Information security audits

Information is one of the most essential assets of an financial organisation. For this reason organisations must organise and evaluate their IT-security and privacy control effectively.

In other words: protecting intellectual property - in any company. Intellectual property, digital assets, are the core of any company. Success or failure are very dependent on protecting these assets.

Research states hackers operate ever more professionally. More and more sophisticated attacks on security of organisations by means of Internet. External security attacks occurred on more than three-quarter of the questioned financial organisations last year. Almost half of the questioned financial organisations have had internal security attacks. External attacks are frequently `phishing’ and `pharming, a serious threat to for example Internet banking. Relatively frequently internal security attacks concern internal fraud and leaking of customer data.
(source: Global Security Survey 2006 van Deloitte)

Independent audit
Specific compliance and control with respect to customer identification and data protection are imposed by legislators. Financial organisations must be certain to have implemented sufficient adequate monitoring of the computer system of your bank and network. With specific requirements for independent auditing within the framework of the Sarbanes-Oxley act and the Wet Financieel Toezicht, minimising your risk is to concentrate on auditing your information system and network yourself.

ISO 27000
Weak spots in your IT security are traced and clearly reported on the basis of ISO 27000. This provides management information on IT security procedures that can be brought to the highest level.

The existing processes and procedures within your organisation as fixed in your Information Security Handbook are assessed against the requirements during the ECB Information Security audits. Particularly the application and implementation of the required procedures are determined. Management obtains clear reports stating the condition of your organisation. These reports are the basis for the management to take measures that keep the Information Security at the highest level.

>Read more

For more information please contact ECB Nederland at +31 299 323 123.