data-handling practices, audit readiness, SWIFT attestations, vendor sourcing, contract renewals, IT governance frameworks, procurement activities, MAS Technology Risk Management, IT risk register, risk and compliance reports, Cybersecurity Act