Computerworld Australia - SYDNEY -- Recent data losses at financial institutions have increased industry concerns about unauthorized access, according to Deloitte's 2005 Global Security Survey.
The survey of global financial institutions found a 21% increase over last year in concerns about unauthorized access to personal information. It was rated an area of concern by 83% of all respondents.
Kevin Shaw, Deloitte security service Asia Pacific leader, said the high level of fear reflected the fact that breaches of customer privacy had the potential to undermine trust in financial institutions at a most fundamental level.
"There is a lot of focus now on addressing these issues, but storage of credit card numbers is a process of policy and procedure. The CardSystems breach was a result of failure by [the company] to follow its own policy and it was using the data in ways it should not have when it got hacked; there isn't a technical solution for this," Shaw said.
"The growth in external attacks has slowed because financial institutions have become far more effective at deploying technological defenses such as intrusion detection, antivirus solutions and content filtering and monitoring, which means criminals have shifted their focus from technology attacks to human behavior and gaps in policy enforcement and governance.
"They now prey on staff in financial institutions and their customers and any weakness they can find in human behavior."
Shaw said Australian banks are performing well by global standards, particularly with staff training and threat awareness.
However, financial institutions worldwide are struggling to keep pace with the changing nature of IT security attacks.
Shaw said the role of a chief privacy officer is integral to combating the security landscape.
"At a global level, only 49% of respondents had established the role of chief privacy officer, although 5% acknowledged that they would have one by the end of the year," Shaw said.
"In Australia, most of the large financial institutions indicate they have some form of a privacy officer function. However, it is becoming increasingly critical that they consider an investment in a chief privacy officer with appropriate funding and authority."
- Single-Vendor Security Ecosystems Offer Concrete Benefits Over Point Solutions IT security decision-makers from companies with 100 to 5,000 employees evaluates the current endpoint security solution market based on Forrester's own market data,...
- Case Study: Intuit Turns to Self-Service IT Intuit empowered its users to resolve their own IT issues with a consumer-like experience to free IT to focus on more strategic initiatives....
- Automation for a Better Tomorrow Check out the five most common annoyances facing enterprise IT service desks today, and how automation can resolve all of them. Download the...
- Beyond the Enterprise App Store Leverage proactive, secure and automated IT Service delivery to move beyond the traditional App Store and empower your users. Read the white paper...
- Business-driven data protection Setting up data protection infrastructures with your organizations' core mission or business in mind is key. In this webinar, the ARCserve team will...
- On-Demand Webinar: Mind the Gap! Watch the webinar featuring Bob Janssen, CTO and Co-Founder of RES Software, to start building a solid foundation for business and IT to... All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!