Financial News
The Balancing Act of Financial Organizations to Compete in a Technology-Driven World
Written by: Ricardo Ferreira, EMEA Field CISO, Fortinet
Digital acceleration is impacting how we work, live, and consume services. In addition, the digital evolution of Financial Services Organizations (FSOs) raises essential questions about the future of banking. One looming concern is how FSOs will compete against fintechs, including addressing the need for innovation to improve customer experience.
Adapt to changing times
The top three strategic areas outlined in the IDC Infobrief, sponsored by Fortinet, “Accelerating Transformation Through Cybersecurity in Financial Services,” highlight the core priorities for financial institutions: Trust, Security, and Resilience. So, the question is, how can FSOs lead and win through innovation while ensuring that risks do not overwhelm a traditionally risk-averse industry?
Many FSOs have begun adopting new digital business models to help them thrive in a digital-first economy. These include prioritizing investments in key areas such as data-driven security, legacy modernization, and personalized and contextual customer experiences. But for these business models to work, they will need to rely on data, analytics, and cloud platforms.
So, when we ask, “what does success look like for the future-ready bank?” we see three major themes:
- Automation and cost reduction: Automation, managed services, and cloud platforms will enable FSOs to innovate faster. Automation allows business units to integrate with the rest of the organization, build self-service, and reduce manual labor costs, such as adopting Robotic Process Automation and artificial intelligence-powered chatbots to deal with insurance claims. In investment banking, robot advisors use machine learning-powered algorithms to help retail investors make better decisions. Thanks to cloud platforms and managed services, these new products and services are economically feasible because they shift traditional CapEx to activities that create more value.
- Customer intelligence and centricity: New platforms provide data and analytics for anticipating customer needs and hyper-personalizing the customer journey. Customer data, such as investment patterns, can guide a robot advisor to recommend portfolio choices aligned to customer preference. Similarly, natural language processing can help an AI system quickly assess a customer’s issue to redirect them to the nearest branch or get the appropriate representative involved.
- New value propositions: Open banking was a massive change for banks, helping them realize the power of APIs. Building Banking as a Service (BaaS) has allowed them to develop new services and create stronger partnerships.
But what about the customer experience?
Who is not irked when reminded of their first troubled mobile banking experience, with terrible UX and lack of integration? It’s why, when some fintechs launched their online mobile banking, it was a beacon of light in a dark room. A real-world security example that everyone might remember was the usage of biometrics for accessing online mobile banking. Big brands took a long time to adopt it, and while it might seem trivial from a UX perspective, it’s leaps and bounds towards progress.
Today, traditional brands regularly launch products that emulate offerings from nimbler fintech organizations. The lesson is clear: to gain a competitive advantage, banks must focus on creating a fast, intuitive, and seamless customer experience.
Are clouds grey in banking?
These business models require the accelerated consumption of new platforms, such as cloud computing. Financial organizations must understand they can create differentiated value and increase competitiveness by using the cloud to increase their speed of innovation and accelerate the go-to-market of new services and products.
Cloud platforms also serve as a bridge to modernize financial organization workloads. CIOs want to migrate workloads cohesively while ensuring the capabilities from their on-prem solutions are still available. Major Cloud Service Providers (CSPs) have jumped at the opportunity to integrate their environments into the same control plane.
Yes, but isn’t that risky?
Regulators have flagged the concentration risk. For example, the Bank of England has highlighted it in their stability reports. The latest Financial Conduct Authority (FCA) PS21/3 rules address third-party risk and operational resilience. And the European Union has gone a big step beyond with its Digital Operational Resilience Act (DORA).
All these activities and proposals are designed to address these concerns. The European Systemic Risk Board has flagged cyber as a systemic risk to the European financial system due to the increase in cyberattacks—especially in the financial industry, which is 300 times more likely to be the target of cyberattacks. The International Monetary Fund (IMF) emphasizes that cyber events propagate risk through the entire financial system via three broad transmission channels: risk concentration, risk contagion, and erosion of confidence.
