Las Instituciones financieras deben incorporar el tema del riesgo tecnológico en sus estrategias de negocios y de gobernanza.
El riesgo tecnológico se mide en relación con el nivel de efectividad de las medidas adoptadas por las Instituciones en la gestión de la seguridad para contrarrestar el continuo incremento de la vulnerabilidad en las herramientas y aplicaciones tecnológicas.
Es una realidad que la infraestructura y las aplicaciones tecnológicas están siendo blanco de ataques debido a vulnerabilidades existentes ya sea por no contar con medidas de protección apropiadas o por el cambio constante, factores que hacen cada vez más difícil mantener actualizadas las medidas de seguridad.
Un aluvión de ataques cibernéticos dañinos está sacudiendo a empresas y organizaciones a nivel mundial al punto que ya no están asumiendo que pueden mantener a raya a los piratas informáticos y en lugar de eso, han pasado a librar una guerra de guerrillas desde el interior de sus redes.
Según Gartner, el gasto mundial en seguridad informática fue muy superior a los 70,000 millones de dólares en el 2014. ABI Research estima que el gasto en seguridad cibernética sólo en infraestructura crítica en los bancos, las empresas relacionadas con la energía y el sector militar, llegará a los 109,000 millones de dólares para el año 2020. Como ejemplo, las empresas españolas vienen gastando unos 14,000 millones de euros al año en reforzar su ciberseguridad.
El sector financiero constituye el objetivo prioritario de los cibercriminales, hasta el punto de que cerca de la mitad de los ciberataques afectan a este sector. Las amenazas y ataques que experimentan diariamente ya no solo proceden de individuos deseosos de quebrar la seguridad de un Banco, como los hackers, sino que se está convirtiendo en práctica habitual también de cibercriminales que buscan lucro económico, así como de ciberterroristas que tratan de atentar contra la seguridad de una Institución, o del ciberespionaje entre entidades financieras
Adicional a los ataques intencionados, se encuentra el uso incorrecto de la tecnología, que en muchas ocasiones es la mayor causa de las vulnerabilidades y los riesgos a los que se exponen las organizaciones.
Todo esto lleva a crear una estrategia Institucional que dimensione el riesgo tecnológico desde tres aspectos:
A nivel de la infraestructura tecnológica (redes, recursos de hardware y acceso físico).
A nivel lógico (riesgos asociados al software, aplicaciones y los datos).
A nivel de los riesgos derivados del mal uso que hace el recurso humano de lo anterior.
Es fundamental que las Instituciones analicen los aspectos anteriores y que elaboren un mapa de riesgo que documente las posibles causas de riesgo tecnológico así como sus efectos y que mitigue de forma eficiente y efectiva las amenazas procedentes de entornos como la movilidad, la computación en la nube y los medios sociales.
A continuación citamos un ejemplo del resultado del proceso de creación de un mapa de riesgo y de las acciones a tomar para la mitigación de las amenazas relacionadas con la Banca por Internet:
Riesgo: Privacidad
Acción: Los datos personales y financieros deben almacenarse de manera segura y todas las comunicaciones con el sistema de Banca en Línea deben estar encriptadas. Esto asegura la confidencialidad de los datos desde los sistemas del Banco hasta el navegador del cliente. También debe ofrecerse un servicio que permita intercambiar correo electrónico, de manera segura.
Riesgo: Certificados Digitales
Acción: Las páginas Web deben hacer uso de certificados de validez extendida (EV – Extended Validity) para comprobar la identidad de los visitantes. Estos certificados requieren de una verificación exhaustiva y proporcionan el más alto nivel de confianza del usuario con respecto a la autenticidad del sitio Web.
Riesgo: Verificación de la identidad
Acción: Para obtener un nivel más alto de seguridad, el sistema de Banca en Línea debe requerir dos niveles de autentificación para acceder a las cuentas bancarias.
– El Usuario y Contraseña
– Una contraseña de un solo uso (one-time password) generada automáticamente. Este segundo paso previene un acceso no autorizado en el caso de que un Usuario/Contraseña haya sido comprometido.
Riesgo: Bloqueo de cuenta y finalización de sesión
Acción: Para proteger los datos contra intentos de adivinar una contraseña, la cuenta será bloqueada si la contraseña (o el código del token) son introducidos erróneamente cuatro veces consecutivas. Además, una sesión bancaria en línea debe desconectarse automáticamente después de doce minutos de inactividad.
