From AFASA to BSP Circulars 1213 – 1215: SAVYINT Partners with Philippine Banks to Strengthen Security and Fight Digital Fraud
The rapid growth of digital banking, e-wallets, and online payments in the Philippines has led to a serious consequence – financial fraud is becoming increasingly sophisticated and more organized. Following the enactment of AFASA, the Bangko Sentral ng Pilipinas (BSP) continued to issue BSP Circulars 1213, 1214, and 1215, tightening the responsibilities of financial institutions and imposing stricter requirements for user authentication, fraud management, and data protection. About AFASA and BSP Circulars 1213, 1214, and 1215 Officially taking effect on June 25, 2025, the Anti-Financial Account Scamming Act (Republic Act No. 12010) was enacted by the Philippine government with the following core objectives: One of the most important requirements under AFASA is the mandatory transition of authentication methods before June 2026. OTPs sent via SMS and email will no longer be accepted for high-risk transactions. Instead, more secure methods must be implemented, such as biometric authentication, passwordless authentication, and adaptive multi-factor authentication (MFA) based on risk levels. AFASA marks a major shift in risk management thinking: account security is no longer just a technology choice – it is now a legal obligation. BSP Circular 1213 – Focus on Fraud Management and Strong Authentication Among the three circulars, BSP Circular 1213 is considered the technical backbone that brings AFASA into real operational practice. This circular requires banks and financial institutions to: BSP Circular 1213 clearly states that traditional authentication methods are no longer sufficient. Systems must understand user behavior patterns and detect fraud at the earliest stages – during login or even before a transaction is completed. Read more: Philippines BSP Circular No. 1213 and Compliance Solutions for Financial Institutions BSP Circular 1214 – Enabling Data Sharing for Faster Fraud Response BSP Circular 1214 addresses a major legal bottleneck related to accessing account data during fraud investigations. Its main goal is to create a fast-response mechanism to prevent funds from being completely withdrawn before authorities can intervene. Under this regulation: BSP Circular 1215 – Protecting Funds During Disputes While Circular 1213 focuses on prevention and 1214 focuses on investigation, BSP Circular 1215 addresses what happens after an incident occurs. It allows financial institutions to protect customer funds during the investigation period, preventing money from “disappearing” within minutes. Specifically, this circular: Together, AFASA and BSP Circulars 1213, 1214, and 1215 are reshaping the digital financial security standards in the Philippines. Financial institutions now need not only compliance documentation but also a strong technology foundation capable of detecting, preventing, and responding to fraud in real time. AFASA & BSP 1213, 1214, 1215 – Compliant Security Solutions from SAVYINT Savyint is a leading trusted service provider, ready to deliver authentication and payment security solutions that strictly comply with security standards and regulatory requirements under AFASA, BSP Circulars 1213, 1214, and 1215 issued by the Bangko Sentral ng Pilipinas (BSP), as well as the Philippine Open Banking framework and international regulations. Savyint’s solution ecosystem is built around four key pillars: Risk Management & Compliance, Cybersecurity & Application Protection, SCA/MFA Identity, and the FMS AI Fraud Engine. Together, these components protect the entire customer journey – from registration, login, authentication, and transaction execution to post-transaction monitoring. SAM Auth Server SAM Auth Server is an all-in-one strong authentication solution designed for mobile payments and digital banking. Built on a Zero Trust architecture and integrated with a FIPS 140-3 Level 3 certified Hardware Security Module (HSM), and ready for Post-Quantum Cryptography, SAM Auth Server supports a wide range of modern authentication methods, including: Biometric authentication, Smart OTP, Push Authentication, FIDO2 / Passkeys and Context-based authentication It enables step-up authentication when risk levels increase, ensuring maximum protection for electronic transactions. SAM FIDO2 Identity Server SAM FIDO2 Identity Server is a passwordless identity and authentication platform based on FIDO2/WebAuthn standards. It eliminates password storage by replacing passwords with asymmetric key-based authentication securely stored on the user’s device.As a result, the system effectively protects against common attacks such as phishing, man-in-the-middle attacks, and credential stuffing. SAM FIDO2 Identity Server fully meets Strong Customer Authentication (SCA) requirements under PSD2/PSD3 and complies with international standards for identity and data security. SAVYINT Fraud Prevention & Risk Management SAVYINT Fraud Prevention & Risk Management leverages AI and Machine Learning (ML) to help banks and financial institutions detect, assess, and prevent fraud across the entire user journey – from login behavior, device characteristics, and access context to transaction data. Key capabilities include: RASP+ RASP+ protects