Connect with us

Finance

CYBER IN THE FINANCE INDUSTRY: HOW CAN IT DO BETTER?

Published

on

Jonathan Clarke, Content Marketing Manager at BeyondTrust

 

Given how lucrative and vital finance companies are to the UK economy, it’s no surprise that cyber criminals are trying their luck at infiltrating these organisations, stealing sensitive information, and causing havoc. In fact, the Financial Conduct Authority has revealed that the number of declared cyber-incidents in the UK finance sector has risen by more than 1000% since last year.

The evidence is rife too – earlier this year, Metro Bank became another victim that was added to the list of cyber-attacks, after hackers were able to intercept a telecommunications vulnerability, affecting on a few customers however. Not as lucky was Tesco Bank, which was subjected to a £16.4 million fine when a staggering £2.26 million was stolen from customers’ personal current accounts.

Despite such high-profile attacks being reported within the financial sector, businesses are still failing to implement robust cybersecurity policies. And, amid today’s advanced threat landscape, it is usually a case of ‘when’ and not ‘if’ a firm is breached. Many financial firms are still just trying to get the basics right, have old IT systems in place and do not carry out regular cyber-assessments.

 

Jonathan Clarke

What’s the problem?

It’s evident the industry needs to boost and improve its defence against malicious attackers, but first, it’s important to pinpoint where the issues are coming from. From the BeyondTrust 2019 Privileged Access Threat Report, 58% of organisations believe it is likely they have suffered a breach due to vendor access, and 64% say employees were a cause of the breaches – of which financial organisations are included. Indeed, most organisations in and out of the financial industry are having a difficult time managing privileged insiders and third-party vendors, in fact, almost half still use manual processes to control privileged identities, which simply isn’t scalable.

 

What’s the solution?

In light of these findings, employee error needs to be minimised, and should it happen, the ramifications need to be promptly dealt with effectively.

The weakest link in an organisation, often starts with employees. Usually ranging from their poor password hygiene, to being targeted by phishing emails.  And, unfortunately, by giving employees administrator rights, this puts systems and data in the firing line for hackers. So, it’s paramount to tackle this issue at its root.

Indeed, productivity issues arise when limiting user rights – IT help desks can often be inundated with requests to grant access to basic systems or files. As such, the balance between security and productivity, specifically within a fast-paced, high growth environment like the finance sector, always seems to be a trade-off.

So, how can this be remedied? By removing unnecessary admin rights and giving users just enough access to do their jobs productively, organisations can significantly reduce the attack surface. To achieve this, Privileged Access Management (PAM) can be implemented. Three features of an effective PAM solution include:

  1. Lock down and control credentials: Find, manage, and monitor privileged accounts/assets, and automate privileged password and session management.
  2. Remove excessive end-user privileges: Control and monitor privileged activity on Windows, Mac, Unix, Linux, and network devices, remove excessive privileges without impacting productivity, and enforce granular application control.
  3. Protect internal and vendor remote access: Secure, manage, and audit remote access from third-party vendors and internal employees with privileges, such as the service desk.

When organisations have fully integrated PAM tools, they are more confident to identify threats from employees with privileged access. With control and visibility over their entire environment, organisations can significantly reduce the likelihood that they become a victim of a breach, while allowing their employees to remain fulfilled and productive at work.

 

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Finance

Is your business ready for finance automation?

Published

on

By

Mari-Frances Bentvelzen, Business Head and General Manager of Global SMB at SAP Concur

 

As managers continue to drive their businesses through these uncertain economic times, it is important for them to properly equip and guide their organisations. Small to medium-sized businesses (SMBs) are looking to save money during this inflation crisis. By looking carefully into different areas, there are many hidden costs that can be found to combat rising expenses and interest rates.

With 2023 approaching, it’s time for businesses to be more proactive towards improving their processes. Automating administratively heavy tasks can be hugely beneficial in saving time and resources, both of which can have a big impact on the bottom line.

Although travel logistics, expense tracking and invoice processing can sound like a lot of background noise, these processes can all be optimised through automation. This offers more visibility for finance leaders and helps free up valuable time and resources for employees within the organisation.

Identify which key areas need automation

The first step to adopting automation is highlighting which areas can be improved with specific technology. This includes auditing the business and identifying which areas are outdated. From this point, businesses need to determine which processes and procedures may benefit from digital transformation. High on the list are manual processes and data input — two areas that often are riddled with mistakes and delays. Automating these areas proves to be useful for both the organisation and its employees.

Another common issue that finance leaders face is lack of access into full spend visibility. To improve decision making, managers must be confident about the trusted insights, transparency and perspectives in their business. Reporting tools and automated processes can help verify expenses through integration with other vendors and systems.

Without automation, it is difficult for finance departments to ensure all data has been inputted and centralised. This can make it difficult to determine the most appropriate and potentially effective areas to target cost-saving measures. Spend management solutions can, however, provide finance leaders with full visibility into where their money is being spend, enabling any spend that does not correlate with policy to be flagged. This can help businesses to reduce non-compliant spend and increase policy and regulatory compliance.

