BFC Bulletins Monthly News Digest
Tags Cybersecurity
- Determine the parameters of a normal course of business
The standard parameters of business operations can be detected with the help of analysis tools. Once these parameters are determined, they are inserted into a database which quickly calculates any deviation and sends a warning to the relevant parties of on-standard actions. - Enter the practice of bypass sheet
Make sure to delete all the credentials of an ex-employee in order to ensure that he/she does not have access to information. - Conduct trainings with employees regarding internet security
In banking, employees’ awareness regarding internet security risks are a key factor for maintaining security. - Set an internet access policy
All departments should have a common policy for internet usage. Monitoring policies and agreements related to security should be entrusted to one person or one team. It’s important that bank employees know whom to approach for safety instructions. - Develop a policy regarding remote access and training
Working from home or on the road, people tend to neglect safety requirements. It is recommended to clarify what employees can and cannot do while working outside the office. Security trainings for remote workers and full-time staff should be different. - Develop procedures for data transfer and software downloading
It happens easily to download malicious softwares which collect identification data and intellectual property. Therefore, it is recommended to set a procedure to ask for explicit permission to a user or administrator before downloading and installing softwares and updates. - Keep copies of important information
Make backup copies of all the information and regularly check that the backup mechanism works. - Recheck access permissions to data
In corporations with big networks, it is not difficult for a person to get access to data which is not intended for them. To protect its assets, a bank must ensure the safety of all the information, keep track of employee actions and control access to all programs. In the banking sector, data belongs to both the organization itself and its customers.
