Implement Online Financial Services Authentication + Payment Card Security per MAS TRM Chapters 12 + 13. Chapter 12 Online Financial Services Authentication - Two-Factor Authentication (2FA) for customer-facing online services + Strong Customer Authentication (SCA) for high-risk transactions including biometric + OTP + cryptographic tokens + hardware tokens + behavioural biometrics + device intelligence + risk-based authentication (RBA) + transaction signing for high-value or high-risk transfers + transaction monitoring + fraud detection systems + anti-Account Takeover (ATO) controls + bot mitigation + CAPTCHA + IP reputation + impossible travel + velocity controls + cooling-off period for high-risk transactions + secure session management + cookie security + secure customer onboarding (eKYC compliant with MAS PIDM + Personal Identity Number SingPass MyInfo). Chapter 13 Payment Card Security - PCI DSS v4.0 compliance for entities handling cardholder data + qualified security assessor (QSA) engagement + segmentation of cardholder data environment + tokenisation + encryption + key management + EMV chip + PIN + 3D Secure 2.0 + dynamic CVV + card-on-file tokenisation (Visa Token Service VTS + Mastercard MDES) + Strong Customer Authentication for online payments + Apple Pay + Google Pay + Samsung Pay + PayNow integration + cross-border payment security (SWIFT CSP + SWIFTGPI). MAS Notice 644 + Notice 655 minimum baseline. SGFINDEX consolidated financial data security. Smart Nation initiative integration.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.