Risk management in electronic banking: concepts and best practices
Saved in:
| Main Author: | |
|---|---|
| Format: | Book |
| Language: | English |
| Published: |
Singapore [u.a.]
Wiley
2007
|
| Subjects: | |
| Online Access: | Inhaltsverzeichnis |
| Physical Description: | XXI, 259 S. graph. Darst. |
| ISBN: | 9780470822432 |
Staff View
MARC
| LEADER | 00000nam a2200000 c 4500 | ||
|---|---|---|---|
| 001 | BV023030102 | ||
| 003 | DE-604 | ||
| 005 | 20080924 | ||
| 007 | t | ||
| 008 | 071130s2007 d||| |||| 00||| eng d | ||
| 020 | |a 9780470822432 |9 978-0-470-82243-2 | ||
| 035 | |a (OCoLC)254297656 | ||
| 035 | |a (DE-599)BVBBV023030102 | ||
| 040 | |a DE-604 |b ger |e rakwb | ||
| 041 | 0 | |a eng | |
| 049 | |a DE-92 |a DE-473 |a DE-355 | ||
| 050 | 0 | |a HG1709 | |
| 082 | 0 | |a 332.10285 | |
| 084 | |a QK 300 |0 (DE-625)141640: |2 rvk | ||
| 084 | |a QK 305 |0 (DE-625)141642: |2 rvk | ||
| 084 | |a QK 350 |0 (DE-625)141648: |2 rvk | ||
| 100 | 1 | |a Kondabagil, Jayaram |e Verfasser |4 aut | |
| 245 | 1 | 0 | |a Risk management in electronic banking |b concepts and best practices |c Jayaram Kondabagil |
| 264 | 1 | |a Singapore [u.a.] |b Wiley |c 2007 | |
| 300 | |a XXI, 259 S. |b graph. Darst. | ||
| 336 | |b txt |2 rdacontent | ||
| 337 | |b n |2 rdamedia | ||
| 338 | |b nc |2 rdacarrier | ||
| 650 | 4 | |a Electronic Banking / Risikomanagement / Datensicherheit / Outsourcing | |
| 650 | 4 | |a Bank | |
| 650 | 4 | |a Datenverarbeitung | |
| 650 | 4 | |a Bank management | |
| 650 | 4 | |a Banks and banking |x Automation | |
| 650 | 4 | |a Banks and banking |x Data processing | |
| 650 | 0 | 7 | |a Risikomanagement |0 (DE-588)4121590-4 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Bankbetriebslehre |0 (DE-588)4129045-8 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Electronic Banking |0 (DE-588)4202584-9 |2 gnd |9 rswk-swf |
| 689 | 0 | 0 | |a Bankbetriebslehre |0 (DE-588)4129045-8 |D s |
| 689 | 0 | 1 | |a Electronic Banking |0 (DE-588)4202584-9 |D s |
| 689 | 0 | 2 | |a Risikomanagement |0 (DE-588)4121590-4 |D s |
| 689 | 0 | |5 DE-604 | |
| 856 | 4 | 2 | |m Digitalisierung UB Regensburg |q application/pdf |u http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=016234008&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |3 Inhaltsverzeichnis |
| 999 | |a oai:aleph.bib-bvb.de:BVB01-016234008 | ||
Record in the Search Index
| _version_ | 1804137254177734656 |
|---|---|
| adam_text | Gontents
List of Figures
xiii
List of Tables
xv
Preface
xvii
Acknowledgments
xxiii
Foreword
xxv
PART I: INTRODUCTION TO E-BANKING
Chapter I
Е
-Banking Basics
3
Evolution
oř
e-bartking
3
Impact on traditional banking
4
E-banking components
7
Regulatory
approva!
