Page 246 - White Papers - bank information security

Guidelines for Media Sanitization

Information systems capture, process, and store information using a wide variety of media. This information is located not only on the intended storage media but also on devices used to create, process, or transmit this information. This media may require special disposition in order to mitigate the risk of...

Biometric Data Specification for Personal Identity Verification

The Homeland Security Presidential Directive HSPD-12 called for new standards to be adopted governing the interoperable use of identity credentials to allow physical and logical access to Federal government locations and systems. The Personal Identity Verification (PIV) standard for Federal Employees and Contractors,...

Your Customers and Their Secrets

This paper discusses and analyzes the internet-based, password reset functionality provided by many organizations for their customers. The average application user is being forced to remember more and more complex passwords to accomplish their daily routines. The very nature of complex passwords, sometimes results in...

Document Security in Web Applications

Organizations publish information online including confidential data. Data is rendered in varied formats; it can vary from simple HTML pages to documents in Adobe's PDF or Microsoft's Word/Excel formats. Confidential data is restricted to a set of users who have to login and be authenticated on the website. A common...

The Security and Administrative Benefits of using X.509 PKI based Strong Authentication

Strong authentication based on X.509 PKI (Public Key Infrastructure) is available in a number of protocols and provides both security and administrative benefits and drawbacks. This paper looks at the security and administrative benefits (and drawbacks) of using strong authentication. This paper looks at generic...

Security Testing Demystified

This white paper identifies the products and architecture's needed to aid in the process of procuring the following: -Identifying *Possible* Attack Vectors -Reasearching and discovering system vulnerabilities -Exploitating found Vulnerabilities -Preparaing Test Cases -Compilating Final Security Testing...

Voluntary Guidelines for Consumer Confidence in Online Financial Services

This white paper discusses some actions financial institutions can take to make consumers more comfortable with online banking: · Put consumer education about security and fraud prevention in a prominent place on your institution’s website home page. · Establish a single point of contact within your...

BITS Consumer Confidence Toolkit: Data Security and Financial Services

INTRODUCTION This Consumer Confidence Toolkit provides information to support consumer confidence in the safety, soundness and security of financial services. Special attention is placed on online financial services transacted through the Internet. Data in support of the safety of online financial transactions are...

BITS Key Considerations for Global Background Screening Practices

I. OVERVIEW According to the August 2004 U.S. Secret Service and CERT® Coordination Center’s Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector: … (The fact that) over one quarter of the insiders had a criminal record prior to their incidents underscores the importance of looking...

Reconciliation of Regulatory Overlap for the Management and Supervision of Operational Risk in Financial Institutions

New laws and regulations are frequently enacted in response to topical and systemic events. While laws may establish important regulatory compliance requirements, the evolution and convergence of overlapping laws that share common or at least similar intent can lead to the establishment of cumbersome and differing...

Malware - Future Trends

What are the driving forces behind the rise of malware? Who’s behind it, and what tactics do they use? How are vendors responding, and what should organizations, researchers, and end users keep in mind for the upcoming future? These and many other questions will be discussed in this article, combining security...

Demystifying Penetration Testing

Goals Of This Presentation -An overview of how Vulnerability Assessment (VA) & Penetration T An overview of how Vulnerability Assessment (VA) & Penetration Testing (PT) is esting (PT) is done -Defining scope of the assessment Defining scope of the assessment -Types of Penetration Testing Types of Penetration...

Improving Security from the Inside Out

While the “human element” of information security may be easy to ignore; ignoring it is also dangerous and costly. Of this there is ample evidence. This report presents an organizational security approach that corporate security managers can use as a roadmap to initiate an effective employee security awareness...

Improving Business Continuity in the Financial Services Sector: A Model for Starting Regional Coalitions

Prior to September 11, 2001, business continuity and disaster recovery plans were primarily developed by and geared to individual financial firms - with firms establishing, testing and refining their own plans. The event of 9/11 showed us in horrifying detail how vulnerable these firms are - and how dependent they are...

BITS Voluntary Guidelines for Collections in the Financial Services Industry

I. EXECUTIVE SUMMARY Check fraud is a growing industry problem. Nearly 20 percent of super-regional banks incurred more than $20 million in check fraud-related operating expenses in 2001.1 In order to enable the industry to resolve breach of presentment warranty claims expeditiously and in a way that is fair,...

White Papers

Guidelines for Media Sanitization

Biometric Data Specification for Personal Identity Verification

Your Customers and Their Secrets

Document Security in Web Applications

The Security and Administrative Benefits of using X.509 PKI based Strong Authentication

Security Testing Demystified

Voluntary Guidelines for Consumer Confidence in Online Financial Services

BITS Consumer Confidence Toolkit: Data Security and Financial Services

BITS Key Considerations for Global Background Screening Practices

Reconciliation of Regulatory Overlap for the Management and Supervision of Operational Risk in Financial Institutions

Malware - Future Trends

Demystifying Penetration Testing

Improving Security from the Inside Out

Improving Business Continuity in the Financial Services Sector: A Model for Starting Regional Coalitions

BITS Voluntary Guidelines for Collections in the Financial Services Industry

Around the Network

Cyber Insurers Are Intensely Scrutinizing Healthcare Clients

Study: 92% of Healthcare Firms Hit by Cyberattacks This Year

Clinical Considerations When Recovering From Ransomware

Top 'Privacy by Design' Considerations for Medical Devices

Oswal: AI, Platformization Key to Network Security Evolution

How Mega Attacks Are Spotlighting Critical 3rd-Party Risks

Eliminating the Need for Stored Credentials in Healthcare

Court's Web Tracker Ruling: What HIPAA Entities Should Know

Gaining Better Visibility Into Medical Devices, IoT, OT

Who Will Take the Lead in Setting Healthcare AI Regulations?