Security Risk and Governance

A European Bank

The Issue. The client, like most banks, had a security function, but there was a recognition that as the bank was moving forward and in a new direction that security had to reflect this.  The review was not a criticism of the existing security function, but to ensure that it could meet the multitude of challenges going forward, with accepted best practice in mind.

Our Involvement. As a former Group Security Manager for a High Street bank, Aidan Anderson of RedLeaf Consultancy, brought with him a high degree of expertise.  However, this was not a simple GAP analysis, as even banks, who operate in the same field and with similar constraints, do not necessarily face the same challenges, have the same structures or even the same culture.  Aidan’s objective from the outset was to engage with the bank, to understand them and not just at a superficial level, to enable the delivery of a product that met their needs.

Through working with the bank and in an open and transparent way, a picture was drawn up of the overall structure of the bank, its values were gauged and the risks set out.  This allowed the development of a threat assessment that was specific to the bank not just the country or sector it was in.