Cypress Newsletter: a bank technologist writes to the people who judge his risks

Beneath a masthead closed by a heavy rule, with its page links set in small capitals, the home page opens on a banner. The left side gives Surya's role and location in small type, then the words Letters from Surya Halim in the display serif, then his headline: a bank's systems are judged on payday afternoons and in the minutes after a scam. On the right his photograph sits in a 150-pixel circle, held off a thin pale-gold ring by a band of the green ground, more like a wax seal than a staff photograph. At phone width the circle contracts to 92 pixels and stays level with his name.

That headline is the only prose above the letter, so it has to name something a board could check. Surya's names two moments, a payday and the minutes after a fraud, which any director can ask to see reported.

Under the banner sits the desk: a slim archive on the left and, taking most of the width, the letter itself. That letter is headed This letter / 01, followed by the topic, Mule accounts and onboarding, the September 2026 date and an estimated reading time. The title then runs at full headline size: Count the mule accounts you opened, not only the scams you stopped. The standfirst and the letter's opening paragraph follow in a serif held to about sixty characters a line, then his name as an italic sign-off and a Continue reading link.

A visitor who stops there has still received the whole position: a bank that opens accounts in minutes should report how many became mules and how quickly it froze the money that reached them. The figures that support it, ₱412 million of scam proceeds in one half-year and a twenty-six-minute median before the money moved on, wait inside the full essay.

The left column, headed The letter archive, lists LETTER 01 to LETTER 03 with their dates above each title. After the mule-account letter comes an April 2026 letter arguing that outage tolerances should be set by the fifteenth and the thirtieth, the usual Philippine paydays, and a December 2025 letter on why a mid-sized bank finds its integrator harder to leave than its cloud provider. Ten months of related arguments about operational risk read as a practice rather than a campaign. When the screen narrows, the desk reverses: the open letter rises to the top and the archive settles beneath it in two short columns.

A tinted panel headed Continue the correspondence then carries his philosophy, that he would rather report a number which embarrasses the bank than one which flatters it, with a Get in touch link, because the demonstration publishes no email address. Four headline figures follow: ₱820 billion of assets, 1.6 confirmed mule accounts per thousand openings, 99.86% QR payment success on paydays and 6.9 million accounts moved off the mainframe.

The Cypress palette sets warm cream type on a forest-green ground, with lighter green panels, sage rules and a pale gold accent for eyebrows, dates, links and the portrait ring. For a bank technologist this is a deliberate step away from the bright blues of fintech marketing; the page feels calm, which suits a leader whose subjects are failure, recovery and money that should not have moved. The composition loads Libre Baskerville for titles and letter text and DM Sans for labels, archive dates and navigation. Baskerville gives a long argument about change freezes the weight of a printed memorandum, while DM Sans keeps small figures such as 3 hours 40 minutes and ₱10,000 sharp in captions. Nomination committee chairs and supervisors who read slowly are the audience it serves.

Behind the letters, the site files the evidence. The impact page holds four decisions with their costs left in: limits on new digital accounts that cut openings by 17% for a quarter, a payday change freeze that slowed releases, a mainframe exit phased at ₱1.3 billion above a single cut-over, and a split integrator contract followed by a two-hour Saturday ATM outage. On the career page each of six roles, from technology assurance in Singapore to the CIO's office in Pasig, sits between double rules beneath a tinted dateline band carrying a record number and the period. The Board Readiness page reads his contribution, first-year approach, conflicts and judgement examples as one continuous letter, then sets committee preferences, twenty-two available days, exposure and governance learning in two enclosure columns. Both record pages are built to print.

The Newsletter suits leaders who argue in instalments and whose readers decide slowly: a chief risk officer writing to an audit committee, a treasurer explaining funding choices to rating analysts, or an operations head in a utility or hospital network building the case for resilience spending. It rewards three or more dated essays on related problems. Cypress in particular fits people in regulated, failure-sensitive work who want their site to sound considered rather than promotional.