Find the best solution for both business and employees

Once these areas are identified, the business must adjust for compliance requirements, infrastructure changes and spend changes. Finance leaders should select the best solution to streamline current processes, whilst also improving budgetary controls and employee safety and satisfaction.

It is important for companies to place employee experience and innovation at the forefront of decision making, with training and ongoing employee support. Expenses — the reimbursement process, specifically — often have an under-appreciated role in employee engagement.

In fact, the new SAP Concur Employee Experience study reveals that 70% of employees in the UK are concerned about the impact of cost-of-living increases on their personal finances. And it’s late reimbursements for expenses that are causing employees to worry, with 56% worried about delayed reimbursements impacting their personal finances. This is why it is crucial for organisations to adopt automation to help accelerate processes and relieve reimbursement worry.

We worked with Brother UK (Printing and technology solutions) to automate their processes within their internal finance department. Brother has many employees who have worked for the company for more than two decades, with many processes identical to the day they started. Unsurprisingly, these employees were reluctant to making big changes, as they were used to carrying out their work in very specific ways. And with the obvious talent crisis, Brother realised that it was more important than ever to focus on the employee experience.

Brother put their employees first, ensuring communication remained transparent during the entire project. The company also brought staff directly into the decision-making process, elevating buy-in and a sense of ownership over forthcoming changes.

Now that Bother has automated many financial tasks, employees within the finance department are able to spend more time on strategic and rewarding work, rather than menial and time-consuming tasks. This improvement has been a positive experience for all. It has also helped employees to progress further in their careers.

Plan for the unpredictable future

Do you work for an SMB considering such changes? Don’t hesitate — now is the time to take the proactive step to streamline and grow your business. Overall, SMBs are being faced with the unknown and are being forced to adapt or pivot their business models. Finance automation will help futureproof your business during these uncertain times, bringing a level of stability to your organisation. This will allow employees to focus on future growth ambitions and make more informed decisions without having to worry about laborious tasks.

It’s important to remember a key part of running any business is relationship management — both with customers and employees. It’s important to choose solutions that will help drive profit margins whilst also acknowledging employee needs. For small businesses, maintaining clear communication with employees will not only help to ensure solution implementation is successful, but will also help to soften any resistance to automation.

And there’s so much more beyond basic finance automation. By taking an even deeper dive into invoices and expenses, businesses can find key data to help underpin certain goals such as reducing carbon emissions for business travel or enabling employees to submit expenses from anywhere at any time.

In the long run, digitising tired manual processes makes it more affordable for all businesses, no matter the size, to offer a competitive advantage during this era of change.

Continue Reading

Finance

Cost of living: How to identify vulnerable customers

Published

on

By

Ellie Engley is account director at REaD Group

 

In the current climate, the cost of living crisis is a real challenge for financial services companies who need to be able to support their vulnerable customers. One in six (17%) of UK households (4.4 million) are now in ‘serious financial difficulties’, compared to one in ten (2.8 million) in October 2021 – an additional 1.6 million households – according to research from Bristol University, while it was recently reported that one in five adults across the UK – nearly 11 million people – have fallen behind with at least one household bill payment.

As a financial services provider, it has never been more important to be able to identify and communicate appropriately with vulnerable customers; those who, due to their personal circumstances, are especially susceptible to detriment. Not only that, but there are three different levels of poverty to be aware of: ranging from income below minimum income standard, not enough income and destitution.

As a financial service provider, then, it has never been more important to communicate sensitively to customers, price products appropriately and protect customers from fraud.

Identifying vulnerable customers

As a responsible brand, the first step is to proactively identify vulnerable customers to exclude from particular direct marketing campaigns, where additional credit or non-essential purchases could increase the pressure on their personal circumstances. This is an ethical approach to direct marketing which also sees companies increase ROI and improve campaign success.

Using both internal first party and third party data, it is possible to build up a detailed picture of customers in order to identify the existing vulnerable groups, as well as the emerging vulnerable groups within your customer base.

This data can identify vulnerable and potentially vulnerable segments of consumers, including self-declared vulnerability or that shared by a first party, such as a bank, on behalf of the consumer, along with high-cost short term credit applications; houses of multiple occupation (HMO data); and consumer vulnerability metrics. This latter employs a segmentation model which takes into account census data to provide information on demographics, such as age, income, housing, education, financial products, affluence measures; transient states such as health; market forces acting on the consumer and their susceptibility to those forces; and the individual’s market preferences.

Taken together this data will provide a rich and detailed understanding or levels and types of vulnerability so brands are able to work with their customers responsibly. Gaining a better understanding of differing vulnerable segments in a customer base helps drive effective communication strategies, while simultaneously ensuring fair treatment.

Other warning signs

Changes in transactions and behaviour are another way to identify vulnerability in customers. It may be necessary to identify different segments or groups of customers who are classed as vulnerable for different reasons. Those consumers who were once deemed ‘financially stable’ now feel financially stretched and are at greater risk of financial vulnerability through increased cost of living and rise in inflation.

The use of third party datasets can also support the identification of these groups which provide information on changes in personal circumstances, short-term finance requirements, loss of income or employment and changes to relationship or residential status.

