQC algorithms, address real-world challenges in the Finance sector, and assess compatibility, performance, and impact – without disrupting existing infrastructure or operational systems. Through this testing environment, organizations can reduce migration risks, select suitable technologies, and systematically build internal capabilities. In addition to its deep expertise, Savyint is also a global technology partner of major industry leaders such as Entrust, Keyfactor, Crypto4A, Kryptus, Futurex, Thales,… Connect with Savyint’s experts today to stay ahead of the next wave of security innovation.
Strengthening Fraud Prevention in the Digital Environment with Device Fingerprinting
As organizations, especially those in finance and banking, e-commerce, and digital services, increasingly require stronger identity-based security models, device fingerprint has become an important component of modern authentication, fraud prevention, and risk control strategies. What is Device Fingerprinting? Device fingerprinting, also known as a “digital fingerprint for device identification,” is a method of identifying a device based on a set of software and hardware information, including: When combined, these data points create a digital identity. Each device usually has a unique digital identity that enables recognition. Even if users delete cookies or start a new login session, the system can still determine whether the device is familiar or not. This is also why device fingerprinting is widely used in authentication systems, fraud detection tools, and identity security platforms, as it adds an intelligent layer of identification that does not rely solely on usernames and passwords. How Does Device Fingerprinting Work? Like a miniature fraud detection system, device fingerprinting also operates based on the mechanism of: collecting information → combining the information to create a unique fingerprint → identifying the device over time. Step 1: Collecting Device Attributes When users access a website or log in to an application, the system begins collecting information related to the device, such as browser information including type, version, and plugins; operating system and device type; screen size and resolution; language and time zone; IP address and network signals, among others. This data is collected passively and does not interrupt the user experience. Step 2: Creating a Unique Fingerprint for the Device After collecting sufficient information, the system combines these data points to generate a unique identifier, forming a distinct fingerprint value. Step 3: Storing and Matching the Device Identity Once the fingerprint is created, the system securely stores it on the server side. During the next login, the system compares the new fingerprint with previously known fingerprints. Instead of treating every login attempt the same way, the system adapts based on whether the device is trusted, allowing it to make appropriate follow-up decisions. Benefits of Device Fingerprinting Compared with traditional security measures, device fingerprinting enhances fraud detection capabilities in various scenarios, such as account takeover, fraud in digital account registration, and payment fraud, thanks to the following advantages: Strengthening Fraud Prevention with Savyint’s Compliant and Secure Solution Suite As organizations demand stronger security, device fingerprinting, together with advanced authentication methods and passwordless authentication, has become an essential component of modern security architecture. This is also a key strength of Savyint’s comprehensive compliance and security solution suite. Designed based on Zero Trust architecture, Savyint’s solution suite combines multiple layers of modern security and authentication, including device fingerprinting, device intelligence, contextual authentication, and passwordless authentication such as Passkeys/FIDO2, biometrics, tokens, and smart OTP. This enables businesses and organizations to: Connect with Savyint’s experts today HERE to build a robust security and fraud prevention strategy from the ground up. Read more:
RMiT 2025 Tightens Strong Authentication Requirements in Malaysia and Savyint’s Compliance Solutions for Financial Institutions
In November 2025, Bank Negara Malaysia (BNM) officially issued an updated version of its Risk Management in Technology (RMiT) policy, introducing stricter requirements for enhanced identity verification, device binding, and fraud prevention across Malaysia’s financial sector. 1. About BNM’s RMiT Policy Risk Management in Technology (RMiT) is Bank Negara Malaysia’s central policy framework for managing technology risk and cybersecurity risk in the financial sector. The policy sets out minimum requirements for financial institutions to strengthen governance, cybersecurity, technology operations, digital services, third-party risk management, cloud adoption, fraud detection, and customer protection. Its objective is to ensure that financial institutions can maintain secure, stable, and trusted digital services amid increasingly complex cyber threats. RMiT applies to all financial institutions regulated by BNM, ranging from banks to insurers and reinsurers, electronic money issuers, payment system operators, financial institutions, and money transfer intermediaries. 2. The November 2025 RMiT Update The RMiT policy issued in June 2023 introduced several authentication-related requirements, including multi-factor authentication, access management, and digital service controls. However, these requirements remained largely guidance-based rather than mandatory standards. In November 2025, the updated RMiT policy was issued, marking a significant turning point in strong authentication by introducing clearer mandatory requirements on how organizations must authenticate users and protect digital services. Below are the key changes. a. One Device per User by Default One of the most important changes is the default requirement to use only one device, aimed at preventing SIM-swap fraud and account takeover. Financial institutions must ensure secure device binding and unbinding processes, while limiting digital service transaction authentication by default to one mobile device per account holder. Users may register additional devices, but they must actively request this and accept the associated risks. Financial institutions are not allowed to make multiple devices the default option. The process must include: b. Stronger Verification for Mobile Number Changes Previously, many banking applications allowed users to update their mobile phone numbers by confirming an OTP sent to the existing number. However, this approach is no longer considered secure if the number has already been compromised or affected by SIM swapping. Therefore, under the latest RMiT update, organizations are required to adopt stronger authentication mechanisms, such as: c. Cooling-Off Periods and Transaction Limits for Newly Registered Devices RMiT requires appropriate verification and cooling-off periods in the following cases: Accordingly, newly registered devices should not be granted full transaction privileges immediately. Organizations need to establish time-based limits and transaction frequency controls. Transaction rights should be gradually expanded as the device and user behavior build a trusted history. Combined with fraud detection standards that require behavioral analytics and real-time risk scoring, RMiT requires the authentication layer to understand context, not merely verify login credentials. d. Multi-Factor Authentication and Passwordless Authentication to Reduce Dependence on SMS OTP The most important change in the RMiT update is the requirement to use MFA and passwordless authentication methods. MFA must be resistant to interception or manipulation by third parties throughout the authentication process. Examples of passwordless authentication methods include biometric authentication, device binding, cryptographic key-based authentication, and risk-based step-up authentication. In addition, “transaction linking” requires the authentication code to be bound to specific transaction details, including the recipient and transaction amount, rather than being linked only to the login session. 3. Savyint – A Global Expert in Strong Payment Authentication and Risk Prevention Amid rising security requirements, Savyint provides a comprehensive security ecosystem that helps banks and financial institutions comply with BNM’s RMiT regulations while enhancing their overall security and risk management capabilities. Built on a Zero Trust architecture and centered around four key pillars – Secure Payment, Open Banking, Secure Data, and Digital Trust – Savyint’s RMiT compliance solution enables financial institutions to: This solution is designed in strict compliance with international standards such as FIDO2, PSD2/PSD3 eIDAS, GDPR, PCI DSS,… ensuring rapid deployment, compatibility with existing infrastructure, and the highest level of security. Connect with Savyint experts today to build a secure and compliant payment ecosystem.