Riesgo: Identidad del Sitio Web
Acción: Los usuarios reciben correos electrónicos que aparentemente son enviados por la institución y q que generalmente solicitan que se sigan ciertos enlaces para conectarse a su cuenta en línea para resetear la contraseña u otras acciones similares. Generar una campaña de correos electrónicos que adviertan al usuario del riesgo de responder a este tipo de correos.
Como conclusión, podemos mencionar que gracias a la adopción de medidas para la mitigación del riesgo tecnológico, los clientes de las Instituciones Financieras estaremos más seguros cuando nos identifiquemos para efectuar operaciones que involucren información sensitiva o dinero, lo que nos protegerá de posibles fraudes. Asimismo, los Bancos se protegerán mejor, internamente, al aplicar métodos de mitigación de riesgo al identificar a los colaboradores que manejan dinero y autorizan transacciones de valor.
Fernando Martin del Campo
Director Ejecutivo
IDS de Centroamérica
IacGO7 pretty handy stuff, overall I believe this is really worth a bookmark, thanks
Really informative blog article.Really thank you! Will read on
I really liked your blog.Much thanks again. Great.
Music started playing as soon as I opened up this web page, so annoying!
Looking forward to reading more. Great blog.Really looking forward to read more. Want more.
It as nearly impossible to find well-informed people for this subject, however, you sound like you know what you are talking about! Thanks
Wow, wonderful weblog format! How long have you been running a blog for? you made blogging glance easy. The whole look of your web site is great, let alone the content!
My brother suggested I might like this blog. He was totally right. This post truly made my day. You cann at imagine just how much time I had spent for this info! Thanks!
It as not that I want to copy your web-site, but I really like the layout. Could you tell me which style are you using? Or was it tailor made?
Perfect work you have done, this site is really cool with good information.
Muchos Gracias for your blog.Thanks Again. Great.
Wow, amazing weblog format! How long have you ever been running a blog for? you made running a blog glance easy. The full glance of your site is fantastic, let alone the content!
Just Browsing While I was browsing today I saw a excellent article concerning
really pleasant piece of writing on building up new weblog.
Wow, marvelous blog layout! How long have you been blogging for? you make blogging look easy. The overall look of your web site is fantastic, as well as the content!. Thanks For Your article about &.
Normally I do not read article on blogs, but I wish to say that this write-up very forced me to take a look at and do it! Your writing taste has been surprised me. Thank you, quite great article.
Pretty! This has been an incredibly wonderful post. Thank you for supplying this info.
I thought it was going to be some boring old post, but it really compensated for my time. I will post a link to this page on my blog site. I am confident my visitors will come across that very useful
Many A Way To, Media short term loans kansas
I really liked your blog post.Thanks Again. Really Cool.
Marvelous, what a blog it is! This web site provides valuable information to us, keep it up.
Timon had the gifts of God, which is known for, plus an atmosphere pouch at the back
I’аll right away grab your rss as I can not to find your e-mail subscription hyperlink or newsletter service. Do you have any? Please allow me know in order that I may just subscribe. Thanks.
Wow, fantastic blog layout! How long have you been blogging for? you make blogging look easy. The overall look of your website is fantastic, let alone the content!
Some truly prime articles on this website , saved to favorites.
Wohh just what I was searching for, thank you for putting up.
such an ideal means of writing? I have a presentation subsequent week, and I am
Major thanks for the blog. Really Great.
You made some really good points there. I looked on the net for more info about the issue and found most individuals will go along with your views on this website.
Im obliged for the post.Really looking forward to read more. Awesome.
I visited a lot of website but I conceive this one has got something extra in it in it
I truly appreciate this post.Thanks Again. Will read on
This unique blog is really cool additionally factual. I have picked up a lot of interesting tips out of this amazing blog. I ad love to visit it over and over again. Cheers!
There is perceptibly a bundle to identify about this. I believe you made certain good points in features also.
It’аs really a great and helpful piece of info. I’аm happy that you simply shared this helpful info with us. Please keep us informed like this. Thanks for sharing.
Would you be eager about exchanging hyperlinks?
Very informative article.Much thanks again. Awesome.
The Birch of the Shadow I believe there may be a couple of duplicates, but an exceedingly useful listing! I have tweeted this. Many thanks for sharing!
I will right away grab your rss as I can not find your email subscription link or newsletter service. Do you ave any? Please let me know in order that I could subscribe. Thanks.
Say, you got a nice article post.Much thanks again. Fantastic.
Your style is so unique in comparison to other folks I ave read stuff from. Thank you for posting when you ave got the opportunity, Guess I all just bookmark this web site.
