Real IT Security Issues in The Financial Sector

How deep is your trust in outsourcing partner?

This new economic and infrastructural reality demands a high level of confidence and control. Blind trust conceals the truth. You need real control to ensure SLA. Have all the “accidents” been solved without reports? Have you ever felt that you want a deeper investigation into what really happened in your system? It is time to take a closer look at the actions of your outsource partner.

Do you sleep well at night?

There is a constantly increasing pressure on managers and network administrators working in the finance industry to ensure compliance requirements and the absolute safety of key assets by implementing appropriate solutions and processes. Since this sector deals with the most sensitive data, risks associated with data loss or data breach can be fatal.

According to research conducted by the Association of Certified Fraud Examiners (ACFE), the typcial organization loses an estimated 5 percent of annual revenues to fraud. According to the ACFE 83% of internal fraud cases were committed by first time offenders, not career criminals.

How many security incidents do you have monthly? How much cost is budgeted for forensics? It is time to spend less on it while increasing your effectivity.

When do you expect your next IT security audit?

Compliance regulations are increasingly challenging to implement and increasingly important to fulfill. Along with the Sarbanes-Oxley (SOX) and Basel II regulations; PCI DSS and many other compliance drivers (see below) have to be taken into consideration in order to keep your customers' sensitive data safe, and their trust in you.

Nearly half – 48% -- of all data breaches come from insiders, according to Verizon's 2010 Data Breach Investigations Report. And the insiders that you need to watch closest are those with special privileges. We see in the report that 79% of victims subject to PCI DSS had not achieved compliance.