^{Security Tips} Protecting your financial identity

Data Security

As a leading bank in the UAE, ADCB handles large quantities of sensitive information from our customers. Data security and privacy remain an integral part of our business and top priority for the Bank in delivering our mission and core values to our customers. Our approach includes adopting robust security policies and procedures, utilizing state of the art security technologies and qualified security professionals to detect and prevent threats to customer information.

Our information security risk management practices align with international best practice standards to assess risks to customer information, and design continuous improvement controls to protect any identified gaps and reduce risk to acceptable thresholds. Moreover, we constantly monitor for emerging risks and enhance our controls to ensure that customer information is adequately protected. ADCB has developed a robust third-party risk management framework to ensure that all customer information is protected against any third-party risks. Our security program is accredited to international best practice standards/frameworks standards as below

Standards/Frameworks	Purpose	Link ( For More Information )
PCI DSS	PCI DSS (Payment Card Industry Data Security Standard) is a global security standard that provides a baseline of technical and operational requirements designated to protect payment card data.	Payment Card Industry Data Security Standard (pcisecuritystandards.org)
ISO 27001	ISO 27001 is the leading international standard focused on information security, published by the International Organization for Standardization (ISO).	ISO - ISO/IEC 27001 — Information security management
PCI PIN Security	The PCI (Payment Card Industry) PIN Security Requirements contain a complete set of controls for the secure management, processing, and transmission of personal identification number (PIN) data during payment card transaction processing at ATMs and point-of-sale (POS) terminals.	Official PCI Security Standards Council Site - Verify PCI Compliance, Download Data Security and Credit Card Security Standards
SWIFT CSCF	The SWIFT Customer Security Controls Framework (CSCF) includes a set of control guidelines for members on securely operating their SWIFT environment with the goal of strengthening the cyber security posture of the SWIFT (Society for Worldwide Interbank Financial Telecommunications) payment network.	SWIFT Customer Security Controls Framework | SWIFT - The global provider of secure financial messaging services

Annual audits are conducted by internal and external parties, who evaluate the adequacy of the security controls. The environment is regularly tested by independent third-party vendors to identify any security gaps and identify areas, where the security posture can be enhanced. Continuous awareness on how to protect customer information is imparted to all employees through mandatory e-learnings, our staff induction onboarding program, classroom trainings for specific departments, email communications and other awareness-raising campaigns.

The Senior Management of all business groups are fully committed to implementing security controls and ensuring the protection of customer information. This is reinforced by regular reporting to the executive Risk Management Committee. The Board of Directors also receive regular updates on security performance.

ADCB partners with global service providers and local bodies such as the UAE Banking Federation and AeCert, to exchange threat intelligence and build proactive defense. We also collaborate with the UAE Banking Federation to contribute to the overall enhancement of the information security posture of the UAE financial system. As a final line of defense, we have secured adequate coverage from international insurance providers to protect our customer information within ADCB and third-party partners.