mobile applications directly within the runtime environment, detecting and blocking attacks while the application is running. It can detect rooted or jailbroken devices, debugging attempts, code tampering, hooking techniques, memory manipulation and emulator-based attacks. RASP+ integrates directly into mobile applications without affecting performance, ensuring strong protection without compromising user experience. TrustShield TrustShield is a mobile fraud prevention platform powered by device fingerprinting, behavioral analytics, and AI. It can identify devices without relying on cookies or advertising IDs, detect emulators, rooted or jailbroken devices, identify multi-device fraud patterns, analyze in-app user behavior, generate real-time risk scores and trigger adaptive authentication directly on mobile devices. With a multi-layered architecture and seamless integration capabilities, Savyint’s security ecosystem delivers a comprehensive fraud prevention model – protecting devices, behavior, identity, and transactions simultaneously. All solutions comply with AFASA, BSP Circulars 1213, 1214, 1215, and international standards such as FIDO2, PSD2/PSD3, eIDAS, GDPR, and PCI DSS. This allows fast deployment on existing infrastructure while achieving the highest level of security. Connect with Savyint’s experts today to implement and optimize your security solutions – and be fully prepared to meet AFASA and BSP requirements within just 3 months!
Financial Fraud Prevention: Protecting Assets, Data and Customer Trust
Proactive financial fraud prevention not only helps minimize losses but also plays a critical role in maintaining seamless customer experiences and improving overall operational efficiency. As fraud schemes become increasingly sophisticated, faster, and larger in scale, traditional control measures are no longer sufficient. Financial fraud prevention is therefore no longer merely a matter of compliance or security – it has become a strategic priority that enables organizations to optimize processes and ensure sustainable growth. 1. Benefits of Financial Fraud Prevention Implementing robust fraud prevention measures not only safeguards customers and organizations but also supports long-term, sustainable business growth. a. Minimizing financial losses Fraud can cause significant damage even when incidents occur on a small scale. Effective preventive measures help organizations reduce the risk of loss, control costs, and build a solid financial foundation for long-term development. b. Optimizing revenue and transaction processing efficiency One direct benefit is the improvement of authorization rates by reducing false declines of legitimate transactions – a common challenge in online payments. When transactions are processed accurately and quickly, completion rates increase, enabling businesses to maximize revenue. c. Protecting customer data and digital assets In the financial and banking sector, protecting personal information and financial data is essential to maintaining customer trust. Account Takeover (ATO) attacks and card data theft not only result in financial losses but also severely damage an organization’s reputation. By proactively preventing fraud, organizations can detect and stop these threats early, before real damage occurs. d. Enhancing customer experience Customers increasingly expect transactions to be smooth, uninterrupted, and free from unnecessary verification steps. Reducing fraud also means reducing unnecessary transaction rejections, leading to better customer experiences while lowering operational pressure and costs for businesses. e. Preserving brand reputation As noted above, even minor fraud incidents can erode customer trust and negatively impact brand image. Investing in comprehensive fraud prevention demonstrates a strong commitment to security and customer protection, helping organizations build a trusted and credible brand over the long term. 2. Effective Fraud Prevention with Savyint Fraud Prevention and Risk Management With these benefits in mind, a comprehensive and effective fraud prevention system enables banks and financial institutions to minimize losses, strengthen transaction protection, ensure customer data security, and enhance long-term operational efficiency. This is precisely the objective of Savyint Fraud Prevention & Risk Management (FPRM). Built on a Zero Trust architecture, Savyint FPRM enables organizations to proactively prevent fraud while integrating risk management and transaction security. The solution leverages AI and Machine Learning for behavioral analysis, combined with strong authentication mechanisms such as SCA, multi-layer MFA, and biometrics, along with advanced security technologies including tokenization and Post-Quantum Cryptography (PQC). This enables: As a result, organizations can detect, prevent, and respond to fraud effectively before losses occur. Savyint Fraud Prevention & Risk Management (FPRM) also complies with global standards such as AML, KYC, KYB, PSD2, PSD3, and PCI-DSS, as well as local regulatory requirements including Circulars 64 and 50 (Vietnam), BSP 1213 (Philippines), and regulations in Malaysia. Connect with Savyint experts today for detailed consultation on a fraud prevention roadmap tailored to your organization’s business model!
