Finance & Banking , Industry Specific , PCI Standards

Application Security Threats Rise With Digital Banking

Security Expert Bon Soriano on Implementing the Latest PCI DSS Standards
Bon Soriano, cybersecurity manager, EY GDS

The shift toward digital banking has challenged banks to improve their secure coding practices by adhering to PCI DSS 4.0 standards. Bon Soriano, cybersecurity manager at EY GDS, discussed the importance of providing security training for software developers and appointing a security champion.

See Also: Software Supply Chain Platform for Financial Services

The latest standard of PCI DSS has put greater emphasis on application security. "When you're planning your application security training program for your organization, you need to clearly understand your overall goals. You need to focus on your specific goals in terms of your key performance indicator and also on how you can put this into standard practice," Soriano said.

"You also need to prioritize your internal communication so that all of your employees internally will also have the idea and knowledge on this and also support you," he said.

In this video interview with Information Security Media Group, Soriano discussed:

  • The effect digital transformation has on the threat landscape in the financial services industry;
  • The importance of PCI DSS 4.0 compliance for securing cardholder data;
  • The role of AI in enhancing secure coding practices and addressing cybersecurity challenges.

Soriano, who focuses on cybersecurity management at EY GDS in the Philippines, has more than 15 years of experience in various geographies in information security and designing policies, standards and procedures.


About the Author

Suparna Goswami

Suparna Goswami

Associate Editor, ISMG

Goswami has more than 10 years of experience in the field of journalism. She has covered a variety of beats including global macro economy, fintech, startups and other business trends. Before joining ISMG, she contributed for Forbes Asia, where she wrote about the Indian startup ecosystem. She has also worked with UK-based International Finance Magazine and leading Indian newspapers, such as DNA and Times of India.




Around the Network

Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing bankinfosecurity.in, you agree to our use of cookies.