That is why cybersecurity is a priority as part of the EU’s “Europe fit for the digital decade” policy program. Programs such as EU-HYBNET, ACCORDION, and DORA for financial services ensure Europe works as a single entity by harmonizing requirements to increase resilience and protect citizens.
What can financial organizations do about it?
To start, security needs to be woven into transformation efforts to ensure that innovation and transformation are conducted securely. For this to work, security must be included from a project’s inception, not as a bolt-on after a project and its services are launched.
What about protecting financial assets?
55% of European financial organizations already use some form of zero-trust strategy for their authorization and authentication. Zero-trust shifts the traditional paradigm from the implicit trust for users and resources inside a static, network-based perimeter to an authentication model that focuses on users, assets, and resources. Zero-trust requires authentication and authorization to be performed every time access is granted to a specific resource.
How do we address the ‘weakest link’ problem?
While people are an organization’s most critical asset, they are also the primary source of data breaches and network compromise. Organizations must be prepared for a loss of control if their workforce is not educated on cyber awareness. Some large financial organizations have created partnerships with e-learning portals and vendors to provide tailored courses using nudges and financial instruments to reskill the workforce with new technologies. Similarly, financial organizations must plan to mitigate the rampant cybersecurity skills shortage, which will impact 90% of organizations by 2025, resulting in delays in the transformational journey.
What can we do?
Digital acceleration is essential for competing in today’s financial marketplace. However, it doesn’t come without risk. First, ensure employees are trained and reskilled in the organization’s technologies. Second, share data with industry peers to learn best practices and identify potential issues. Transaction Monitoring Netherlands (TMNL) is an excellent example of transaction data sharing to mitigate Anti-Money Laundering (AML).
Finally, work with vendors and partners committed to cross-vendor openness and integration. When vendors work together across the threat landscape, the sum of their products is greater than the individual parts, deepening your level of cyber protection.
Financial
UAE MOVES TOWARDS A MORE COMPLIANCE-FOCUSED TAX LANDSCAPE WITH RECENT VAT REFORMS: DHRUVA
Dhruva, a premier tax advisory firm with deep expertise across the Middle East, India, and Asia, stated that the UAE’s latest amendments to the VAT Law and the Tax Procedures Law, issued by the Federal Tax Authority (FTA) which are effective from 1 January 2026, represent a significant shift toward a more structured, and risk-focused tax environment. These amendments are expected to reinforce responsible compliance behaviors and reduce administrative friction for UAE businesses.
Dhruva noted that one of the most practical and welcoming changes is that it eliminates the requirement for taxpayers to self-issue tax invoices for imports subject to the reverse charge mechanism, which provides a lot of ease to businesses. Post series of amendments and clarifications issued by the FTA in 2025 in relation to self-issuance of tax invoices for imports, while a general exception was granted for such requirement for import of services, the same were required in case of import of goods for record-keeping purposes. This often-added administrative complexity without impacting the actual tax liability or input tax entitlement. Under the updated rules, taxable businesses have removed the obligation entirely, and hence, businesses will only need to maintain standard supporting documentation, such as invoices, contracts, and transaction records.
However, the firm highlighted that while some administrative burdens are being eased, compliance expectations are tightening elsewhere. One of the amendments gives the FTA authority to deny input tax recovery in cases linked to tax evasion – where a taxpayer knew or, critically, should have known, that a supply or its broader supply chain was connected to tax evasion. The law clarifies that taxpayers will be deemed to have been aware if they fail to verify the validity and integrity of the supply in accordance with procedures to be issued by the FTA.
Dhruva explained that historically, the responsibility to account for VAT rested primarily with the supplier, and recipients focused mainly on validating the tax invoice and meeting standard input-tax recovery conditions. In practice, however, the FTA has often linked a recipient’s input-tax eligibility to the supplier’s discharge of output VAT, denying recovery where gaps existed. The latest amendment now formally embeds this position in law, imposing additional due-diligence obligations on the recipient.
