{"id":24662,"date":"2018-12-07T11:53:24","date_gmt":"2018-12-07T11:53:24","guid":{"rendered":"https:\/\/digileaders.com\/?p=24662"},"modified":"2018-12-07T11:55:55","modified_gmt":"2018-12-07T11:55:55","slug":"financial-services-cyber-security-threat","status":"publish","type":"post","link":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/","title":{"rendered":"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?"},"content":{"rendered":"
\n

The Financial Conduct Authority (FCA) announced last year that as of August 2018, all high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.<\/strong><\/p>\n

The move by the UK banking regulator is designed to provide consumers with more transparency, enabling them to easily compare services offered by Financial Services (FS) providers and to drive greater competition in the marketplace.<\/p>\n<\/div>\n

\n
\n
\n

The\u00a0report<\/a>\u00a0published by the FCA does not specify how much detail FS providers will be forced to go into. However, a major incident is classed as one that prevents customers from using banking services. In January 2017 Lloyds Banking Group suffered a 48-hour online cyberattack which saw hackers send millions of fake requests to the Groups\u2019 servers in order to grind systems to a complete halt. The \u2018denial of service\u2019 (DOS) attack was \u2018geo-blocked\u2019 by Lloyds IT security experts effectively blocking access to the server. However, this also blocked legitimate requests from consumers. The information that FS organisations hold is hugely sensitive, and therefore when an attack like this happens they are held to a higher account by consumers than other organisations.<\/p>\n

The incident came just months after the Tesco Bank cyberattack that saw an unprecedented loss of \u00a32.5 million from 9,000 accounts. The threat to the UK\u2019s financial infrastructure has meant that FS is under scrutiny, with a higher need for accountability directed at them from consumers whose trust has inarguably been eroded.<\/p>\n<\/div>\n<\/div>\n

\n

Outdated legacy software is allowing cyber criminals to target everyone \u2013 from the C-Suite to everyday consumers in their own homes. Legacy programming language is not being taught to today\u2019s engineers with middle and back office systems only able to report transaction failures and risk triggers after the fact.\u00a0<\/span><\/p><\/blockquote>\n<\/div>\n

\n
\n

All companies that hold credit card details, particularly retailers, have to be compliant to regulations which have been drawn up by FS companies, such as Visa. The fact that FS organisations have drawn up standards for other sectors, and yet remain so prone to attack is ironic and perhaps worrying.<\/p>\n

The lack of transparency within organisations is also an issue. This has meant that the C-suite cannot see the build-up of risky positions or business practices, simply because they are either not aware or do not understand it.\u00a0<\/span><\/p>\n

This, coupled with the fact that Business Email Compromise (BEC) targets specific individuals within companies impersonating C-level exec emails, rather than a mass phishing approach, means that it\u2019s far harder to differentiate between the real messages and the fake ones, meaning that scams are more likely to be successful and are far harder to prevent.<\/p>\n

The \u2018internal threat\u2019 or rather the internal infrastructure and the employees, are the biggest problem within organisations whose security controls are not sophisticated enough to match the threat. With legacy or simply \u2018poor\u2019 coding in place, as well as\u00a0merged technology adding to the complexity of decaying infrastructure, less refined threats like SLQ injection and XXS are still able to get through.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\"\"<\/div>\n
\n

However, with regulations such as Sarbannes-Oxley and GDPR in place, the onus is now very much at board level. In recent years the rise of the Chief Information Security Officer (CISO) has emerged as an integral one for FS, both in terms of performance and consumer trust. More than just a technical IT role, the CISO has become a \u2018digital vanguard\u2019 for organisations by understanding the risks associated with the commercial impact of systems, people and processes, from the top down \u2013 breaking down silos across FS data portfolios.\u00a0<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n

As\u00a0cyber security<\/a>\u00a0attacks in FS increase and with safeguarding regulations becoming more stringent, the key to success is ensuring that IT security is depicted properly across the organisation. The previously isolated role, offered purely technical and practical support and whereas there still is a need for this, the role of the CISO should be far reaching across an organisation, where they are increasingly operating in a dynamic digital environment with the growth of online processing and cloud services.<\/p>\n

To comply with the FCA deadline,\u00a0assessing operational resilience<\/a>\u00a0is key, and FS companies need to understand its assets and be constantly evaluating where they are vulnerable through rigorous testing.<\/p>\n

Red and blue team testing, as favoured by military and government organisations, uses role-play testing to simulate dummy cyber-attacks in order to allow FS organisations where its weaknesses lie and where to neutralise threats. With each IT team playing the role of attacker and defender, they get to practise both how to identify an attack and how to deal with it.<\/p>\n

Having a response prepared ahead of a cyber-attack is also critical and by using software analytics and forensic techniques such as reverse malware engineering, host-based intrusion and detection and network analysis, helps to define the breach vector and how it took place. This information will in turn help the CISO determine the aims and impact on FS and report back at board level.<\/p>\n

FS has no choice but to consider the people behind the data because once the FCA rules are enforced, any FS found wanting will find that its customers will be doing the talking with their feet. Therefore, cyber vulnerabilities need to be the top priority for companies rather than an afterthought, or even worse, when disaster has struck.<\/p>\n