Very good post! We are linking to this great post on our website. Keep up the good writing.
Thank you for your blog article.Really thank you!
you have a you have a very great weblog here! if you ad like to make some invite posts in this little weblog?
Very interesting details you have mentioned , appreciate it for putting up. Death is Nature as expert advice to get plenty of Life. by Johann Wolfgang von Goethe.
I really liked your article post.Thanks Again. Really Great.
Wow! Thank you! I permanently wanted to write on my site something like that. Can I include a portion of your post to my blog?
This is a really good tip especially to those new to the blogosphere. Brief but very precise info Thanks for sharing this one. A must read article!
You have mentioned very interesting details ! ps nice web site. I didn at attend the funeral, but I sent a nice letter saying that I approved of it. by Mark Twain.
It as hard to come by knowledgeable people about this subject, however, you sound like you know what you are talking about! Thanks
I truly appreciate this article post.Really thank you! Awesome.
Say, you got a nice article post.Much thanks again. Fantastic.
Wow! This can be one particular of the most beneficial blogs We have ever arrive across on this subject. Actually Great. I am also a specialist in this topic so I can understand your hard work.
Lovely blog! I am loving it!! Will come back again. I am bookmarking your feeds also
Well I truly liked studying it. This article provided by you is very effective for proper planning.
Thanks again for the article.Really thank you! Awesome.
Your style is really unique compared to other people I ave read stuff from. Many thanks for posting when you have the opportunity, Guess I will just book mark this blog.
Some truly select blog posts on this internet site , bookmarked.
The Birch of the Shadow I believe there may become a couple of duplicates, but an exceedingly handy listing! I have tweeted this. A lot of thanks for sharing!
pretty practical stuff, overall I imagine this is worthy of a bookmark, thanks
I truly appreciate this article.Really thank you! Fantastic.
pretty beneficial material, overall I feel this is well worth a bookmark, thanks
Wow, what a video it is! Actually fastidious quality video, the lesson given in this video is truly informative.
There is evidently a bunch to know about this. I assume you made some good points in features also.
wow, awesome article post.Much thanks again. Keep writing.
My brother suggested I might like this blog. He was totally right. This post truly made my day. You can not imagine just how much time I had spent for this information! Thanks!
look forward to seeking more of your great post. Also, I ave shared your site in my social networks!
LlQFUi Looking forward to reading more. Great blog article. Will read on…
Whoa! This blog looks exactly like my old one! It as on a totally different topic but it has pretty much the same layout and design. Great choice of colors!
Informative article, totally what I was looking for.
papers but now as I am a user of net so from now I am
Merely wanna state that this is very helpful , Thanks for taking your time to write this.
There as certainly a lot to know about this topic. I really like all the points you ave made.
The Silent Shard This tends to probably be really valuable for many within your work opportunities I intend to don at only with my blog but
There as certainly a great deal to know about this issue. I like all of the points you have made.
Im grateful for the blog.Really thank you! Much obliged.
There is obviously a bunch to identify about this. I consider you made certain good points in features also.
Merely wanna remark that you have a very nice web site , I like the pattern it actually stands out.
Your style is very unique in comparison to other people I ave read stuff from. I appreciate you for posting when you ave got the opportunity, Guess I all just bookmark this page.
Please forgive my English.I ave recently started a blog, the information you provide on this website has helped me tremendously. Thanks for all of your time & work.
I went over this internet site and I conceive you have a lot of excellent information, saved to my bookmarks (:.
woh I enjoy your articles , saved to bookmarks !.
Really enjoyed this article post.Really thank you! Really Great.
Very neat blog article.Much thanks again.
There is noticeably a lot to realize about this. I feel you made certain good points in features also.
Thanks-a-mundo for the post.Thanks Again. Great.
Utterly composed written content, regards for entropy. Life is God as novel. Let him write it. by Isaac Bashevis Singer.
Im obliged for the blog post.Much thanks again. Keep writing.
Some really choice blog posts on this web site , saved to fav.
Really informative post.Really thank you! Want more.
Piece of writing writing is also a fun, if you know then you can write otherwise it is difficult to write.
pay a quick visit this weblog on regular basis to obtain updated from newest news.
that is the end of this write-up. Here you will find some web pages that we think you will appreciate, just click the links over
You are not probably to achieve virtually just about everywhere if you definitely really don at brush for that
Thanks for the article.Much thanks again. Great.
You made some decent points there. I looked on the internet for the subject matter and found most guys will agree with your blog.
