|
Application Security
There are many good reasons to add Application security
at the core of an organization’s Internet strategy:
• Ensuring customer trust
• Encouraging website adoption
• Creating and maintaining competitive advantage
• Managing legal and regulatory risks
• Reducing cost of manual testing, recovery and
fixes
Online Compliance for Banking and financial services
Banking Organizations operating on the Internet
-- whether in the commercial or public sector -- face
a growing surge of regulations and legislation. Rules
governing online privacy and data security, as well
as accessibility by disabled citizens, are increasingly
detailed and are being enforced with increasing vigor
by regulators.
When it comes to specific legislation, the financial
services and pharmaceutical/healthcare industries are
among the most closely regulated.
For example, laws such as the Sarbanes-Oxley Act, the
Disability Discrimination Act in the UK and the EU’s
Privacy and Electronic Communications Regulations all
set requirements for how information is displayed online,
and how the underlying data is gathered, stored, shared
and communicated.
The Gramm-Leach-Bliley Act (GLBA) applies to financial
services companies, and governs the way that affiliated
financial services firms share customer information.
The Act requires for privacy and security policies,
annual privacy notices, opt outs for information sharing
and, under the Safeguard Rule, proactive steps to secure
customer information.
Financial services firms across Europe are governed
by highly specific rules covering trading in shares
and other securities, collective investments, deposit
taking and banking services, and lending. The laws and
regulations impose specific requirements on how services
are advertised, on disclosure of information, and on
financial advice.
Financial services companies and related businesses,
such as estate agencies -- are also under obligations
to establish the identity of customers in order to prevent
money laundering. These obligations apply whether the
initial contact is in a branch, by phone or over the
Internet. Applicable legislation includes the Financial
Services and Markets Act in the UK, which is regulated
by the Financial Services
|