\n

Originally posted here<\/a><\/p>\n

More thought leadership <\/i><\/a><\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

The Financial Conduct Authority (FCA) announced last year that as of August 2018, all high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents. The move by the UK banking regulator is designed to provide […]<\/p>\n","protected":false},"author":11,"featured_media":24679,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"class_list":["post-24662","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","topic-cyber-security","topic-fintech"],"acf":[],"yoast_head":"\nHow Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat? | Digital Leaders<\/title>\n<meta name=\"description\" content=\"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?\" \/>\n<meta property=\"og:description\" content=\"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/\" \/>\n<meta property=\"og:site_name\" content=\"Digital Leaders\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/digitalleadersprogramme\" \/>\n<meta property=\"article:published_time\" content=\"2018-12-07T11:53:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-12-07T11:55:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820-1024x684.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"684\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"helena.larsen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?\" \/>\n<meta name=\"twitter:description\" content=\"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.\" \/>\n<meta name=\"twitter:creator\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:site\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"helena.larsen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/\"},\"author\":{\"name\":\"helena.larsen\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\"},\"headline\":\"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?\",\"datePublished\":\"2018-12-07T11:53:24+00:00\",\"dateModified\":\"2018-12-07T11:55:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/\"},\"wordCount\":907,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/\",\"url\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/\",\"name\":\"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat? | Digital Leaders\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg\",\"datePublished\":\"2018-12-07T11:53:24+00:00\",\"dateModified\":\"2018-12-07T11:55:55+00:00\",\"description\":\"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.\",\"breadcrumb\":{\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg\",\"width\":6016,\"height\":4016,\"caption\":\"bandwidth-close-up-computer\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/digileaders.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/digileaders.com\/#website\",\"url\":\"https:\/\/digileaders.com\/\",\"name\":\"Digital Leaders\",\"description\":\"We Lead Transformation\",\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/digileaders.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/digileaders.com\/#organization\",\"name\":\"Digital Leaders\",\"url\":\"https:\/\/digileaders.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"width\":3000,\"height\":2992,\"caption\":\"Digital Leaders\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/digitalleadersprogramme\",\"https:\/\/x.com\/DigiLeaders\",\"https:\/\/www.linkedin.com\/groups\/6527637\/\",\"https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\",\"name\":\"helena.larsen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"caption\":\"helena.larsen\"},\"sameAs\":[\"louise.stokes@digileaders.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat? | Digital Leaders","description":"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/","og_locale":"en_GB","og_type":"article","og_title":"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?","og_description":"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.","og_url":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/","og_site_name":"Digital Leaders","article_publisher":"https:\/\/www.facebook.com\/digitalleadersprogramme","article_published_time":"2018-12-07T11:53:24+00:00","article_modified_time":"2018-12-07T11:55:55+00:00","og_image":[{"width":1024,"height":684,"url":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820-1024x684.jpg","type":"image\/jpeg"}],"author":"helena.larsen","twitter_card":"summary_large_image","twitter_title":"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?","twitter_description":"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.","twitter_creator":"@DigiLeaders","twitter_site":"@DigiLeaders","twitter_misc":{"Written by":"helena.larsen","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#article","isPartOf":{"@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/"},"author":{"name":"helena.larsen","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e"},"headline":"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?","datePublished":"2018-12-07T11:53:24+00:00","dateModified":"2018-12-07T11:55:55+00:00","mainEntityOfPage":{"@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/"},"wordCount":907,"commentCount":0,"publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"image":{"@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg","inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/","url":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/","name":"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat? | Digital Leaders","isPartOf":{"@id":"https:\/\/digileaders.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage"},"image":{"@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg","datePublished":"2018-12-07T11:53:24+00:00","dateModified":"2018-12-07T11:55:55+00:00","description":"FCA announced that high street lenders offering business or current accounts will be forced to publish details of major operational and security incidents.","breadcrumb":{"@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/digileaders.com\/financial-services-cyber-security-threat\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#primaryimage","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/12\/bandwidth-close-up-computer-1148820.jpg","width":6016,"height":4016,"caption":"bandwidth-close-up-computer"},{"@type":"BreadcrumbList","@id":"https:\/\/digileaders.com\/financial-services-cyber-security-threat\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/digileaders.com\/"},{"@type":"ListItem","position":2,"name":"How Should Financial Services Future Proof Systems Ahead Of A Cyber Security Threat?"}]},{"@type":"WebSite","@id":"https:\/\/digileaders.com\/#website","url":"https:\/\/digileaders.com\/","name":"Digital Leaders","description":"We Lead Transformation","publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/digileaders.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/digileaders.com\/#organization","name":"Digital Leaders","url":"https:\/\/digileaders.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","width":3000,"height":2992,"caption":"Digital Leaders"},"image":{"@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/digitalleadersprogramme","https:\/\/x.com\/DigiLeaders","https:\/\/www.linkedin.com\/groups\/6527637\/","https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ"]},{"@type":"Person","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e","name":"helena.larsen","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","caption":"helena.larsen"},"sameAs":["louise.stokes@digileaders.com"]}]}},"_links":{"self":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/24662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/comments?post=24662"}],"version-history":[{"count":0,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/24662\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media\/24679"}],"wp:attachment":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media?parent=24662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}