FierceFinanceFierceFinanceITFierceComplianceIT   FierceCIO

Time to regulate banks' Internet activities?

The Web can be an unruly and confusing place for a bank to do business, internally and externally, but you pretty much have to embrace it these days. That's where all your customers and employees want to be.

One expert tells Forbes: "There's also a level of chaos underneath all of this. It's of deep concern to us that a bank comes in and says they want to put everything on the Internet. There's no regulation of that. And at some point bandwidth may reach a limit. What if it fails? If we put all our eggs in one basket, it has some impact. Someone needs to be involved and create some rules."

So there are two issues here. The first is a potential meltdown of the Internet. Could that really happen? Some experts definitely think so. Well, most people assume it will always be business as usual and that higher-bandwidth services, like 4G, will open up. But a big reckoning--perhaps one that will play out over time--could be on the way. All a bank can really do is protect itself.

This raises the other issue. Is there a need for federal rules to guide development of secure systems, mandating firewalls and encryption and a host of other security measures? To be sure, some vendors would like to see that. Already, however, the FDIC (Federal Deposit Insurance Corp.) and OCC (Office of the Comptroller of the Currency) regulators are taking a keen interest in IT when they examine banks. Perhaps some best practice guidelines would be the place to start.

For more:
- here's the Forbes interview

Related Articles:
Should FCIC use the Internet against Goldman Sachs?

More banks upgrade mobile offerings
HSBC gets its technology right

SHARE WITH:
Email Twitter Facebook LinkedIn StumbleUpon
Get Your FREE FierceFinanceIT Email Newsletter:
Comments (2) | Post a comment

Comments

I work for one of those vendors (VeriSign) and we would indeed like to see federally mandated encryption, but there's enough competition between security providers to suggest that the intention here is sound. In all honesty, if you're looking to cut down on phishing there are few solutions as expedient as extended validation ssl -- the green url bar can't be spoofed by hackers looking to purloin personal info. And the more banks that implement EV SSL the more users that will be educated on the significance of the green url bar, which will additionally cut down on the success rate of MITM attacks and a host of other perils. Across the board encryption can only help.

Yes, that's exactly what we need, the government telling us how to write software. After all, they so good at security, just ask the terrorists in Afghanistan...

Post new comment

The content of this field is kept private and will not be shown publicly.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.