Strengthening Authentication and Security in the Financial and Banking Sector in Southeast Asia
Alongside the rapid growth of the financial and banking sector, regulatory frameworks across many Southeast Asian countries have been continuously updated and refined to enhance safety and security in financial operations. In Vietnam, Singapore, the Philippines, and Malaysia, newly issued regulations go beyond technical compliance requirements and increasingly focus on protecting users and strengthening trust in digital financial systems. Safeguarding digital identities, personal data, and financial transactions is now widely recognized as a prerequisite for the sustainable development of the electronic financial ecosystem. In response to these increasingly stringent requirements, financial institutions are compelled to comprehensively upgrade their authentication capabilities, security controls, and risk-management frameworks to a higher level. Security Requirements for Open API Implementation The rapid expansion of digital banking, e-wallets, Open Banking, and fintech partnership models has made fraud, cyberattacks, and data leakage common challenges across the region. Establishing strict security requirements for Open API implementation has therefore become a critical prerequisite for protecting financial systems and maintaining customer trust. In Singapore, as early as 2016, the Monetary Authority of Singapore (MAS) issued Open Banking and API guidelines requiring financial institutions to implement strong authentication mechanisms, customer consent management, identity and access control, and strict authorization when sharing data with partners. From an early stage, Singapore mandated standards such as secure API gateways, OAuth/OIDC-based security, multi-factor authentication (MFA), and contextual access monitoring as foundational requirements for sustaining trust within the open financial ecosystem. In 2021, the Philippines introduced the Open Finance Framework, which defines a phased roadmap for data sharing with clearly articulated technical, governance, and security standards aimed at building an open financial ecosystem. One year later, in 2022, Bank Negara Malaysia (BNM) launched the Open API Framework, providing clear guidance on how banks and third-party fintech providers can securely share data. The framework emphasizes strict security controls, customer-consent-based access management, and technical reference guidelines to promote innovation and fair competition within the digital financial ecosystem. In Vietnam, Circular 64/2024/TT-NHNN regulates the implementation of Open Application Programming Interfaces (Open APIs) in the banking sector, allowing credit institutions to connect and collaborate with third parties to deliver new financial services. However, ecosystem expansion must be accompanied by stringent requirements for authentication, access control, data protection, and customer consent management. The Circular also defines a clear roadmap for banks that have already deployed Open APIs, ensuring a controlled and secure transition process. Data Protection and Financial Fraud Prevention Requirements Singapore and the Philippines have long established comprehensive legal frameworks to protect customer data. Singapore is a regional pioneer in data-protection and digital-banking regulation. The Personal Data Protection Act (PDPA), enacted in 2012 and amended in 2020, provides detailed rules governing the collection, use, and storage of personal data, and requires organizations to notify authorities in the event of data breaches. In the banking sector, the Technology Risk Management Guidelines issued by MAS mandate multi-factor authentication (MFA), the use of OTPs or biometrics, and enhanced monitoring of high-risk transactions. The Philippines adopted the Data Privacy Act in 2012, one of the earliest such frameworks in the region, granting users the right to access, correct, and delete personal data. Compliance is overseen by the National Privacy Commission (NPC). In banking, the Bangko Sentral ng Pilipinas (BSP) mandates MFA for electronic payment services, the implementation of eKYC, and device and transaction risk management. Most recently, BSP Circulars 1213 and 1214 were issued in response to rising financial account fraud, to enforce the Anti-Financial Account Scamming Act (AFASA). These regulations emphasize enhanced technology risk management, the adoption of modern authentication methods, and the establishment of coordinated investigation and information-sharing mechanisms between banks and