Page 366 - White Papers - bank information security

BITS Voluntary Guidelines for Collections in the Financial Services Industry

I. EXECUTIVE SUMMARY Check fraud is a growing industry problem. Nearly 20 percent of super-regional banks incurred more than $20 million in check fraud-related operating expenses in 2001.1 In order to enable the industry to resolve breach of presentment warranty claims expeditiously and in a way that is fair,...

BITS Framework for Managing Technology Risk for IT Service Provider Relationships

The financial services industry increasingly relies on information technology (IT) service providers (“Service Providers”) to support the delivery of financial services. This shift in the delivery of financial services, coupled with the deployment of new and dynamic technologies, has resulted in heightened...

BITS Technology Risk Transfer Gap Analysis Tool

Financial institutions must maintain a high level of trust and integrity in order for e-business to grow to the fullest extent possible, embracing new technologies. The trust of financial services customers derives from the integrity of the industry’s infrastructure and information technology practices. Security is...

Is Your Vulnerability Management Program Leaving You at Risk?

In Aberdeen's research, "Managing Vulnerabilities and Threats: No, Anti-Virus is Not Enough" (December 2010), we saw that companies perceive malware as both high-incidence and high-risk, and that they are spending a material amount of money on their vulnerability management initiatives. But further analysis shows that...

Staying Ahead of Cyberthreats: Recommendations for Financial Institutions

Maintaining adequate data security is challenging for investment firms and banks, which must grapple with a widening array of security and regulatory issues. With attacks leading to losses in the hundreds of millions of dollars, many financial firms are seeking - and finding - help in the battle against online...

Omni-Channel Authentication: A Unified Approach to a Multi-Authenticator World

Authentication innovation is still in its infancy, and most companies are still combining more traditional passwords and PINs with cutting edge biometrics or contextual decisioning methods. The combination brings new capabilities to multi-factor authentication, but doesn't necessarily produce the best possible...

Big Data, Big Mess: Sound Cyber Risk Intelligence through Complete Context

When it comes to cybersecurity, perhaps nothing has been as highly touted as the answer to every executive's prayers as big data. It makes sense. Cybercrime, being inherently technical, can provide vast droves of data to be analyzed, and for years the drum has been beaten that big data will change the world. But...

5 Tips to Secure Small Business Backdoors in the Enterprise Supply Chain

Cybersecurity for the enterprise. There is no silver bullet. But as business becomes more connected and as data moves further outside the organizational walls, enterprises need look at weaknesses in the security chain - and a good place to start is in the supply chain. Think about how many small businesses, suppliers...

Secure Remote Access for Your Workforce at Scale

Organizations face a number of different potential emergency situations, such as illness, flood, hurricanes, and power outages. Implementing a business continuity plan is essential to ensuring that the organization is capable of maintaining operations in the face of adversity and preparing for potential...

Outsmarting Hackers - Why You Need Both Strong and Risk-Based Authentication

Year after year, cyber threats continue to increase in both sophistication and frequency. One reason that data breaches are occurring is that passwords are created by people to identify themselves for multiple applications - from online banking accounts to a shopping site - and these passwords are valuable to...

The Forrester Wave: Enterprise Mobile Management

Infrastructure and operations (I&O) professionals face a difficult mandate: Enable the workforce to navigate the ever-changing landscape of mobile scenarios while continually ensuring that their company's compliance and security needs are met. Mobile device management (MDM) solutions are effective tools to help...

Breaking the Cyber-Attack Chain at Strategic Chokepoints

Many organizations lack an effective defense against the multiple attack vectors cybercriminals use to target employees, compromise their devices, and gain access to enterprise networks and resources. The attack vectors are many and varied, from credentials theft, exploitation of application vulnerabilities and...

5 Steps to Building a Security Intelligence Center

Despite taking significant steps to strengthen their cybersecurity, banks and other financial services (FS) organizations will continue to be challenged by the speed of technological change and the sophisticated nature of cyber threats. Larger FS organizations who want to stay ahead of cyber criminals and reduce...

Threats are on the Rise. Know your Landscape.

Things are getting worse out there. Hackers are becoming smarter, and their tools and methods are evolving. They are now capable of much more damage than ever before. To secure your organization, you need to be more proactive and constantly update your security infrastructure. Understanding the trends and areas...

Breaches Happen: Be Prepared - A SANS Analyst White Paper

Attackers are leaving no stone unturned, prying into web applications, operating systems and even deeper in the hardware. They're taking advantage of conventional endpoints and mobile devices, slipping past and through network security, and even taking advantage of the human element operating the devices. In this...