Editorial & Advertiser disclosure

Global Banking & Finance Review® is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website.

Home > Technology > PRESCRIPTIVE REGULATION WON’T STOP THE CYBER CRIMINALS

PRESCRIPTIVE REGULATION WON’T STOP THE CYBER CRIMINALS

Published by Gbaf News

Posted on November 24, 2016

4 min read

Last updated: January 22, 2026

UK's FTSE 100 and financial markets react to Russia's embassy statement on G7 loans to Ukraine - Global Banking & Finance Review — The image illustrates the UK's FTSE 100 index performance amid the controversy over G7 loans to Ukraine backed by frozen Russian assets. This reflects the ongoing financial tension and geopolitical implications discussed in the article.

At the FCA’s Fighting Financial Crime conference in London on 10^th November, Chief Executive Andrew Bailey highlighted the role of regulation in the battle against financial crime. Ray Pompon, Head of Information Security, North America and Asia, at Linedata, offers his thoughts:

“The proliferation of digital technology has given criminals an array of tools which can be used to exploit innocent parties. The battle against cyber-crime requires tenacity and proactivity, and the challenge for regulators is to encourage businesses to adopt effective defences in protecting ourselves and customers.

“Andrew Bailey highlighted the great debate about the role of the regulator: whether they should mandate companies to follow prescriptive rules, or whether businesses should instead be judged purely on the outcomes of their security efforts. In a vacuum, both have their advantages. Prescriptive rules are attractive because a regulator can clearly assess whether a business is compliant on a line-by-line basis. The effectiveness of this approach is reliant upon the regulator choosing the right rules in the first place.

“An outcomes-based approach is vastly more complex, and requires a large degree of interpretation and analysis. However, due to the fact that the implementation will be more flexible, it should reflect the idiosyncrasies of each business more accurately, including its particular systems, customers and processes. This, in principle, should allow companies to build the most effective approach to protecting themselves from financial crime rather than simply adhering to a set of pro-forma rules.

“The final consideration is the customer: in reality, all companies are judged by their customers. The fact that a business is totally compliant with a set of prescriptive rules holds little sway with a group of customers who have been affected by financial crime, and organisations understand that rebuilding trust is difficult, costly and time-consuming. For that reason, forward looking businesses will be judging themselves on outcomes-based criteria irrespective of the regulators input. While minimum standards are to be encouraged, and the rules-based regulation is a necessity, it is a focus on outcomes which will allow businesses to build the greatest protection and resilience.”

At the FCA’s Fighting Financial Crime conference in London on 10^th November, Chief Executive Andrew Bailey highlighted the role of regulation in the battle against financial crime. Ray Pompon, Head of Information Security, North America and Asia, at Linedata, offers his thoughts:

“The proliferation of digital technology has given criminals an array of tools which can be used to exploit innocent parties. The battle against cyber-crime requires tenacity and proactivity, and the challenge for regulators is to encourage businesses to adopt effective defences in protecting ourselves and customers.

“Andrew Bailey highlighted the great debate about the role of the regulator: whether they should mandate companies to follow prescriptive rules, or whether businesses should instead be judged purely on the outcomes of their security efforts. In a vacuum, both have their advantages. Prescriptive rules are attractive because a regulator can clearly assess whether a business is compliant on a line-by-line basis. The effectiveness of this approach is reliant upon the regulator choosing the right rules in the first place.

“An outcomes-based approach is vastly more complex, and requires a large degree of interpretation and analysis. However, due to the fact that the implementation will be more flexible, it should reflect the idiosyncrasies of each business more accurately, including its particular systems, customers and processes. This, in principle, should allow companies to build the most effective approach to protecting themselves from financial crime rather than simply adhering to a set of pro-forma rules.

“The final consideration is the customer: in reality, all companies are judged by their customers. The fact that a business is totally compliant with a set of prescriptive rules holds little sway with a group of customers who have been affected by financial crime, and organisations understand that rebuilding trust is difficult, costly and time-consuming. For that reason, forward looking businesses will be judging themselves on outcomes-based criteria irrespective of the regulators input. While minimum standards are to be encouraged, and the rules-based regulation is a necessity, it is a focus on outcomes which will allow businesses to build the greatest protection and resilience.”