Ujjwal Pawra, Partner at Dhruva Consultants, commented, “This is a significant change. It is a clear message that the right to input tax recovery comes with the responsibility to validate the integrity of one’s suppliers and supply chain. Businesses must now demonstrate that they exercised practical, documented, and consistent due diligence. Clean invoices alone are no longer enough; what matters is a clean process.”
While the procedures and conditions are awaited, Dhruva advised that companies reassess onboarding procedures, supplier-vetting protocols, and documentation trails to ensure they align with the FTA’s expected standards.
Another material operational change is the introduction of a defined timeframe to act on credit balances. Under the amended framework, businesses will generally have up to five years from the end of the relevant tax period to request a refund of a credit balance or use that balance to settle tax liabilities, with targeted flexibility in specified cases where credits arise late in the cycle.
Transitional relief is also available for certain older credits around the changeover, which can help businesses address legacy positions in an orderly way. Dhruva said these changes reduce the risk of credits remaining unresolved on the balance sheet, improve cash flow planning, and encourage clearer internal ownership of refund positions.
Ujjwal further added, “The UAE has introduced a more robust operating framework for credit balances and refunds in line with international best practices. The message is simple: know your credits, map the deadlines, and file claims that are clear, complete, consistent, and easy to validate.”
Dhruva advised UAE businesses to act now with a finance-led approach. This starts with building a central credit-balance register by tax type and tax period, assigning an accountable owner, and tracking action dates so credits are either utilised or claimed in time. Businesses should also treat refund submissions as audit-ready files by preparing reconciliations, supporting documents, and a concise explanation of how the credit arose and why the amount is correct before submitting, rather than rebuilding the file after queries begin. In parallel, companies should prioritise older credit positions to assess whether they fall within the transitional relief window and avoid last-minute filings.
The firm also advised businesses to monitor any binding directions issued by the FTA and align their tax positions, documentation, and system settings accordingly to minimize interpretational differences and strengthen consistency over time.
Financial
5 SMART WAYS UAE TRAVELERS CAN PROTECT THEIR FINANCES THIS FESTIVE SEASON
By Hennie du Plessis, Senior Vice President, Payment Services, Middle East and Africa at IDEMIA Secure Transactions (IST)
The festive season is one of the busiest periods of the year for UAE travelers. From year end getaways and family visits, to overseas shopping and digital gifting, consumers increasingly rely on contactless cards and mobile wallets to make payments quickly and conveniently.
Beyond higher spending, the festive season also acts as a real stress test for digital payment ecosystems. Transaction volumes peak, payment environments become less familiar, and consumers move rapidly across borders. This combination of factors increases exposure to fraud if the right safeguards are not in place. As digital payments scale, security becomes a critical enabler of trust.
According to IDEMIA Secure Transactions’ latest Global Consumer Payment Survey, which included UAE respondents aged 18 to 71, more than 8 in ten consumers have already adopted digital cards with biometric features, while 92 percent express interest in numberless cards. These figures reflect a growing expectation for payment experiences that combine speed, simplicity, and security.
With contactless payments now accounting for 84 percent of face-to-face transactions in the UAE and mobile wallet usage surpassing 50 percent, the festive season is a critical moment for travelers to reassess how they protect their finances while on the move.
1. Avoid Public Wi-Fi for Payment Activity
Festive travel often means relying on airport or hotel Wi-Fi, but unsecured networks remain a common entry point for cybercriminals. Accessing banking apps or making purchases over public Wi-Fi can expose sensitive information at interception. Travelers should use mobile data or a trusted VPN when handling financial transactions. A few moments of convenience are never worth the risk of compromised financial data, especially during peak travel periods.
2. Use Secure Digital Payment Solutions
Not all payment tools offer the same level of protection. Today, tokenization has become a global industry standard for securing digital transactions, replacing sensitive card details with unique digital tokens that are useless if intercepted. Mobile wallets such as Apple Pay, Google Pay, and Samsung Pay already rely on this technology.
