A trusted system is one that meets the expectation of risk. The system performs as expected, keeping risks within the accepted boundaries. This enables the system to meet the desired level of confidentiality, integrity, and availability of the organization. In online banking, a user must trust that his or her money will be kept safe and accessible, that automatic payments may be made, and that information should be kept private.
There are three levels of trust: component, information system, and enterprise. An overall security strategy determines the controls at each level, and ensures that the controls support each other for robust security. Each individual component, or device, must conform to the security policy of the organization. Minimal standards for the security policy of a component include disabling unused services, routine updates, data encryption, and strong passwords, as well as firewalls and anti-viruses as applicable. Managing trust starts with a documented and management-approved security program. A security program consists of policies, standards, and guidelines that clearly state management’s expectations (Olzak, 2011).
An end user of the organization’s online banking system should be able to access the account information 24/7. Data must be transferred over secure channels to prevent interception. Changes to account information, such as a deposit, withdrawal, or purchase, must update to the online account page as close to instantaneously as possible. Payments, transfers, and money-orders requested through the online interface must be made promptly and securely. The system should respond only to authorized end users and demand strong passwords.
Information must move across trust boundaries from the organization’s system to the end user’s system. As it is beyond the power of the organization to control the security of the end user’s system, it is vital to put as many safety precautions in place as possible. One option is to require additional security questions be answered if access is attempted from an unfamiliar IP address. The security must also flow both ways, with a method in place to assure the end user that they have indeed reached the bank’s secure website and not that of a phishing scam forger. One method used is to divide the authentication into two steps, then have the end user upload a picture or phrase which is then displayed once the user passes the first round of authentication, and then require a second round of authentication once the user is assured they have reached the correct location.
While the organization cannot control what the end user attempts to keep on their own system, the organization should ensure all data stored on its system is thoroughly encrypted. Information should be accessible only via connected to a server, never stored on a component that could conceivably be removed from the organization’s direct control. Physical access should be controlled both via authentication processes and physical security. End users should be secure in the knowledge that transactions are monitored and that red flags will be raised at unusual activity. Alerts will be investigated and audits be performed routinely on these procedures to insure every alert is responded to properly. The system itself should work to protect the end user from being a risk by requiring strong passwords and routine changes to passwords. The system should also protect the end user by limiting password resets and locking out the account after a certain number of unsuccessful authorization attempts. Should this occur the end user should be manually notified via phone or letter and verify identity and authorization before the hold on the account is released.
End users must be able to trust in the organization’s members, which requires proper separation of roles and inclusion in the security policy of processes for handling complaints and termination. Changes to account management should be restricted to a very small number of employees, and then only during their on duty times in which they are functioning in the role of account manager. The end user should be secure in the knowledge that an average teller is unable to alter account information, and that terminated employees are unable to continue to access the system either electronically or physically.

















