Building digital trust as a differentiator Feb 2014 | Page 25

What will happen in the next 5 years Implications • More clients demand for assurance in security and regulatory compliance • Single (and simple) security review is no longer adequate. The expectation will be for security to be considered during design (workshops) and be predefined (compliance criteria) • Have to increase performance while managing cost – reduce retrofitting, do it right the first time PwC Implications specifically for security assurance • Grow in the use of third party assurance, e.g. SSAE reports • More detailed and in-depth reviews, e.g. source code reviews. • More regulatory compliance reviews, e.g. PDPA and EA 25