Organization of banking security, how and why?

Alexander Borisovich2012-07-20 23:09:31

Information Security

Alexander Borisovich, 2012-07-20 23:09:31

I'm interested in how banks work, hosting technical support keeps a secret about servers and security conditions.
Where is account information stored? (Is it clear the data center, its own or not?)
Where do they find specialists for this. Where do cards with pincodes come from?
Who is responsible for the software, where do they get it?

Answer the question

In order to leave comments, you need to log in

8 answer(s)

amarao, 2012-07-21
@amarao

The main thing is to establish the work of the front. Or an early day?

Ivan Komarov, 2012-07-21
@FreeTibet

Regarding the software, there is some information here: ru.wikipedia.org/wiki/Automated_banking_system
And here is another forum: bankir.ru/dom/forums/16-Automation

astrobeglec, 2012-07-21
@astrobeglec

In view of the fact that banks are vitally interested in the security of their data ... "People from the street" do not live there.
My friend worked as a system administrator in… a bank 2 years ago. Working day from 14 to how lucky. Data from the unit was dropped once a day to the head office and received information from there via an encrypted channel via dual-up with some kind of protection system against listening to the line (you know, the person gave a subscription). Phone-to-phone connection. Data on accounts and transactions for the entire period of the system's existence (according to him) was stored in several copies: in the office, in the central office, in the regional office, and periodically the automation carried out reconciliations of the database. Before working at the bank, he worked as a system administrator in the tax office.

rtzra, 2012-07-21
@rtzra

Get a job in a bank, work for a few years - you will know everything.

Informatik, 2012-07-21
@Informatik

Bank of Russia Standardization Recommendations

skvz, 2012-07-21
@skvz

see STO BR IBBS-1.0 (RS BR IBBS-2.0-2007)

adramelech, 2012-07-21
@adramelech

I'm interested in how banks work, hosting technical support keeps a secret about servers and security conditions. - in the CIS countries, third-party hosting services are not used, it seems that only in the states a couple of banks keep everything in the Amazon clouds.
Where is account information stored? (Is it clear the data center, its own or not?) - DC is its own, there is the concept of the core of the ABS (for example, SAP) and data on accounts, credits, overdrafts are stored there.
Where do they find specialists for this. - Usually, like at any other office, there is an HR group, it’s not true to say that they don’t take it from the street, and if it’s true, then it doesn’t concern IT, they take juniors from universities. But usually they are looking for a senior for systems support. It all depends on the goals of the department / department
Where do cards with pincodes come from? - There are separate systems associated with the core, as a rule, pin codes are separate from cards, and when a card is issued, the number of the envelope with the pin code is already entered into the program.
Who is responsible for the software, where do they get it? - They write and buy themselves, for example, the BIFIT company writes the iBank system, which is used throughout the CIS.

dkurilenko, 2012-07-22
@dkurilenko

google about security: PCI (Payments Card Industry) Compliance, QSA (Qualified Security Assessor)