ATM & HSM
For effective ATM utilization three conditions must exist:
-
Your ATM vault must be secure,
-
You must be in compliance
-
Customers must feel that their personal data is safe.
To help you achieve these goals we offer a comprehensive security program including:
-
Extensive security audit
-
Vulnerability and risk assessment for network devices and elements, MF codes using best practice industry tools and mind
-
Open codes such as HSM, Epp, ATM
-
Remediation plan
-
PCI-DSS QSA AUDIT
Dealing Room
A bank's dealing room markets prices and executes transactions involving foreign currencies.
Due to the high volume of large financial transactions involving foreign markets being executed in real-time, the dealing room is considered particularly high risk.
To meet this challenge we provide you with a range of cutting edge technologies including:
-
Topology
-
Penetration Test, multi layer and multi box
-
Specific Application review: such as FOREX and recording applications
-
Procedures such as Back office
-
Internal and External interfaces
-
Networking infrastructures
-
Security components and mechanism
-
Data storage, Data backup and Data recovery
-
Business risks and Fraud prevention
E-Banking
With the increasing use of e-banking through personal computers, PDAs and mobile phones comes increasing security concerns.
For E-banking to succeed, customers need to trust the sites and services that the bank provides them, and the bank must be certain that personal information remains secure. To ensure these needs we provide the following services:
Information Security Awareness
No security policy can be effective without the full cooperation of all bank employees. To promote information security awareness, NSAP IT-Consider IT done offers an Information Security Awareness campaign in which every employee is exposed to sensitive security massages, philosophy and goals.
The campaign is flexible and can focus on specific issues such as:
-
Passwords
-
Employee's responsibility
-
Viruses and malicious
-
Trojans and rootkit's
-
E-mail security
-
Vulnerability management
-
Handling of sensitive documentation
-
Social engineering
-
Regulations
SWIFT Fraud-Risk Analysis
Our unique SWIFT Fraud-Risk Analysis is an end-to-end security review covering issues including:
-
Security policy & procedure
-
SWIFT System Architecture
-
Internal and External interfaces
-
Secure MT transactions
-
SWIFT components (SAG,SAA, SA Web Station, SNL)
-
Phase-2 Architecture (HSM/RMA)
-
Networking infrastructures
-
Networking and computer components
-
Security components and mechanism
-
Applications Security (off the shelf, custom made)
-
Data storage
-
Data backup and Data recovery
-
Redundancy solutions
-
DRP/BCP
-
Physical Security
-
Accounting and system controls
-
Operational Security
-
Business risks and Fraud prevention
-
Simulation of attacks (Penetration Test)
-
Human factors
-
LSO/RSO
-
Dual control mechanism
-
Compliance with SWIFT’s security guidelines