law-enforcement authorities. Specifically: In Vietnam, the Personal Data Protection Decrees (2023), together with the Cybersecurity Law (2018), impose strict requirements on customer consent, impact assessments for sensitive data, and data localization. More recently, Circular 50/2024/TT-NHNN establishes security requirements for online banking services, mandating that credit institutions and foreign bank branches implement customer-protection guidelines (PINs, OTPs, fraud awareness), encryption, access monitoring, and incident reporting to ensure confidentiality, integrity, and availability while protecting customer rights. Overall, regulatory priorities in Singapore, Vietnam, the Philippines, and Malaysia converge around the adoption of advanced security measures to protect customers from technological risks, online fraud, and cyberattacks, alongside clearly defined Open API implementation roadmaps. Strengthening Authentication and Security with Savyint’s Comprehensive Solutions In response to increasingly stringent compliance requirements, Savyint delivers a comprehensive security ecosystem that enables banks and financial institutions to effectively comply with Circulars 64 and 50, as well as BSP Circulars 1213 and 1214, while strengthening long-term security capabilities and risk governance. Savyint’s solution portfolio is built around four core pillars: Secure Payments, Open Banking, Data Protection, and Digital Trust. Under the Secure Payments pillar, Savyint deploys strong customer authentication (SCA), multi-factor authentication (MFA), Smart OTP, passkeys, FIDO2, biometrics, 3D Secure, tokenization, and fraud-management capabilities such as risk scoring and real-time monitoring. This security layer directly protects card payments, e-wallets, online transfers, and e-commerce transactions, reducing fraud risks for customers, financial institutions, and merchants while safeguarding wallet and card data. To support controlled Open API connectivity under Circular 64 and Open Banking standards, Savyint provides a full Open Banking solution suite, including API Management, Open Banking Portal, Consent Management, CIAM/SCA-PSD2, TPP Management, and Tokenization. These solutions enable banks to securely deploy Open APIs with strict access control, robust customer consent management, and purpose-limited data sharing in line with security and compliance requirements. For transaction and data protection, Savyint secures information throughout its lifecycle with solutions such as Sam Appliance, Sam Auth Server, Savyint PKI-in-a-Box, Enterprise Security Appliance, KMS, and DSS. Notably, Sam Appliance is an all-in-one platform for data encryption, digital signatures, and mobile identity, featuring a FIPS 140-2 Level 3-certified server appliance integrated with Hardware Security Modules (HSMs), SAM software, key-management systems, and digital-signing software. This flexible security platform supports diverse deployment needs across banking, finance, healthcare, education, telecommunications, broadcasting, and media sectors. Beyond digital signatures for invoices, contracts, documents, certificates, and payment records, Sam Appliance is built on a Cryptographic
AI/ML-Based Banking Transaction Fraud Prevention
As digital transformation accelerates, detecting and preventing banking transaction fraud through advanced technologies such as AI and machine learning (AI/ML) has become a top strategic priority for financial institutions, as cybercrime continues to grow in both scale and sophistication. According to the latest data from the U.S. Federal Trade Commission (FTC), total consumer-reported fraud losses in 2024 reached approximately USD 12.5 billion, representing an increase of nearly 25% compared to 2023. This highlights the rapidly escalating severity of fraudulent activities. Beyond direct financial losses, banks also incur substantial additional costs related to investigations, legal proceedings, incident response, and reputation recovery – often making the actual cost several times higher than the initial monetary loss. More critically, fraud incidents significantly erode customer trust, negatively impacting customer retention and the ability to attract new users. Investing in advanced fraud detection systems and proactive prevention measures is therefore not merely an operational requirement, but a strategic imperative for banks to protect assets and maintain credibility in the digital era. What Is Banking Fraud Prevention? Banking fraud prevention refers to the use of multiple, layered protection methods by banks