H
Chapter
2
E-Bartking Risks
1С)
Strategic risk
11
Operational risk
12
Compì
íance
risk
13
Reputatìonal
risk
ІЗ
Other risks
14
Risk management challenges
15
The five-pillar approach
17
Chapter
3
Product and Service-specific Risks
19
Internet banking
19
Aggregation services
21
Bill presentment and payment
23
Mobile banking
24
Weblinking
25
Electronic money
27
Cross-border transactions
27
New products and services
29
PART II: RISK MANAGEMENT
Chapter
4
Risk Management Framework
33
Policies and procedures
34
Risk management process
35
Operational risk management
39
Governance and internal controls
40
Chapter
5
Risk Management Organization
43
Organization structure
43
Board and senior management
44
Executive risk committee
49
IT management
51
Internal and external audit
53
Chapter
6
International Standards
56
Basel Committee on banking supervision
56
COBIT
4.0 57
ISO
17799 58
OCTAVE
59
COSO
-
enterprise risk management
60
PCI data security standard
61
Financial Action Task Force
62
Corporate governance codes
63
Regulatory guidelines
64
Part III: INFORMATION SECURITY
Chapter
7
Information Security Management
69
Security objectives
70
Security controls
73
Security risk assessment
76
Classification of controls
78
Monitoring and testing
79
Incident response plan
80
Chapter
8
Operational Controls
82
Personnel issues
82
Segregation of duties
84
Technical issues
86
Database management
88
Change management
89
Backups and off-site storage
90
Insurance
92
Fraud management
93
Chapter
9
Technical Controls
97
Logical access controls
98
Identification and authentication
99
Authentication methods
101
Audit trails
104
Network security
105
Firewalls
108
Malicious code
110
Information security incidents 111
PART IV: OUTSOURCING
Chapter
10
Outsourcing in E-Banking
117
Types of outsourcing
118
Material outsourcing
119
Supervisory approach
120
Key risks of outsourcing
121
Board and senior management responsibility
123
Outsourcing policy
124
Chapter
11
Managing Outsourced Services
126
Outsourcing decisions
126
Risk assessment and control
127
Service provider due diligence
130
Offshoring
131
Contingency plans
132
Customer service
132
Monitoring and audit
134
Chapter
12
Outsourcing Contracts
137
Contractual provisions
138
Right of access clauses
140
Termination clause
141
Offshoring contracts
141
Confidentiality and security clauses
142
Business continuity clauses
144
PART V: BUSINESS CONTINUITY
Chapter
13
Business Continuity Management
147
The main drivers
147
Board and senior management responsibility
149
Components of BCM
151
Business impact analysis
152
BIA
methodologies
153
Recovery strategy
156
Chapter
14
Business Continuity Plan
158
Major components of BCP
158
Continuity management team
160
Recovery procedures
162
Resource requirements
163
External communications
165
Plan maintenance
167
Awareness and training
169
Testing of BCP
171
Testing methods
172
Chapter
15
Data Centers and Alternate Sites
175
Evolution of data centers
175
Location of the sites
176
Mitigating concentration risk
177
Data center design
178
Logistics management
180
Maintenance procedures
182
Alternate site models
183
External support
185
Business continuity in real life
186
PART VI: LEGAL AND REGULATORY COMPLIANCE
Chapter
16
Compliance Function
193
Organization of the compliance function
194
Board and senior management responsibility
195
Role of regulators
196
Chapter
17
Major Compliance Issues
198
Anti-money laundering
198
Know your customer (KYC)
199
Suspicious activities
201
Privacy of customer information
202
Information disclosures
204
Customer education
206
High-level review checklist
209
Acronyms
225
Glossary
227
References
245
Index
251
|
| adam_txt |
Gontents
List of Figures
xiii
List of Tables
xv
Preface
xvii
Acknowledgments
xxiii
Foreword
xxv
PART I: INTRODUCTION TO E-BANKING
Chapter I
Е
-Banking Basics
3
Evolution
oř
e-bartking
3
Impact on traditional banking
4
E-banking components
7
Regulatory
approva!
H
Chapter
2
E-Bartking Risks
1С)
Strategic risk
11
Operational risk
12
Compì
íance
risk
13
Reputatìonal
risk
ІЗ
Other risks
14
Risk management challenges
15
The five-pillar approach
17
Chapter
3
Product and Service-specific Risks
19
Internet banking
19
Aggregation services
21
Bill presentment and payment
23
Mobile banking
24
Weblinking
25
Electronic money
27
Cross-border transactions
27
New products and services
29
PART II: RISK MANAGEMENT
Chapter
4
Risk Management Framework
33
Policies and procedures
34
Risk management process
35
Operational risk management
39
Governance and internal controls
40
Chapter
5
Risk Management Organization
43
Organization structure
43
Board and senior management
44
Executive risk committee
49
IT management
51
Internal and external audit
53
Chapter
6
International Standards
56
Basel Committee on banking supervision
56
COBIT
4.0 57
ISO
17799 58
OCTAVE
59
COSO
-
enterprise risk management
60
PCI data security standard
61
Financial Action Task Force
62
Corporate governance codes
63
Regulatory guidelines
64
Part III: INFORMATION SECURITY
Chapter
7
Information Security Management
69
Security objectives
70
Security controls
73
Security risk assessment
76
Classification of controls
78
Monitoring and testing
79
Incident response plan
80
Chapter
8
Operational Controls
82
Personnel issues
82
Segregation of duties
84
Technical issues
86
Database management
88
Change management
89
