Mark Mamone, Group CIO, GBG, a \u00a31 billion UK tech scale-up that provides identity technologies to brands like HSBC, Nike, Waitrose and Transferwise, has delivered some of Europe’s largest technology implementations for the likes of UK government, Royal Mail, BAE Systems, TfL and major financial institutions. Mamone was previously Regional CIO and Group CTO at Serco – a \u00a31.7 billion business and Europe’s largest public services supplier.<\/p>\n\n\n\n
Intelligent CIO<\/em> spoke to Mamone about his role as CIO, the identity threats he believes business leaders should be aware of and his technical approach to tackling threats and innovation opportunities within the business sphere. <\/p>\n\n\n\n A year ago you took up the CIO role at GBG – what was it about the industry and the company that appealed to you?<\/strong><\/p>\n\n\n\n It\u2019s hard not to get excited about the challenge of creating and governing trust in a digital world. The new, digitally-powered economy depends on identity \u2013 you can\u2019t trade with people you don\u2019t know, but unfortunately, the Internet was built without people\u2019s identity in mind. If you consider how our lives are increasingly dependent on the Internet, the need to establish trust becomes pivotal to society and the new economy.<\/p>\n\n\n\n GBG is a rapidly growing business which creates trust by connecting together a vast ecosystem of data, with technological capabilities that use cutting-edge approaches to help every organisation reach, engage and transact with every citizen safely and securely. To me, that means we are using three core areas of expertise \u2013 identity, location and fraud \u2013 to help build a new infrastructural layer upon which the future will be built.<\/p>\n\n\n\n In the same way that the Internet provided a foundation which has been fundamental to the origination and growth of organisations such as Amazon and Apple, I feel that GBG takes on a similar role in powering digital economy. GBG plugs the gaps that exist in the Internet, to enable us to safely and securely transact in the digital world.<\/p>\n\n\n\n Why is \u2018identity\u2019 increasingly finding its way on the board agenda?<\/strong><\/p>\n\n\n\n Identity is a mess and out of step societally and technologically. The ways we recorded, stored and verified identity have remained stuck in the past \u2013 documents get faked; static data gets hacked; consumers lack the time and patience to put up with outdated processes. In fact, consumers are increasingly overwhelmed by their fragmenting digital identity, the challenges of controlling it, and the value exchange that powers many of the digital services they now rely on. That is a complex challenge for any organisation. <\/p>\n\n\n\n The end goal we focus on at GBG when addressing this is \u2018frictionless trust\u2019 \u2013 finding ways to offer a simple and fast customer experience while protecting data privacy and protecting businesses from fraud and compliance risks. The challenge is rightly finding its way onto the board agenda because it\u2019s a combination of threats and opportunities that link directly to the bottom line \u2013 from losing customers to facing hefty regulatory fines. <\/p>\n\n\n\n What is the \u2018innovation-trust tightrope\u2019 and how should the C-suite be approaching it?<\/strong><\/p>\n\n\n\n The PC era and the advent of the Internet connected the world, but they also offered a huge boon to the fraud industry – under the economic glamour presented by \u2018Digital Transformation\u2019, vast numbers of businesses have all but buckled under the pressure to switch from analogue to digital, while keeping fraudsters out. Fraud is now a profession, a marketplace even, not just a vocation, worth \u00a33 trillion a year. Meanwhile, as a digitally-native economy takes shape, the new de facto digital value exchange \u2013 personal data in exchange for digital services \u2013 has created tension and of course, grabbed headlines. <\/p>\n\n\n\n In amongst the unprecedented commercial opportunities, we see stand-offs between citizens, policymakers and a new cohort of business leaders, in a struggle to find balance between fostering innovation and protecting consumers. And with the media in their corner, citizens are beginning to own the narrative: ethical, safe and secure is the new mantra for a business seeking to win the hearts and minds of the public.<\/p>\n\n\n\n This is the crux of a technological challenge facing every business today and in the future. How can you keep your organisation and your customers safe, while constantly innovating and improving the customer experience? For example, how do you carry out 10-times more checks during a transaction in an environment that is 10-times faster and 10-times easier for the customer? How can you make an experience 10-times better while retaining a focus such that they are protecting themselves as well as their customers? It all comes back to that concept of frictionless trust as the end goal. <\/p>\n\n\n\n What are some of the specific identity-related threats organisations should look out for?<\/strong><\/p>\n\n\n\n Across industries and economies, it\u2019s getting harder for criminals to bypass the system checks and barriers being put in place by organisations. As a consequence, rather than less fraud, we\u2019re seeing rising numbers of new types of fraud emerge: account takeover, transaction fraud, online payment fraud, application fraud and goods lost in transit, are just a few examples. This is the new fraud and compliance landscape \u2013 and these are just the new forms of fraud already categorised and accounted for by support groups such as Action Fraud.<\/p>\n\n\n\n One\nof the fastest growing threats posed to both organisations and customers is the\nrise of synthetic identity fraud\n– where synthetic or fictional identities are created by taking parts of an identity\nthat is valid, but may not be active. For example, in many countries,\ncomponents of an identity (such as Social Security numbers in the US) are\ncreated at birth but then not used in earnest, or at all, for many years. These\ndetails therefore can be harvested and used to form part of a synthetic\nidentity which can easily pass a claim test if used out of context and in\nisolation.