Beyond protecting data in transit, tokenization also limits exposure in the event of merchant-side data breaches, as real card numbers are never stored or shared. Tokens are typically device-specific and transaction-bound, adding an additional layer of protection even if credentials are compromised elsewhere.
IDEMIA Secure Transactions plays a key role in enabling tokenized payments at scale, supporting secure transactions across in-store, online and in-app environments through its EMVCo-certified Token Platform. Digital co-badged cards offer global compatibility without sacrificing local functionality. By ensuring that real card numbers are never shared, tokenization significantly reduces fraud risk while preserving a smooth user experience. In addition, digital wallets can be remotely suspended if a device is lost or stolen, offering travelers greater control and peace of mind while abroad.
3. Decline Dynamic Currency Conversion
While shopping abroad during the festive season, merchants often offer travelers the option to pay in AED. This practice, known as dynamic currency conversion, typically includes hidden markups and unfavorable exchange rates. Paying in the local currency allows banks to apply more transparent conversion rates, helping consumers avoid unnecessary costs. This simple choice can make a meaningful difference for frequent travelers and international shoppers alike.
Another possibility for travelers is to use the Tap to Phone technology provided by some banks and supported by IST. Instead of having to switch cards across borders, it enables the travelers to modify their card features, such as credit/debit options and the currency used for transactions, with a simple tap on a smartphone via their banking app. This simple habit can save money and ensure better financial clarity while greatly facilitating international card usage.
4. Enable Real Time Alerts and Card Controls
With spending increasing during the festive period, real time monitoring is essential. Many UAE banks and fintech platforms offer instant transaction alerts, spending limits and location-based restrictions that allow consumers to monitor activity as it happens.
Crucially, modern security no longer has to come at the expense of convenience. These tools enhance protection while maintaining the fast, frictionless payment experiences that consumers expect, particularly in a market where one-click and contactless payments are widely adopted. This aligns with consumer expectations, as 96 percent of UAE users prefer simplified one click payment experiences. Real time controls enhance security without adding friction.
5. Secure Devices Before You Travel
Smartphones now function as wallets, boarding passes and identity tools. Before travelling, users should update device software, enable biometric authentication and avoid storing sensitive information in unsecured apps. Travelers should also activate remote lock and wipe functionality, ensure cloud backups are enabled, and avoid carrying all payment methods on a single device. Keeping at least one physical card separate from the phone provides an important fallback. While digital wallets rely on encrypted token technology, 29 percent of surveyed users still express concerns about digital card security, and 43 percent do not fully understand how these tools work. Basic preparation can significantly reduce risk and soothe concerns.
As UAE card payments are expected to reach USD 150 billion this year, the festive season highlights the need for secure and user-friendly payment infrastructure. By adopting the right tools and habits, travelers can focus on celebrating rather than dealing with fraud.
For the payments industry, the challenge is clear: security must be built into every transaction in a way that protects users without disrupting their experience. When trust is embedded seamlessly, travelers are free to enjoy the moments that matter most, wherever their journey takes them.
Financial
DHRUVA URGES UAE BUSINESSES TO ACT NOW ON TRANSFER PRICING RISK
Dhruva, a premier tax advisory firm with deep expertise across the Middle East, India, and Asia, is encouraging UAE-headquartered groups and multinational companies operating in the country to place transfer pricing (TP) firmly on their strategic and governance agenda, as the UAE’s corporate tax landscape develops and aligns more closely with international practice.
With corporate tax now in effect, the way organisations price transactions between related parties and connected persons is becoming an important element of tax governance, financial planning and stakeholder confidence. TP is no longer just a specialist topic for tax teams, but an area that benefits from early, well-considered attention at senior management level.
