Goal: To help our students to be useful employees of the financial institutions in the IT development, operations, security, or audit departments or those of the related enterprises, already at starting their career. The most important basics of information security and audit are extended with specialties of financial institutions.
Course description: In order to help our students to begin their work as a useful employee in a financial institution, or in a related enterprise, an overview is given on:
- the challenges yielded by the new customers’ and legislation requirements in Europe and in Hungary
- well-known attacks, advanced persistent threats
- requirements to be derived from some of the most important best practice EU and USA methodologies & standards – useful hints in the ISACA (Information Systems Audit and Control Association), NIST (National Institute of Standards and Technology), ISO (International Standards Organization), and other materials
- their basic notions – control objectives / measures, their qualifications and use
- the 3 pillars of operations
- the infrastructure of the information systems, and the security problems of some of the infrastructural elements
- secure application development
- business continuity planning and IT business continuity planning
- special problems, e.g. outsourcing
- some of the problems of determining an appropriate structure for the computer network of the institutions