Using external data variables helps companies make data-driven decisions on how to price products, reduce fraud, identify vulnerable customers and ultimately make more personalised decisions using data. Data can be used across different teams, including marketing, fraud and pricing, for multiple purposes and projects.

Being able to supplement the data they hold on a customer can help marketing teams to not only help identify risk but help define what their need state actually is, whether that’s saving, moving house or having children. Enhancing customer data helps companies make better informed decisions.

Keep it clean

On top of this, every financial services provider should be keeping their consumer data clean and accurate. Data that is up to date will help businesses make more informed and responsible decisions about how they communicate with customers and prospects.

Above all, financial service providers should be mindful of the many more people who are now vulnerable, and communicating with care should be a brand’s mantra for the foreseeable future.

 

Ellie Engley is account director at REaD Group, a Sagacity company, which uses its data products, insight and expertise to help its clients get closer to their customers.

Continue Reading

Magazine

Trending

Business6 hours ago

Hidden channel costs: how to find and tackle them

By Mark Wass, Strategic Sales Director, UK and North EMEA at CloudBlue     Growth for businesses will always be a...

Finance12 hours ago

Is your business ready for finance automation?

Mari-Frances Bentvelzen, Business Head and General Manager of Global SMB at SAP Concur   As managers continue to drive their...

Top 1012 hours ago

The power of a proactive customer service

By Delia Pedersoli, COO, MultiPay   2023 is shaping up to be another challenging period for B2C businesses. While the...

Business12 hours ago

Automation nation: Liberating workers from desks, data entry and the doldrums

Gert-Jan Wijman, VP of EMEA at Celigo.   Just when businesses thought the tough times were over, even more challenges...

News12 hours ago

Protean and Fino Payments Bank tie-up to expand PAN card issuance services in India

Fino Payments Bank has tied up with Protean eGov Technologies (formerly NSDL e-Governance Infrastructure Limited), a market leader in universal,...

Business20 hours ago

What is the True Cost of SMS Phishing?

Gemma Staite, Threat Analytics Lead   Cybercriminals will recycle attack strategies for as long as they are effective. In Fraud...

Technology1 day ago

Digital Asset Management (DAM) To Transform Enterprise Brand Management

Alexander Rich, Co-founder and CEO – Desygner    Rapid digital transformation fuelled by the pandemic has undoubtedly proven beneficial to...

Finance1 day ago

Cost of living: How to identify vulnerable customers

Ellie Engley is account director at REaD Group   In the current climate, the cost of living crisis is a...

Banking1 day ago

Is traditional business banking the best option for SME finance squeezes?

Airto Vienola, CEO, AREX Markets  The pressures facing business and personal finances alike have been well documented. Stories are now starting...

Business1 day ago

Breaking down communications silos to streamline the customer experience

Dave Tidwell, Head of Technical Pre-sales, DigitalWell   The pandemic has, without doubt, moved the goalposts when it comes to...

Business1 day ago

How growth can be a big challenge when a business becomes multiple entities

By Paul Sparkes, Commercial Director of award-winning accounting software developer, iplicit. Organisations don’t just grow in size – they also...

Wealth Management1 day ago

Keeping Cyber Insurance Premiums Down with Deep Observability

By Mark Coates, VP EMEA, Gigamon There is no doubt that the cyber insurance industry has experienced something of an...

Business1 day ago

When it comes to innovation, ignore your CEO and listen to your customer

 By Alex Hammond, Partner, Airwalk   At its core, the 2008 financial crisis was a result of banks incorrectly managing...

Business1 day ago

Netflix-style ransomware makes your organisation’s data the prize in a dark subscription economy

By John Davis, UK & Ireland Director, SANS Institute. Today’s subscription economy makes accessing nearly any service as easy as hitting enter....

Banking1 day ago

BANKING FOR BETTER 

By Alex Kwiatkowski, Director of Global Financial Services, SAS. From shifting market dynamics and mounting geopolitical tensions, to skyrocketing cyber threats...

Banking1 day ago

Why traditional banks need to embrace the agility of fintech competitors

Paul Higgins, EMEA Banking Lead, Mendix   Tech has long played a role in the finance space. The legacy applications running...

Technology1 day ago

SaaS Procurement’s Silver Bullet – How Automation is Changing the Game

Sven Lackinger, Co-Founder, Sastrify   Sven Lackinger is Co-Founder at Sastrify, the digital procurement platform for Software-as-a-Service products. Founded in...

News1 day ago

Tata Motors partners with IndusInd Bank to offer exclusive Electric Vehicle Dealer Financing

Key Highlights:   One-of-its kind Electric Vehicle Inventory Financing program for Tata Motors’ dealers  Limits extended towards EVs will be over...

Finance1 day ago

astrantiaPay Selects SaaScada to Enrich Swiss Landscape of Business Payments and Fill Market Gap

Swiss financial firm, astrantiaPay, to use SaaScada’s cloud-native core banking engine to simplify cross-border payments for SMEs and facilitate international...

Business2 days ago

How Big Data is Transforming Bilateral Trading

By Stuart Smith, Co-Head Business Development – Data & Risk at Acadia   Since its inception, Big Data has been...

Trending