to detect early signs of fraud, reduce risk exposure, and prevent financial fraud before it causes serious damage. Today, modern fraud prevention strategies no longer focus solely on incident response after fraud has occurred. Instead, they emphasize proactive prevention from the outset. These approaches integrate advanced data analytics, real-time monitoring, and AI-driven risk assessment, enabling banks to stay ahead of increasingly complex financial threats. As fraud types become more sophisticated, fraud detection technologies are more critical than ever to maintaining the security and integrity of banking data and transactions. Using AI/ML to Detect and Prevent Banking Fraud By deploying a flexible and adaptive defense system against financial fraud threats, banks and financial institutions can effectively prevent and minimize the impact of fraudulent activities. At the core of this defense system is the application of advanced data analytics, artificial intelligence, and machine learning to detect fraud patterns in real time and provide early warnings of potential risks. In parallel, banks deploy phishing-resistant Strong Customer Authentication (SCA) and Multi-Factor Authentication (MFA), incorporating FIDO2 security keys, passkeys, transaction signing, device-bound cryptographic keys, and biometric factors. Together, these mechanisms create a flexible, adaptive and resilient defense against financial fraud, ensuring that only authorized users can access accounts and sensitive information. Real-time transaction monitoring serves as a foundational component of financial fraud prevention systems. Beyond supporting compliance with KYC and anti-money laundering requirements, continuous AI/ML-driven monitoring enables large-scale data analysis to identify abnormal behaviors as soon as they occur, thereby mitigating risks before fraud results in actual losses. Periodic risk assessments involve analyzing emerging fraud trends, reviewing vulnerabilities in existing systems, and adjusting prevention strategies accordingly. This allows banks to continuously refine and enhance the effectiveness of fraud detection over time. Beyond detection and assessment, AI/ML enables the prediction of future fraud risks. By learning from past fraud incidents, systems can identify individuals or groups with a higher likelihood of committing fraud, helping organizations allocate preventive resources more precisely and effectively. Strong Customer Authentication and Multi-Factor Authentication enhance the security of user access and transaction approval by moving beyond traditional password-based mechanisms. When implemented with phishing-resistant authentication methods such as FIDO2 security keys, passkeys, transaction signing, device-bound cryptographic keys, and biometrics, SCA/MFA provides a flexible, adaptive, and resilient security layer. This method ensures that only legitimate users can access accounts and authorize transactions, effectively mitigating risks such as phishing, credential theft, account takeover, and financial fraud, while meeting stringent regulatory and security requirements. Alongside technology, customers play an increasingly important role. Proactively raising customer awareness of common scam techniques and providing guidance on safe transaction practices empowers users to protect themselves against fraud and social engineering attacks. Financial fraud prevention is a continuous journey that requires banks and financial institutions to constantly update and adopt new technologies to enhance prevention capabilities and minimize fraud-related losses. Savyint delivers a comprehensive Fraud Prevention and Risk Management solution suite designed to help banks and financial institutions detect fraud early, prevent incidents promptly, and manage fraud risks effectively. Connect with Savyint’s experts today to strengthen your defenses and minimize financial fraud risks. Source:
SAM Appliance Wins Asia-Pacific ICT Award (APICTA) 2025
