Information Security Training for Bank Employees

Information security awareness for bank employees is very important in maintaining a secure banking institution. I have over five years experience working for a large bank, so I am very familiar with their security policies. I started out working in the fraud department, then moved on to technical support. Whether it is with building security or computer security, banks take these matters very seriously.

Giving someone a job at a bank will provide them with access to some of the most private and personal details regarding the lives of the bank’s customers. For this reason, you want to make sure that you are hiring trustworthy employees that do not have any kind of shady activities in their past. Make sure all references check out and verify previous employment and education mentioned on the prospective employee’s resume, because you never know who might be trying to infiltrate your financial institution.

click to enlarge

You should also make sure your employees are not taking shortcuts by writing passwords on notes and leaving them anywhere near their desk, as this happens often. At the bank where I worked, most people had to manage four different passwords for four different systems. We regularly had to change people’s passwords because they either forgot them or locked themselves out of a system. Although most employees will look upon the frequent password changes as an annoyance, it is an unfortunate necessity in keeping the bank’s systems secure.

click to enlarge

Another big problem is unattended workstations that are left logged in. A security policy should be enforced that requires users to either log out or lock down their computer while they are away from their desk. This includes bathroom and lunch breaks as well as when the employee leaves at the end of their shift. Leaving a computer logged in is like leaving the front door of your house wide open while you are away.

Passwords and online security policies aren’t the only important factors in raising information security awareness for bank employees. Another big issue is knowing who actually works for the bank. One scenario my bank used in training was where someone would sneak into an office and pose as a member of technical support, then sit down at an empty desk and start digging around in the system.

Bank employees should question any unfamiliar person in their area, or at least make sure someone in management is able to identify who is sitting at a desk. Sometimes all it takes is a nicely dressed person with a toolkit and a fake ID badge to get on a system for a few minutes and breach all kinds of security measures while everyone else around them remains oblivious.