Backups and off-site storage
90
Insurance
92
Fraud management
93
Chapter
9
Technical Controls
97
Logical access controls
98
Identification and authentication
99
Authentication methods
101
Audit trails
104
Network security
105
Firewalls
108
Malicious code
110
Information security incidents 111
PART IV: OUTSOURCING
Chapter
10
Outsourcing in E-Banking
117
Types of outsourcing
118
Material outsourcing
119
Supervisory approach
120
Key risks of outsourcing
121
Board and senior management responsibility
123
Outsourcing policy
124
Chapter
11
Managing Outsourced Services
126
Outsourcing decisions
126
Risk assessment and control
127
Service provider due diligence
130
Offshoring
131
Contingency plans
132
Customer service
132
Monitoring and audit
134
Chapter
12
Outsourcing Contracts
137
Contractual provisions
138
Right of access clauses
140
Termination clause
141
Offshoring contracts
141
Confidentiality and security clauses
142
Business continuity clauses
144
PART V: BUSINESS CONTINUITY
Chapter
13
Business Continuity Management
147
The main drivers
147
Board and senior management responsibility
149
Components of BCM
151
Business impact analysis
152
BIA
methodologies
153
Recovery strategy
156
Chapter
14
Business Continuity Plan
158
Major components of BCP
158
Continuity management team
160
Recovery procedures
162
Resource requirements
163
External communications
165
Plan maintenance
167
Awareness and training
169
Testing of BCP
171
Testing methods
172
Chapter
15
Data Centers and Alternate Sites
175
Evolution of data centers
175
Location of the sites
176
Mitigating concentration risk
177
Data center design
178
Logistics management
180
Maintenance procedures
182
Alternate site models
183
External support
185
Business continuity in real life
186
PART VI: LEGAL AND REGULATORY COMPLIANCE
Chapter
16
Compliance Function
193
Organization of the compliance function
194
Board and senior management responsibility
195
Role of regulators
196
Chapter
17
Major Compliance Issues
198
Anti-money laundering
198
Know your customer (KYC)
199
Suspicious activities
201
Privacy of customer information
202
Information disclosures
204
Customer education
206
High-level review checklist
209
Acronyms
225
Glossary
227
References
245
Index
251 |
| any_adam_object | 1 |
| any_adam_object_boolean | 1 |
| author | Kondabagil, Jayaram |
| author_facet | Kondabagil, Jayaram |
| author_role | aut |
| author_sort | Kondabagil, Jayaram |
| author_variant | j k jk |
| building | Verbundindex |
| bvnumber | BV023030102 |
| callnumber-first | H - Social Science |
| callnumber-label | HG1709 |
| callnumber-raw | HG1709 |
| callnumber-search | HG1709 |
| callnumber-sort | HG 41709 |
| callnumber-subject | HG - Finance |
| classification_rvk | QK 300 QK 305 QK 350 |
| ctrlnum | (OCoLC)254297656 (DE-599)BVBBV023030102 |
| dewey-full | 332.10285 |
| dewey-hundreds | 300 - Social sciences |
| dewey-ones | 332 - Financial economics |
| dewey-raw | 332.10285 |
| dewey-search | 332.10285 |
| dewey-sort | 3332.10285 |
| dewey-tens | 330 - Economics |
| discipline | Wirtschaftswissenschaften |
| discipline_str_mv | Wirtschaftswissenschaften |
| format | Book |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>01872nam a2200481 c 4500</leader><controlfield tag="001">BV023030102</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">20080924 </controlfield><controlfield tag="007">t</controlfield><controlfield tag="008">071130s2007 d||| |||| 00||| eng d</controlfield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9780470822432</subfield><subfield code="9">978-0-470-82243-2</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)254297656</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)BVBBV023030102</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">rakwb</subfield></datafield><datafield tag="041" ind1="0" ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-92</subfield><subfield code="a">DE-473</subfield><subfield code="a">DE-355</subfield></datafield><datafield tag="050" ind1=" " ind2="0"><subfield code="a">HG1709</subfield></datafield><datafield tag="082" ind1="0" ind2=" "><subfield code="a">332.10285</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">QK 300</subfield><subfield code="0">(DE-625)141640:</subfield><subfield code="2">rvk</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">QK 305</subfield><subfield code="0">(DE-625)141642:</subfield><subfield code="2">rvk</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">QK 350</subfield><subfield code="0">(DE-625)141648:</subfield><subfield code="2">rvk</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Kondabagil, Jayaram</subfield><subfield code="e">Verfasser</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">Risk management in electronic banking</subfield><subfield code="b">concepts and best practices</subfield><subfield code="c">Jayaram Kondabagil</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Singapore [u.a.]</subfield><subfield code="b">Wiley</subfield><subfield code="c">2007</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">XXI, 259 S.</subfield><subfield code="b">graph. Darst.