Security: Access Privileges Converge

Bank Technology News, November, 2006 by Glen Fest

Even with a mother lode invested in both lock-sure physical access and network security, an East Coast financial firm didn't account for its vulnerability to a coffee break. During a compliance audit tour of a secured testing area, an examiner noticed an unattended computer running an internal financial application on-screen.

"He went over and touched the space bar," says Steve Hunt, an analyst with research marketing and security consultancy 4A International, in recounting the episode. That lone keystroke represented both a blown Sarbanes-Oxley Sect. 404 audit and a key weakness plaguing financial operations centers: physical access and IT security running in isolation. Despite millions being spent on password-secured cards, biometric readers and other internal management...

Read the full article with a Free Trial at MyWire.

Premium Content Partnership | MyWire provides an in-depth online archive library of reference works.