We had a major incident causing significant business impact, that was triggered by someone internally misusing an NHI. This was a true eye opener for me and my team. We finally realised the huge exposure we were sitting on, including the lack of controls, processes and technology and the huge regulatory / compliance implications. We immediately asked Lalit to establish and run the largest cybersecurity regulatory program within the bank to tackle this huge risk exposure