CLIENT:
A commercial bank with over $3 billion in assets offering a complete range of financial products to its customers. Seventy branch banks, located throughout the state, are connected to a central operations center for all IT network activities.

CHALLENGE:
As banks leverage their computer network and the Internet to be more competitive, they must also embrace new risks and accept the fiduciary, legal, and regulatory responsibilities assumed by opening their critical business systems to a public network. Debilitating viruses, malicious attacks, and unauthorized access could result in identity theft, fraudulent transactions, data destruction, and disruption of service. Financial institutions are prime targets for attacks. According to Deloitte's 2004 Financial Sector Global Security Survey, 83% of respondents acknowledged that their systems had been compromised in the past year and 40% stated the breaches had resulted in financial loss to their organization. With mounting news accounts about electronic breaches of information assets, our client wanted to ensure its customers and the board that their network was protected.

After meeting with Techrizon Information Security personnel, the bank determined that our knowledge and experience would help them in meeting their objective of reducing their risk by identifying and prioritizing vulnerabilities and recommending solutions that would strengthen their defenses.

SOLUTION:
The assessment we provided created a roadmap that allowed our client to systematically address vulnerabilities in their IT network and reduce the threat of unauthorized access. Following the bank's next FDIC audit, the client stated that our assessment met or exceeded the FDIC examiners' requirements in all areas.

As always, Techrizon Information Security created an assessment-based report that identified, prioritized, and addressed both internal and external network vulnerabilities. Our process of comparing the client's network against the 127 individual requirements within the ISO 17799 resulted in a solution that exceeded our client's expectations while meeting regulatory compliance requirements. The thorough assessment performed by Techrizon provided assurance to the bank that they had taken the necessary steps to protect their customers and stockholders from malicious attacks and unauthorized access.