Top 6 Benefits of Zero Trust Security Architecture
As cyberattacks become increasingly sophisticated, traditional security models such as firewalls, VPNs, or trusted internal networks are no longer sufficient to protect modern enterprises. Zero Trust Architecture has emerged as a critical approach in today’s cybersecurity landscape, helping organizations strengthen protection across users, devices, applications, data, and digital transactions. What is Zero Trust Architecture? Zero Trust Architecture is a modern security model built on the principle of “never trust, always verify.” It is designed for today’s complex, distributed, and increasingly cloud-based IT environments. Unlike traditional security models, Zero Trust requires every access request to be continuously verified, whether it originates from inside or outside the organization. Zero Trust Architecture typically combines multiple security technologies, including: Key Benefits of Zero Trust Security Architecture Implementing Zero Trust can bring significant benefits to enterprises and organizations, including: 1. Strengthening Comprehensive Security Against Advanced Threats Zero Trust helps organizations defend against threats such as ransomware, phishing, compromised accounts, and insider risks. By enforcing least-privilege access and continuous verification, businesses can significantly reduce the risk of attackers exploiting exposed credentials to access sensitive systems and data. 2. Reducing the Risk of Data Breaches Since every access request must be verified, attackers cannot easily reach sensitive data even if they manage to compromise an account or device. This helps limit unauthorized access, reduce lateral movement within the system, and minimize the potential impact of security incidents. 3. Improving Monitoring and Incident Detection Zero Trust enables organizations to monitor user behavior, devices, applications, and access activities in real time. With stronger visibility across the digital environment, businesses can detect unusual activities earlier, respond to risks more quickly, and improve their overall incident response capability. 4. Supporting Remote Work, Cloud, and Hybrid Infrastructure With Zero Trust, users can securely access enterprise resources from anywhere, as long as their identity, device, and access permissions are properly verified. This is especially valuable for remote and hybrid work models, where employees may access corporate systems from different locations, networks, and personal devices. 5. Enhancing Regulatory Compliance Zero Trust provides a unified governance framework for enforcing security policies, authenticating users, managing access rights, and maintaining activity logs. This allows organizations to better meet data protection and information security requirements in highly regulated sectors such as finance, banking, healthcare, telecommunications, and government. 6. Optimizing Long-Term Security Costs While Zero Trust implementation may require initial investment, it can help optimize security costs in the long run. By consolidating security controls, reducing the likelihood of data breaches, and limiting damage when incidents occur, Zero Trust helps organizations build a more sustainable and cost-effective cybersecurity strategy. A Comprehensive Zero Trust-Based Security and Fraud Prevention Solution for BFSI Organizations With deep experience in the Finance and Banking sector and a proven track record of implementing projects for major banks, SAVYINT introducs e a comprehensive security and fraud prevention solution built on Zero Trust Architecture. Aligned with the core pillars of modern Zero Trust, SAVYINT’ solution enables end-to-end protection across users, devices, applications, data, and digital transactions: + Identity verification and user access control + Establish device trust + Real-time application protection with RASP+ + API security and third-party connectivity + Consent management and personal data protection + AI/ML integration, transaction risk assessment, and real-time fraud prevention + Automated compliance reporting + Support compliance with Vietnamese regulations, including Circular 50, Circular 64, Circular 77 of the State Bank of Vietnam, Decree 356, the Data Protection Law, and the Cybersecurity Law,…; international standards such as eIDAS, GDPR, and PCI-DSS…; and regional regulations such as Malaysia’s PDPA and RMiT, and the Philippines’ AFASA and BSP 1213–1215… Connect with SAVYINT experts today to take the lead in enterprise-wide security and fraud prevention! Read more: Zero Trust – A Next-Gen Security Architecture for Vietnamese Banks Amid Increasingly Stringent Regulations