Singapore, 1 November 2023… The Monetary Authority of Singapore (MAS) has imposed a six-month pause on DBS Bank Ltd’s (DBS Bank) non-essential IT changes to ensure that the bank keeps sharp focus on restoring the resilience of its digital banking services. DBS Bank will not be allowed to acquire new business ventures during this period or reduce the size of its branch and ATM networks in Singapore. The actions were taken following the repeated and prolonged disruptions of DBS’ banking services this yearDBS Bank experienced major disruptions to its banking services this year - on 29 March, 5 May, 26 September, 14 and 20 October 2023..

2. In April 2023, MAS directed DBS Bank to engage an independent third-party to conduct a comprehensive review of the effectiveness and adequacy of the people, processes, and technology supporting its digital banking servicesMAS Media Release on 5 May 2023 - “MAS Imposes Further Additional Capital Requirement on DBS Bank for Disruption of Banking Services” .. Shortcomings were identified in the following areas:

1. system resilience;
2. incident management;
3. change management;
4. technology risk governance and oversight

3. Following the independent review, DBS Bank has set out a technology resiliency roadmap to address the shortcomings, improve system resilience, and better position the bank to meet future digital banking needs. The roadmap is being implemented in phases, with the changes affecting its system architecture design taking more time to complete.

4. MAS has reviewed DBS Bank’s remediation plan under the roadmap and is satisfied with its scope and the planned measures to improve system resilience. In line with MAS’ expectations, DBS Bank will hold senior management accountable for the lapses and the board will enhance its governance approach to oversee implementation of the roadmap.

5. MAS has directed DBS Bank to suspend all changes to the bank’s IT systems except for those related to security, regulatory compliance and risk management for a six-month period.  This is to ensure that the bank dedicates the needed resources and attention to strengthen its technology risk management systems and controls. MAS will not approve any new business acquisitions by the bank during this period.

6. MAS has also directed DBS Bank not to reduce the size of its branch and ATM networks. This is to ensure there are adequate alternative channels for its customers in the event of further disruptions while the bank works to enhance the operational resilience of its digital channels. This direction will be in force until MAS is satisfied with the progress of DBS Bank’s remediation plan.

7. MAS will review the progress made by DBS Bank on its remediation efforts at the end of six months. MAS may extend the duration of the measures, vary the additional capital requirement currently imposed, or take further actions at that point. In the meantime, MAS will retain the multiplier of 1.8 times to DBS Bank’s risk weighted assets for operational risk, which was imposed after the March and May 2023 incidents.

8. It will take up to 24 months for DBS Bank to put in place the planned structural changes to improve the resilience of its digital banking services. In the meantime, it is possible that disruptions may still occur. In such situations, MAS expects DBS Bank to promptly recover its services and communicate to its customers in a clear and timely manner.

9. Ms Ho Hern Shin, Deputy Managing Director (Financial Supervision), MAS, said, “DBS must put in place immediate measures to ensure service reliability while it continues to invest in the longer-term efforts to bolster its operational resilience. We have imposed this six-month pause on the bank to give it the space to take the actions needed to maintain customer trust.”