Understand the business, understand the risk Managing risks in Banking IT

Transcription

1 Stefan Arn Session specific usage Understand the business, understand the risk Managing risks in Banking IT 15 November 2013

2 UBS An unrivaled franchise with compelling growth prospects WM businesses Retail & Corporate Investment Bank Global AM World s leading HNW and UHNW wealth manager; unrivaled scope and scale Leading universal bank in Switzerland Leading Global IB refocused on clients and excelling in targeted high value added/ high entry barrier segments Well-diversified across investment capabilities, regions and distribution channels Best Global Private Bank UBS was awarded "Best Global Private Bank" in the 5th Global Private Banking Awards Best Global Wealth Manager 2013 Euromoney Magazine named UBS "Best Global Wealth Manager 2013", therewith awarding UBS this title for the second consecutive year (Euromoney Awards for Excellence 2013). Best Private Bank The Euromoney Private Banking & Wealth Management Survey is among the most prestigious in the WM industry and is based on peer votes. This year UBS was awarded Euromoney s Best Private Bank title in 17 global, 19 regional and several country-specific categories. However, we cannot afford to rest on our laurels, despite the considerable achievements to date 1

3 Main challenges Financial- /Economic crisis Loss of trust Client needs / Innovation Complex regulatory environment Constrained cost environment Business efficiency for sustainable performance Operational losses Data/Information Security / Cybercrime IT Risk Understand the business, understand the risk 2

4 UBS At the forefront of transformation Reduction in funded assets 1 ( vs , in reporting currency) Basel III fully applied CET1 ratio 2 ( ) 9% 11.2 (%) (29%) (21%) (14%) (13%) (10%) Average (19%) (%) Average 9.7% (57%) UBS A B C D E F UBS A B C D E F G H I We have built the foundation for our long term success 1 Funded assets defined as total IFRS balance sheet assets less positive replacement values; excludes merged banks 2 Estimated numbers are on a pro-forma basis (only UBS and Credit Suisse have already adopted Basel III rules) Source: Companies reporting, restatements not considered. Banks not in the order presented above: Barclays, Bank of America Merrill Lynch, Citigroup, Credit Suisse, Deutsche Bank, Goldman Sachs, HSBC, JP Morgan Chase and Morgan Stanley 3

5 Regulatory changes impacting UBS are increasing All areas affected Business model, business processes, operations, technology infrastructure Differs according to region/country And not necessary consistent across regulators or jurisdictions IT investments significantly increased Funding has increased 248% from 2010 to 2013 We are managing the regulatory programs as a portfolio 4

6 Good supervision & risk awareness Global Supervision Program Respond to and resolve issues Take responsibility Organize your business Provides high-level guidance on how employees are expected to respond to situations that may arise when managing their daily responsibilities Create a good compliance culture Know your business Know your employees and what they do Sets higher expectations of supervision Requires stronger understanding & challenge by control functions Demands urgent escalation and a stronger tone from the top Operational Risk Framework 2 Improves on the successful implementation of the ORF From a compliance based (ORF1) to a risk & control based (ORF2) framework Reinforces a culture of transparency, accountability & continual improvement Serves as an early warning system for tail exposures Drives sustainable remediation of excessive Operational Risks Influences sound decision making for business activities 5

7 IT risk focus areas 2013 C:\Program Files\UBS\Pres\Templates\PresPrintOnScreen.pot Focus areas Cyber Threat Management Information Security Business Continuity Management Software Quality User Access Control Policy Management & Standards Vendor Risk Management Automated Monitoring & Escalation Simplification Control Sustainability 6

8 Focus on cybercrime is steadily increasing C:\Program Files\UBS\Pres\Templates\PresPrintOnScreen.pot ~50 million E-Banking and Mobile Banking touch points per year Attacks DDoS Voice phishing (Vishing) calls Attacks with highly sophisticated Trojans (Torpig, Citadel, Cridex) 7

9 Closing statement Strong risk control enables us to take risk in order to serve our clients and generate sustainable financial performance. Sergio Ermotti 8