On December 8, at the announcement and awarding ceremony of the Asia-Pacific ICT Awards (APICTA) 2025, SAVYINT’s SAM Appliance was honored as the Second Runner-up in the category Security Solution – Business Service. APICTA is the most prestigious ICT award in the Asia-Pacific region, held annually since 2001 by the Asia Pacific ICT Alliance. This year, APICTA 2025 took place in Kaohsiung, Taiwan, celebrating and recognizing outstanding software products, IT solutions, digital applications, and innovative startup projects from 17 member countries and economies. SAM Appliance by SAVYINT excellently achieved the Second Runner-up title in the Security Solution – Business Service category. This accomplishment is particularly meaningful as it marks SAVYINT’s first participation in APICTA, demonstrating the innovative capabilities and solution quality of Vietnamese technology enterprises on an international stage. SAM Appliance – An all-in-one solution for data encryption, digital signature authentication and mobile identification SAM Appliance is a solution for all-in-one data encryption, digital signature authentication and mobile identification, ensure compliance with standards for remote digital signature, blockchain, crypto currency, mobile payment, data encryption, transaction encryption, timestamp, security, system authentication, IoT, Car2X… SAM Appliance includes a FIPS 140-2 Level 3–certified Server Appliance combined with Hardware Security Module (HSM) devices, integrated with SAM Software, Key Management Software (KMS), and digital signing software, creating a comprehensive and flexible security platform for any deployment needs and sectors such as Finance and Banking, Healthcare, Education, Telecommunications, Broadcasting, Media,… With its compact design and all-in-one hardware architecture, the solution enables fast installation and operation, optimal performance, unlimited integration with existing information systems, and maximum minimization of security vulnerabilities. It ensures system safety thanks to its independent and specialized operating environment, eliminating reliance on third parties, while significantly reducing investment costs compared to traditional specialized security infrastructures. More than just a platform for signing invoices, contracts, documents, certificates, or payment records, SAM Appliance is built on the Cryptographic Security Platform (CSP). It integrates SCA and MFA authentication, PKI-based passwordless authentication, tokenization, transaction signing with end-to-end encryption, advanced mobile security with Cryptography, and supports Post-Quantum Cryptography (PQC) — ready for the new security era. It also supports data and transaction encryption, blockchain and cryptocurrency integration, mobile payment and digital wallet capabilities, timestamped digital signatures, and long-term electronic archiving for 5, 10, and 20 years. SAM Appliance fully complies with regional technical standards and international legal regulations, including FIPS 140-2 Level 3, ISO 9001:2015, ISO 14001:2015, ISO 27001:2022, GDPR, SOC 2 Type II, HIPAA & PCI DSS. During the event, Brad Palmer, COO & EVP of Savyint, shared: “SAM Appliance is a breakthrough technology solution designed to address the core challenges of security, data encryption, and digital identity in today’s era of rapid digital transformation. We developed SAM Appliance as a unified security platform where any organization or enterprise can deploy digital signatures, strong authentication, and secure data and transaction encryption on a single hardware device that meets the highest international standards.” Being honored at APICTA 2025 is a powerful affirmation of Savyint’s technological capabilities. Along with SAM Appliance, Savyint’s solutions will continue to accompany global organizations and enterprises on their journey toward safe, sustainable, and fully compliant digital transformation. Photos from the event:
Embracing the Quantum era with Post-Quantum Cryptography (PQC)
In the near future, quantum computers are expected to become powerful enough to break traditional asymmetric cryptographic algorithms—the backbone of data security for messages, documents, and online transactions. Post-Quantum Cryptography (PQC) is being developed to counter this immense computational power. Post-Quantum Cryptography (PQC), also referred to as Quantum Safe Cryptography (QSC), encompasses encryption algorithms designed to withstand attacks from quantum computers. What is Quantum Computing? Quantum computing leverages principles of quantum physics to solve mathematical problems exponentially faster than classical computers. Tasks that would take today’s most powerful supercomputers years to complete could be reduced to mere days by quantum computers. This unprecedented computational power heralds a new era for applications like artificial intelligence. However, alongside its benefits, quantum computing poses significant security threats. Why Are Quantum Computers a Security Threat? Once sufficiently advanced quantum computers emerge, traditional asymmetric cryptographic algorithms will become vulnerable. For