</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">n</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">nc</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Electronic Banking / Risikomanagement / Datensicherheit / Outsourcing</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Bank</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Datenverarbeitung</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Bank management</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Banks and banking</subfield><subfield code="x">Automation</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Banks and banking</subfield><subfield code="x">Data processing</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Risikomanagement</subfield><subfield code="0">(DE-588)4121590-4</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Bankbetriebslehre</subfield><subfield code="0">(DE-588)4129045-8</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Electronic Banking</subfield><subfield code="0">(DE-588)4202584-9</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="689" ind1="0" ind2="0"><subfield code="a">Bankbetriebslehre</subfield><subfield code="0">(DE-588)4129045-8</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="1"><subfield code="a">Electronic Banking</subfield><subfield code="0">(DE-588)4202584-9</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="2"><subfield code="a">Risikomanagement</subfield><subfield code="0">(DE-588)4121590-4</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2=" "><subfield code="5">DE-604</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">Digitalisierung UB Regensburg</subfield><subfield code="q">application/pdf</subfield><subfield code="u">http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=016234008&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA</subfield><subfield code="3">Inhaltsverzeichnis</subfield></datafield><datafield tag="999" ind1=" " ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-016234008</subfield></datafield></record></collection> |
| id | DE-604.BV023030102 |
| illustrated | Illustrated |
| index_date | 2024-07-02T19:16:38Z |
| indexdate | 2024-07-09T21:09:22Z |
| institution | BVB |
| isbn | 9780470822432 |
| language | English |
| oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-016234008 |
| oclc_num | 254297656 |
| open_access_boolean | |
| owner | DE-92 DE-473 DE-BY-UBG DE-355 DE-BY-UBR |
| owner_facet | DE-92 DE-473 DE-BY-UBG DE-355 DE-BY-UBR |
| physical | XXI, 259 S. graph. Darst. |
| publishDate | 2007 |
| publishDateSearch | 2007 |
| publishDateSort | 2007 |
| publisher | Wiley |
| record_format | marc |
| spelling | Kondabagil, Jayaram Verfasser aut Risk management in electronic banking concepts and best practices Jayaram Kondabagil Singapore [u.a.] Wiley 2007 XXI, 259 S. graph. Darst. txt rdacontent n rdamedia nc rdacarrier Electronic Banking / Risikomanagement / Datensicherheit / Outsourcing Bank Datenverarbeitung Bank management Banks and banking Automation Banks and banking Data processing Risikomanagement (DE-588)4121590-4 gnd rswk-swf Bankbetriebslehre (DE-588)4129045-8 gnd rswk-swf Electronic Banking (DE-588)4202584-9 gnd rswk-swf Bankbetriebslehre (DE-588)4129045-8 s Electronic Banking (DE-588)4202584-9 s Risikomanagement (DE-588)4121590-4 s DE-604 Digitalisierung UB Regensburg application/pdf http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=016234008&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA Inhaltsverzeichnis |
| spellingShingle | Kondabagil, Jayaram Risk management in electronic banking concepts and best practices Electronic Banking / Risikomanagement / Datensicherheit / Outsourcing Bank Datenverarbeitung Bank management Banks and banking Automation Banks and banking Data processing Risikomanagement (DE-588)4121590-4 gnd Bankbetriebslehre (DE-588)4129045-8 gnd Electronic Banking (DE-588)4202584-9 gnd |
| subject_GND | (DE-588)4121590-4 (DE-588)4129045-8 (DE-588)4202584-9 |
| title | Risk management in electronic banking concepts and best practices |
| title_auth | Risk management in electronic banking concepts and best practices |
| title_exact_search | Risk management in electronic banking concepts and best practices |
| title_exact_search_txtP | Risk management in electronic banking concepts and best practices |
| title_full | Risk management in electronic banking concepts and best practices Jayaram Kondabagil |
| title_fullStr | Risk management in electronic banking concepts and best practices Jayaram Kondabagil |
| title_full_unstemmed | Risk management in electronic banking concepts and best practices Jayaram Kondabagil |
| title_short | Risk management in electronic banking |
| title_sort | risk management in electronic banking concepts and best practices |
| title_sub | concepts and best practices |
| topic | Electronic Banking / Risikomanagement / Datensicherheit / Outsourcing Bank Datenverarbeitung Bank management Banks and banking Automation Banks and banking Data processing Risikomanagement (DE-588)4121590-4 gnd Bankbetriebslehre (DE-588)4129045-8 gnd Electronic Banking (DE-588)4202584-9 gnd |
| topic_facet | Electronic Banking / Risikomanagement / Datensicherheit / Outsourcing Bank Datenverarbeitung Bank management Banks and banking Automation Banks and banking Data processing Risikomanagement Bankbetriebslehre Electronic Banking |
| url | http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=016234008&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |
| work_keys_str_mv | AT kondabagiljayaram riskmanagementinelectronicbankingconceptsandbestpractices |