Information Security and Audit of Financial Institutions

Goal of Education: To help our students to be useful employees of the financial institutions or that of other enterprises either in the IT division – development, operations, or in the security, or audit departments, already at starting their career. The most important basics of information security and audit are extended with specialties of financial institutions.

Subjects: In order to help our students to begin their work as a useful employee in a financial institution, or in a related enterprise, an overview is given on:

  • the challenges yielded by the new customers’ and legislation requirements in Europe and in Hungary
  • well-known attacks, advanced persistent threats
  • requirements to be derived from some of the most important best practice EU and USA methodologies & standards  – useful hints in the ISACA (Information Systems Audit and Control Association), NIST (National Institute of Standards and Technology), ISO (International Standards Organization), and other  materials
  • their basic notions – control objectives / measures, their qualifications and use
  • the 3 pillars of  operations
  • the infrastructure of the information systems, and the security problems of some of the infrastructural elements
  • secure application development
  • business continuity planning and IT business continuity planning
  • special problems, e.g. outsourcing
  • some of the problems of determining an appropriate structure for the computer network of the institutions

 

Information Security and Audit of Financial Institutions