Re: Any banking security best practices and survey information?

[Fred Cohen <fred.cohen () all net>]

There is really only one best practice in information protection, and  
that is an effective program of risk management. The various other  
assertions that people make about such things are generally made by  
people who do not know what they are talking about or who are  
creating templates to satisfy dogmatic customers who just want  
something to do. Security is highly context sensitive and there are  
many different ways to effectively manage risks.

FC

On Oct 28, 2005, at 5:58 PM, ricci wrote:

> Hello FC,
>
> Thx for your advise.
>
> In fact, what I want to know is the general security best practices  
> for
> banking industry. Cause I have already explored those specific  
> regulations
> about banking, but those are specific, but I want to know is the  
> general
> best practices how those regulations were based on.
>
> Please advise.
>
> Thx.
>
> Ricci

-- This communication is confidential to the parties it is intended  
to serve --
Security Posture            securityposture.com          tel/fax
University of New Haven               unhca.com        925-454-0171
Fred Cohen & Associates                 all.net      572 Leona Drive
Security Management Partners    policygeeks.com    Livermore, CA 94550