Digitalisation & Innovation

Digitalisation Governance​

Our digital agenda is led and enabled by the Group Technology Division, with oversight from the Group Transformation Committee on strategic initiatives and the Board on key strategic matters. The Group Technology Division provides quarterly updates to the Group Operational and Resiliency Risk Committee and bi-monthly updates to the Board Risk and Compliance Committee.​

At the operational level, technology governance includes policies and guidelines, risk controls, quality assurance and audit management to ensure compliance with internal policies and procedures. We adhere to Financial Services Industry Standards and local regulatory requirements in the countries where we operate, including those related to technology risk management.​

Prudent and Cautious Adoption of New Technologies​

CIMB has articulated its "Journey to the Cloud" as a strategic roadmap and risk management plan. This phased approach takes into account the successful pilot and early adoption of cloud platforms and services for non-customer/personal data and non-critical systems.

We have embarked on several projects to incrementally deploy services and products via cloud-based solutions. This ensures that our data and systems are ready for customers to continue enjoying our services safely and securely. ​

​

CIMB actively explores and applies emerging technologies such as AI to improve operational efficiency and support data-driven decision-making. The adoption of AI is guided by the Group’s Technology Risk Management Framework and AI Governance Framework, supported by relevant policies on emerging technology risk, model governance and data protection.

Oversight of data and AI usage is provided through internal governance structures, ensuring responsible and consistent application aligned with principles of fairness, transparency, accountability and reliability. AI-enabled processes retain human oversight, with decision-making accountability remaining with employees.

We assess and test AI models in alignment with industry best practices, and do not allow analytical or operational AI models to function without appropriate human oversight and intervention.