Security threats Toolkit

Story: Banks wake up to insider threats

• 
• 

While financial organisations worry about protecting physical assets...

....and the data on their databases, it appears the public fear of identity theft has been overshadowed. The human threat is actually one of the biggest threats as it cannot be completely controlled or stopped. Yet, the onus is on financial institutions and other organisations that transact online to use the right technology to protect their customers and the sensitive information they hold about them.

Technology exists to help control the human threat, and make it harder for criminals to access critical data. All organisations enabling online financial transactions should be using two-factor authentication technology (something you know, like a password, plus, something you have, like a USB token) to protect their customers' data and improve consumer confidence. Protecting these 'weak spots' will free up other resources to ensure that staff are also security-aware, in the battle against inside identity threat.

While the insider threat is hard to control, restricting access to
company-sensitive information and customer details, as well as keeping an audit trail of who is authorised to access this, will facilitate tracking down the perpetrators. This will help stop the problem at source.

• 
• 

• 
• 
• 

Full Talkback thread