Im obliged for the blog article.Really looking forward to read more. Awesome.
womens ray ban sunglasses ??????30????????????????5??????????????? | ????????
Im thankful for the blog article. Really Cool.
Really enjoyed this blog article.Much thanks again.
I went over this site and I conceive you have a lot of superb info , bookmarked (:.
This is all very new to me and this article really opened my eyes.Thanks for sharing with us your wisdom.
Im thankful for the article post.Really looking forward to read more. Awesome.
Thanks for sharing, this is a fantastic post.Really looking forward to read more. Cool.
Some genuinely prize posts on this internet site , saved to bookmarks.
It’аs in point of fact a great and helpful piece of information. I’аm glad that you simply shared this helpful information with us. Please keep us up to date like this. Thanks for sharing.
I truly appreciate this post. I?ve been looking all over for this! Thank goodness I found it on Bing. You ave made my day! Thx again
MAC MAKEUP WHOLESALE ??????30????????????????5??????????????? | ????????
Very good post.Really looking forward to read more. Keep writing.
It as difficult to find knowledgeable people for this subject, however, you seem like you know what you are talking about! Thanks
I?аАТаЂаll right away take hold of your rss as I can at find your e-mail subscription link or e-newsletter service. Do you ave any? Please allow me recognize so that I could subscribe. Thanks.
Some really fantastic info , Gladiolus I detected this.
Wow, superb blog layout! How long have you been blogging for? you make blogging look easy. The overall look of your site is excellent, let alone the content!
Muchos Gracias for your blog. Much obliged.
Thank you ever so for you blog.Much thanks again. Fantastic. click here
Thanks for sharing this first-class piece. Very inspiring! (as always, btw)
Wow! This could be one particular of the most helpful blogs We have ever arrive across on this subject. Basically Magnificent. I am also a specialist in this topic so I can understand your effort.
Johnny Depp is my idol. such an amazing guy *
It as exhausting to search out educated people on this matter, but you sound like you know what you are speaking about! Thanks
Wow, great article post.Really looking forward to read more. Really Great.
It as difficult to find knowledgeable people in this particular topic, however, you sound like you know what you are talking about! Thanks
Thanks for sharing, this is a fantastic article.Thanks Again. Much obliged.
upon your web site and in accession capital to claim that I
It’аs actually a great and helpful piece of information. I am happy that you shared this useful info with us. Please stay us up to date like this. Thanks for sharing.
Muchos Gracias for your article. Fantastic.
if so then you will without doubt get good know-how. Here is my web blog; Led Lights
There is noticeably a bundle to know about this. I assume you made certain nice points in attributes also
Thanks again for the article post.Really thank you! Great.
Major thanks for the blog.Really thank you! Great.
It is really a nice and useful piece of information. I am glad that you shared this helpful information with us. Please keep us up to date like this. Thanks for sharing.
Usually I do not read post on blogs, however I would like to say that this write-up very forced me to try and do it! Your writing taste has been amazed me. Thank you, quite nice article.
Very neat article post.Really thank you! Want more.
Some really prize content on this website , saved to fav.
Perfect piece of work you have done, this internet site is really cool with wonderful info.
Major thanks for the blog article.Thanks Again. Keep writing.
I really liked your blog article.Thanks Again. Will read on
Looking forward to reading more. Great article post.Really looking forward to read more. Really Cool.
There most be a solution for this problem, some people think there will be now solutions, but i think there wil be one.
Whoa! This blog looks just like my old one! It as on a totally different topic but it has pretty much the same page layout and design. Great choice of colors!
It is really a great and helpful piece of information. I am glad that you shared this helpful information with us. Please keep us informed like this. Thanks for sharing.
Im obliged for the article.Much thanks again. Keep writing.
This blog is very good! How did you make it !?
Wonderful article! We will be linking to this particularly great post on our site. Keep up the good writing.
You ave made some good points there. I checked on the net to find out more about the issue and found most individuals will go along with your views on this web site.
This very blog is obviously educating and besides diverting. I have found a lot of handy stuff out of this amazing blog. I ad love to go back over and over again. Cheers!
Wow, great post.Really thank you! Great.
You can certainly see your skills in the work you write. The world hopes for more passionate writers such as you who aren at afraid to say how they believe. At all times follow your heart.
wonderful issues altogether, you simply received a new reader. What could you recommend in regards to your put up that you simply made a few days ago? Any certain?
Spot on with this write-up, I truly feel this web site needs a lot more attention. I all probably be back again to read through more, thanks for the advice!