“Transfer pricing has quickly become one of the key components of a modern tax framework in the UAE,” said Kapil Bhatnagar, Partner, Dhruva. “For many organisations, this is still a relatively new area. Our message is a positive one, now is a good time to step back, understand your intra-group arrangements and put in place a clear, well-documented approach. Doing this early can bring greater clarity, predictability and comfort for management, shareholders and other stakeholders.”
Dhruva notes that TP considerations are relevant not only for large global multinationals, but also for UAE-headquartered groups, family businesses, free zone entities and fast-growing regional companies. Any business with cross-border or domestic related-party dealings – such as management fees, services, financing, distribution, manufacturing, or use of intellectual property – can benefit from having a structured view on how these transactions are priced and supported.
Kapil added, “A common question we receive from clients is simply, ‘Where do we start?’ In our experience, the most effective approach is to treat transfer pricing as a practical business project rather than just a technical exercise. It starts with understanding how your group creates value, how responsibilities and risks are shared, and then reflecting that in your pricing, internal policies, and documentation in a consistent way.”
Next steps for UAE organisations
Dhruva’s suggested next steps for UAE organisations focus on helping boards, CEOs, CFOs, and tax leaders move from awareness to practical action on transfer pricing. The first step is to map related-party transactions and understand the big picture. Organisations should identify their main related-party and connected-person transactions, both within the UAE and cross-border, and then group them by type – for example, services, goods, financing, intellectual property or guarantees. From there, they can build a simple, high-level overview of how value flows within the group and where key functions and decision-making actually sit.
The second step is to develop or refine a coherent transfer pricing framework. This involves designing a framework that clearly sets out how different categories of transactions are priced, using appropriate methodologies that reflect the business reality. Internal policies, legal agreements, operational substance and financial outcomes should all be aligned so that they tell a consistent story. It is also important to integrate transfer pricing considerations into budgeting and planning cycles, rather than addressing them only at year-end.
The third step is to strengthen documentation and internal capabilities. Organisations should prepare documentation that explains the group’s business model, value chain and the rationale for its pricing approach in a clear and structured manner. Finance and tax teams need to be equipped with the knowledge and tools to maintain and update this information over time as the business evolves. In addition, a simple governance mechanism should be established to ensure that transfer pricing topics are periodically reviewed at management level and, where relevant, at board level as part of ongoing oversight.
“In many ways, the UAE is at a constructive stage in its tax journey,” Kapil said. “Businesses have the opportunity to put robust, practical transfer pricing foundations in place that reflect how they actually operate. This is not only about compliance – it is about having clarity, supporting informed decision-making and giving confidence to investors, partners and employees.”
Dhruva’s analysis of developments across the wider GCC shows that other regional markets are also expanding their focus on transfer pricing, documentation, and alignment with international standards. For groups operating in more than one jurisdiction, a coordinated regional approach can support consistency and reduce uncertainty.
“Our recommendation to UAE organisations is to use this period to get ready in a thoughtful, structured way. Early movers often find that a well-designed transfer pricing approach supports smoother internal decision-making and provides comfort as the tax environment continues to mature,” concluded Kapil.
-
Tech News1 year agoDenodo Bolsters Executive Team by Hiring Christophe Culine as its Chief Revenue Officer
-
VAR9 months agoMicrosoft Launches New Surface Copilot+ PCs for Business
-
Tech Interviews2 years agoNavigating the Cybersecurity Landscape in Hybrid Work Environments
-
Tech News6 months agoNothing Launches flagship Nothing Phone (3) and Headphone (1) in theme with the Iconic Museum of the Future in Dubai
-
Tech News2 years agoBrighton College Abu Dhabi and Brighton College Al Ain Donate 954 IT Devices in Support of ‘Donate Your Own Device’ Campaign
-
VAR1 year agoSamsung Galaxy Z Fold6 vs Google Pixel 9 Pro Fold: Clash Of The Folding Phenoms
-
Editorial1 year agoCelebrating UAE National Day: A Legacy of Leadership and Technological Innovation
-
Tech Features10 months ago5 Urgent Questions About Healthcare Network Cybersecurity in the Middle East