instance, widely used algorithms like RSA and ECC, which rely on mathematically complex problems such as integer factorization and discrete logarithms, are employed globally to secure bank accounts, medical records, and other critical data. However, quantum algorithms like Shor’s algorithm could easily break RSA and ECC. Governments and global tech corporations have acknowledged this threat, issuing warnings to protect critical infrastructure against potential quantum attacks. The U.S. National Security Memorandum of May 2022 states: “A sufficiently large and sophisticated quantum computer capable of breaking cryptography (CRQC) could compromise most public-key cryptographic algorithms used in digital systems across the U.S. and worldwide. A CRQC could endanger civilian and military communications, undermine supervisory and control systems for critical infrastructure, and defeat security protocols for most internet-based financial transactions.” What is Post-Quantum Cryptography (PQC)? To counter quantum attacks, global research efforts are underway to develop stronger algorithms to replace RSA and ECC, capable of resisting attacks from both classical and quantum computers. These algorithms are collectively known as Post-Quantum Cryptography (PQC). Why Act Now? While quantum computers capable of such feats may not yet exist, data collection is already occurring. Sensitive or private data, valuable for years or even decades, is at risk. Hackers may be storing encrypted data now, waiting for future quantum computers to decrypt it—a strategy termed “harvest now, decrypt later.” Additionally, devices like chips have long development cycles, requiring years of security testing and certification before deployment in existing infrastructure. Therefore, transitioning to PQC sooner rather than later is highly advantageous. Global Progress in PQC Development The most significant PQC research is led by the U.S. National Institute of Standards and Technology (NIST). NIST launched a global competition, inviting researchers worldwide to propose, evaluate, and validate new algorithms for resilience. On July 5, 2022, NIST announced the first set of standardized algorithms, including: Key encapsulation mechanism (KEM) CRYSTALS-Kyber and Digital signature algorithms such as CRYSTALS-Dilithium, FALCON, SPHINCS+. In 2022, the U.S. National Security Agency (NSA) released an updated Commercial National Security Algorithm Suite (CNSA 2.0), mandating that national security systems (NSS) fully transition to PQC algorithms by 2033, with some cases required as early as 2030. CNSA 2.0 specifies CRYSTALS-Kyber and CRYSTALS-Dilithium as key quantum-resistant algorithms, alongside hash-based signature algorithms like XMSS (Extended Merkle Signature Scheme) and LMS (Leighton-Micali Signatures). By August 2024, NIST published its first three standardized PQC algorithms to ensure proper implementation: NIST also outlined a roadmap to phase out classical cryptographic algorithms like RSA-2048 and ECC-256 starting in 2030, with complete discontinuation by 2035. How should businesses prepare for the quantum era? To be ready for the transition to post-quantum cryptographic algorithms, the first step for businesses is to review their entire systems and technology infrastructure to identify where RSA and ECC algorithms are currently being used. Next, they should assess the potential impact on speed and performance when switching to more secure Post-Quantum Cryptography (PQC) algorithms. Based on this assessment, businesses can then develop a step-by-step transition plan, while engaging with customers and partners to align on the migration approach and begin the transition. Savyint PQC Lab: Vietnam’s First Post Quantum Crytography Platform for Digital Signatures, PKI, and Data Encryption As an international technology group with extensive expertise in PKI, Cryptography, Blockchain, Electronic Identification, Authentication, and Open Banking/Finance, Savyint proudly introduces the Savyint PQC Lab – Vietnam’s first post-quantum cryptography platform tailored for digital signatures, PKI, blockchain, and cryptographic solutions. This testing platform enables organizations to explore NIST-approved PQC algorithms, assess compatibility, performance, and impact without disrupting existing infrastructure. This is critical for financial institutions and fintech organizations aiming to comply with international standards such as FIDO2, PSD2, eIDAS, and PCI DSS. Key features of Savyint PQC Lab: Connect with Savyint’s experts today to lead the way into the post-quantum era!