Financial Services Security Assessments
Overview
Bad news travels fast. When it comes to cyber security threats against financial services firms, that adage has never been more accurate. The near daily headlines relating to identity theft and a rapidly evolving threat environment bear witness to this.
Pivot Point Security has expertise in helping financial services firms mitigate their most significant information security risks including:
- Unauthorized access to confidential client and or intellectual property (often associated with clients leaving a firm)
- Attacks against e-Banking applications (including Phishing, 2-factor proxying, and OWASP Top 10)
- Poor security of third party transaction providers
- Privileged password management
- Patch management in production environments
- Compliance with key regulations including FFIEC & SEC
Our clients include:
- International Banks
- Community Banks
- Hedge Funds
- Investment Firms
- Brokerages
Typical services we provide in the financial services arena include;
- Security certification / accreditation of online banking applications
- Security certification / accreditation of third party hosted banking applications
- Attestation of your control environment (e.g., developing documentation to provide validation to customers / business partners of your security posture.
- Ethical Hacking / Penetration Testing to validate your security posture
- Risk Assessments (quantitative and qualitative)
- Disaster Recovery / Business Continuity reviews
- Controls Audits (often in prep for FDIC, NCUA, OCC, OTS banking audit)
- Password Policy
- User Account Management
- System Auditing
|
- Incident response
- Encryption (etc.)
|
For more information on Pivot Point Security's robust set of Banking Industry Security Assessment offerings, contact your Pivot Point representative today to discuss how PPS can help you strengthen your internal controls, lower your risk profile and comply with regulatory requirements. You can also download a copy of our Banking / Financial Industry Case Study here; it is an excellent indicator of our core competencies in this increasingly scrutinized market.