|
|
|
|
|
|
|
Tienda Online
|
|
|
Es seguro. Es Kalysis
|
|
|
Kalysis Lectores Tarjetas Inteligentes
|
|
|
Idioma
|
· Últimos 100 publicados · Archivo de Artículos
Tendrá solo UNA
Sabía que...
... KALYSIS es portada del Nilson Report?
Issue 814, July 2004
... la patente 2.186.534 de Kalysis es la base de la aplicación del DNI Digital o de la firma electrónica en tarjeta inteligente?
... el "token USB" es un invento español patentado presentado publicamente en Bruselas?
...Los beneficios de pagos móviles crecerán drásticamente a USD20,000 millones en todo el mundo, de acuerdo con un nuevo informe estratégico de ARC Group. Esta cifra representa un crecimiento anual del 100%, y se deriva principalmente de nuevos tipos de transacción como prepago desde cajeros automáticos y otros innovadores ATMs. |
|
|
Empleo en Kalysis GRUPO
|
|
|
Tiendas Online & Pago Electrónico
|
|
|
Kalysis Community
|
|
|
Tarjetas Inteligentes Estadísticas
|
|
|
Kalysis GRUPO
|
KALYSIS Iberia, SL Plaza de Uncibay 3 Primera Planta 29008 Málaga ESPAÑA
952 60 81 93 686 500 726
CENTRO DE INVESTIGACIÓN BIC Euronova - Centro Europeo de Empresas e Innovación (CEEI) Parque Tecnológico de Andalucía (PTA) Málaga, ES 29590
ESPAÑA
INTERNACIONAL Voz
+34 952 608193
ANID - National Association of Researchers in Educational Methodology Camino de las Aguas, 48 37003 Salamanca España
KALYSIS, SA de CV :: General Payment Services de México, SA de CV
Camino al Desierto de Los Leones Número 35 Colonia San Ángel Inn 01000 México, Distrito Federal
KALYSIS Central America USA Office 9800 Southwest 62nd St Miami, