Re: internet banking security

[Stacey Blanc <stacey.blanc () gmail com>]

IMO hiring external is possibly one of the better routes to go
(providing the external is certified recommended, yaddi yaddi yadda).

being external to an organization helps point out holes that an
internal team may otherwise miss b/c they stare at their
resources/systems day in and day out.


just my two cents

Stacey

On 10/25/05, Barrie Dempster <barrie () reboot-robot net> wrote:
> On Tue, 2005-10-18 at 23:20 +0100, xyberpix wrote:
> > It seems like (from the subject and the thread in progress), that you
> > want to hire an
> > external co, to set up an e-banking site?
> >
> > If that is the case, and like I said I could be reading this all
> > wrong, am I the only person
> > on this list that thinks that this is a completely insane idea???
>
> What is insane about it ?
>
> Hiring an external company ?
>
> I don't consider that to be insane, it's a common thing to do, external
> security professionals with proper security checks are a good resource
> for this type of work. Having it done internally may be a good idea, but
> generally someone working in the security industry has had previous
> security checking and then they will go through the client organisations
> security check procedure before being tasked to the project. This means
> they will have had more checks than the permanent employees. External
> companies like this work on reputation as their main asset, based on the
> skills and integrity of their consultants.
>
> As long as the client organisation verifies the reputation and performs
> security checks they will be hiring people with a decent potential to be
> trustworthy, as mush as, if not more than, their current employees.
>
> (DISCLAIMER: I am an external contractor working in situations very much
> like this.)
>
> --
> With Regards..
> Barrie Dempster (zeedo) - Fortiter et Strenue
>
> "He who hingeth aboot, geteth hee-haw" Victor - Still Game
>
> blog:  http://reboot-robot.net
> sites: http://www.bsrf.org.uk - http://www.security-forums.com
> ca:    https://www.cacert.org/index.php?id=3