Feeds

Bank of England plans to shove cyber-microscope up nation's bankers

BoE and pals will use govt intelligence to stage pen-tests at financial powerhouses

Reducing security risks from open source software

The Bank of England today announced it plans to penetrate Blighty’s banks to test the security of their critical computer systems.

Speaking to the British Bankers’ Association, the BoE's exec director of resolution, Andrew Gracie launched CBEST [PDF], a new defence-testing programme that mimics crims who attack crucial networks.

CBEST will use info gathered by the government and security firms get an idea of what makes a modern cyber-robber, and replicate the techniques they use to try to break into British banks. Financial firms will be tested under the framework to figure out where they’re vulnerable, and will then get access to analysts and experts to help them tighten up their security.

“The idea of CBEST is to bring together the best available threat intelligence from government and elsewhere, tailored to the business model and operations of individual firms, to be delivered in live tests, within a controlled testing environment,” Gracie said.

“The results should provide a direct readout on a firm’s capability to withstand cyber-attacks that on the basis of current intelligence have the most potential, combining probability and impact, to have an adverse impact on financial stability.”

The idea is that attacks orchestrated by BoE will be more realistic than the ones the lenders organise to test themselves, because they’ll be planned using more up-to-date information.

The framework was established with the help of UK startup Digital Shadows, security kit vendors and CREST (not to be confused with CBEST) in response to recommendations from BoE's Financial Policy Committee – which said regulators needed to look at computer security risks in more detail and improve resilience to attacks. ®

Mobile application security vulnerability report

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
iPad? More like iFAD: We reveal why Apple fell into IBM's arms
But never fear fanbois, you're still lapping up iPhones, Macs
Nadella: Apps must run on ALL WINDOWS – PCs, slabs and mobes
Phone egg, meet desktop chicken - your mother
White? Male? You work in tech? Let us guess ... Twitter? We KNEW it!
Grim diversity numbers dumped alongside Facebook earnings
Microsoft: We're making ONE TRUE WINDOWS to rule us all
Enterprise, Windows still power firm's shaky money-maker
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.