Session 1 – AI Fraud Resilience and Decision Velocity Management 

• Understanding the “velocity gap”: fraud speed vs organizational decision speed.
• MAS Technology Risk Management (Guideline 4.4.2) requirements on authentication and system integrity.
• Global comparison: MAS TRM vs UK PRA Operational Resilience and EU DORA.
• Quantifying exposure: cost of delay, incident thresholds, and regulatory intervention triggers.

New Micro-Module – Executive Identity Protection:

• Out-of-band verification for C-suite approvals.
• Recording synthetic media risk on the enterprise risk register.
• Updating cyber insurance wording to include deepfake impersonation.

Case Study: The Arup Deepfake Heist (Hong Kong, 2024): A forensic analysis of the $25 million loss where a multinational finance team was deceived by a synthetic video conference. We examine the specific failures in the "verification chain."

Simulation: “The Synthetic Authority.” The Synthetic Authority: A high-intensity scenario where executives must navigate a live authorization process compromised by synthetic media.

Executive Deliverable: Crisis Verification & Executive Identity Protection Protocol for immediate integration into treasury and payment workflows.

Coffee/Tea Break

Session 2 – Personal Accountability and Leadership Discretion

• Core principles of personal accountability frameworks.
• Comparison with the UK SMCR differing standards of “reasonable steps.”
• Building a defensible decision trail under Outcome-Based Supervision.
• Exercising judgment agility within formal delegation structures.

Simulation: “The Liability Assessment.” An interactive stress test exposing the fine line between delegation and negligence.

Executive Deliverable: A "Personal Liability Shield" checklist to ensure individual decision-making evidence meets regulatory standards.

Networking Lunch

Inside MAS – Regulatory Expectations for AI, Identity & Operational Risk

Gain a rare insider perspective on how the Monetary Authority of Singapore (MAS) is shaping its supervisory approach to AI-driven risks and digital resilience.

In this session, Grace Chong, former MAS counsel, will unpack:

• How TRM Guidelines are evolving to address authentication, system integrity, and technology resilience
• What the IAC Guidelines mean in practice for boards and senior executives
• How recent incidents are influencing MAS expectations around identity risk, deepfakes, and executive accountability

Grace Chong, Head of Financial Services Regulation at Drew & Napier and former counsel at the Monetary Authority of Singapore (MAS)

Fireside Exchange: Aligning Singapore with Global Regulatory Standards

A concise, high-level dialogue examining the convergence  and divergence between Singapore’s regulatory approach and international frameworks such as EU DORA and the UK SMCR in addressing AI-driven threats.

Designed as a key programme highlight, this session delivers strategic insight into what these developments mean for governance, accountability, and executive decision-making.

Session 3 – Navigating Regulatory Inquiry and Enforcement

Strategic Focus: Preparing for the Day After.

When a major control failure occurs, the immediate regulatory investigation is often where executives fail, not due to malfeasance, but due to poor communication under pressure.

Core Content: The psychology of "Outcome-Based Supervision" and evidence preservation during regulatory scrutiny.

Simulation: The Board of Inquiry: Delegates step into the hot seat, facing a mock regulatory panel to test their ability to articulate rationale and defend judgment under hostile questioning.

Session Outcome: Mastery of "Regulatory Rationale" techniques for articulating decision-making logic to satisfy enforcement standards.

Coffee/Tea Break

Session 4 – Third-Party Risk Management and Algorithmic Accountability

• Overview of MAS Third-Party Risk Management (TPRM) Guidelines 2026.
• Critical Service Provider designation and extended scope beyond outsourcing.
• Governing AI models sourced from vendors, embedding model validation rights in contract.
• Comparison of MAS TPRM 2026 with EU DORA Vendor Standards.

Case Study: Model Drift Contagion | Zillow (2021)

AI-driven pricing model failed to adapt to rapid market changes, resulting in $500M+ losses, business shutdown, and major workforce reduction

Simulation: The Blind Spot: A rapid-mapping exercise to identify where third-party AI is creating unmanaged risk in your enterprise.

Executive Deliverable: A "Vendor AI Governance Checklist" to audit third-party algorithms and ensure their integrity meets your standards.

Session 5 –  Crisis Coordination and Disclosure Leadership

• Managing dual reporting obligations within tight windows while preserving privilege.
• Decision sequencing and communication hierarchy in the first hours of a material event.

Simulation: Real-time crisis scenario requiring delegates to sequence legal, regulatory, and reputational decisions under extreme time pressure.

Closing - Networking