As an outsource security partner BAI provides managed security, managed firewall, managed ids, content filtering, internet security, network security, penetration testing, and vulnerability testing.

As you would expect the banking and finance industry has one of the most obvious requirements for protecting their information security assets. As such, banks and financial institutions often implement the most comprehensive security programs of nearly any other business sector. Of course, there are exceptions, such as healthcare and utilities. However, in nearly every industry in today’s Internet-connected world, there are significant risks in the areas of data security, liability, and reputation (post security breach). Since nearly all industries share common risks with banking and finance, it’s a valuable lesson to understand what motivates a bank’s security officer and how you can leverage the security services at BAI Security to heighten your own level of protection.

In banking, to insure adequate privacy protection for the institutions and consumers, federal agencies that regulate banking and financial institutions cooperated in developing the Safety and Soundness Examination Procedures for electronic banking to be used by agency examiners in auditing banking operations. The Gramm-Leach-Bliley (GLB) Act of 1999 added additional requirements aimed at safeguarding customer information. In turn, the banking regulatory agencies levied specific requirements as a result of the GLB Act.

In all types of businesses, Information technology security is no longer just the responsibility of the IT department. The board of directors and senior management must be aware and involved in developing an appropriate information security program. In banking, the FDIC published a Financial Institution Letter entitled, Risk Assessment Tools and Practices to guide financial institutions and examiners with background information and guidance.

At BAI Security, we have taken the Requested Items List published in the Electronic Banking Safety and Soundness Examination Procedures and indicated areas where BAI Security provides direct assistance in preparing your environment for compliance. Regardless of whether your audit is federally mandated or just part of a prudent security program, we provide world-class service that exceeds expectations.

The following Requested Items List indicates key areas were banks will be audited to ensure that appropriate measures have been taken to secure their environments:

• Thorough and Proactive Risk Analysis

• Sound Security Policies

• Well-designed Security Architecture

• Properly Configured Firewalls

• Strong Authentication Programs

• Proactive Vulnerability Assessments

• Regular Penetration Test by 3rd Party

BAI Security addresses these requirements and help to ensure compliance with our following service offering:

BAI: Information Security Auditing Service:

BAI Security audits not only identify specific vulnerabilities, but also clarify real-world security risks by extensive assessment, exploit/penetration testing, and expert analysis. Our deliverables provide a concise roadmap for remediation, as well as clearly express the current business risks for upper management. Subsequent audits provide trending analysis to validate internal remediation efforts and expenditures.

In addition, BAI Security addresses the following requirements and helps to ensure compliance with our BAI Managed Security Service offering:

• Detection Measures

• Ongoing Monitoring of Security

• Response Measures

• Effective Incident Response

• Emergency Response to Breeches

BAI Managed Security Service:

The BAI Managed Security Service offers the most comprehensive threat monitoring and response protection available at a small fraction of the cost of an in-house solution. The turnkey service includes all hardware, software, maintenance/support, as well as 24x7 monitoring and response from our Security Operation Centers (SOCs). One of the significant advantages of the BAI Security solution is the comprehensive coverage addressing all of the key risk areas, including of the following options:

• Intrusion Detection/Prevention

• Firewall & VPN

• Email Content Management

• Web Content Management

• Perimeter-based AntiVirus

• SPAM & Malicious Email Filtering

In Conclusion

If you are focused on getting your bank security system to comply with the more stringent GLB regulations, the Interagency Guidelines Establishing Standards for Safeguarding Customer Information will be helpful. You will note that a requirement of the GLB is that the “information security program be regularly tested by independent third parties or qualified independent staff in accordance with the risk assessment.” Contact BAI Security today for our specialized Security Auditing and Managed Security Services.