<\/p>\n\n\n\n Data security is now, of course, an always-on problem that requires always-on resilience \u2013 over 14 billion data records have been lost or stolen since 2013. This has made it even easier for criminals to combine real and fabricated identifying details and take advantage of verification vulnerabilities. This not only poses a problem for today, but it\u2019s a real issue for the future as a new generation enter the world of the digital economy. <\/p>\n\n\n\n Some point to AI and predictive analytics as a possible solution. Do you agree?<\/strong><\/p>\n\n\n\n Predictive\nanalytics will certainly play an increasingly important role across most\nfunctions of a business \u2013 including the detection and prevention of fraud and\nanti-money laundering (AML). This will be the case especially in transactional\nindustries like banking, insurance and telecommunications, where there may be\nhundreds of transactions taking place per second. <\/p>\n\n\n\n The main benefit of predictive analytics here is the ability to connect data points from a variety of sources such as user, device, activity and other meta data, to determine risk propensity. This, for instance, will flag the use of fabricated identity details during on-boarding or a transaction. Using statistical processes and techniques, predictive analytics can correctly classify fraudulent and non-fraudulent transactions in real-time, without the need for human subjective analysis. <\/p>\n\n\n\n But the real opportunity is to build on that analytical foundation with combined algorithms and pattern detection \u2013 in other words, the use of Machine Learning (ML), a subset of Artificial Intelligence (AI). The same data that can be used to validate a person can be applied to explicitly identify other \u2018risk identifiers\u2019, triangulating the data across many sources and then checking, for example, whether the location is associated with suspicious activity or with other sources of known risk. Neural networks, which learn in real-time, could also improve the way teams hypothesise and apply fraud detection rules within their systems \u2013 spotting unexpected patterns of fraud, flagging them and applying new rules as a result. <\/p>\n\n\n\n With all these threats and innovation opportunities to contend with, what technological approach are you taking to tackle them?<\/strong><\/p>\n\n\n\n As\na business, we have been breaking down siloes of expertise, technology and\nproduct, and bringing them together, transitioning from being a product company\nto a platform company. This is critical because we believe that data\norchestration \u2013 the ability to efficiently, effortlessly orchestrate the use of\nall this data through one layer \u2013 will shift from an aspirational concept to a\n\u2018must have\u2019. Gone will be the manual batch-feeds of soloed data between systems\n\u2013 replaced by connected datasets that speak to each other and create smarter\nanswers in real-time, without a customer, or potential fraudster, ever even\nknowing. This data orchestration component is part of a broader data mesh that\nenables better informed decisions and as a result, greater business insights at\nscale.<\/p>\n\n\n\n This data orchestration approach will improve safety and security in almost every aspect of an organisation\u2019s relationship with prospective customers. At on-boarding, to use one example, it means not just taking information given at face value, but preemptively using additional data sources to verify identity and cross-check whether this person or entity has committed fraud elsewhere. This will bring more context and accuracy to fraud detection and prevention efforts \u2013 even in established, heavily regulated industries already familiar with orienting decisions around data. While banks already cross-check with third parties such as Cifas, for instance, what other types of data could they be benefiting from? If rich location data could highlight when a fraudster is applying for an account with an address linked to 50 other \u2018users\u2019, across a range of other services online, surely that can only benefit the bank and honest customers?<\/p>\n\n\n\n That\nis the key piece of advice I would leave fellow technology leaders with: think\nabout how internal and external data could help your organisation make smarter\ndecisions every day, and how a connected, intelligent, orchestration approach\ncould enable those benefits. Only then can you truly achieve \u2018frictionless\ntrust\u2019 and thrive in the new economy.<\/p>\n","protected":false},"excerpt":{"rendered":" Mark Mamone, Group CIO, GBG, a \u00a31 billion UK tech scale-up that provides identity technologies to brands like HSBC, Nike, Waitrose and Transferwise, has delivered some of Europe’s largest technology implementations for the likes of UK government, Royal Mail, BAE Systems, TfL and major financial institutions. Mamone was previously Regional CIO and Group CTO at […]<\/p>\n","protected":false},"author":21,"featured_media":34129,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1489,93,23,24],"tags":[],"class_list":["post-34124","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insights","category-top-stories","category-united-kingdom","category-used"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/34124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=34124"}],"version-history":[{"count":6,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/34124\/revisions"}],"predecessor-version":[{"id":34245,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/34124\/revisions\/34245"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/34129"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=34124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=34124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=34124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}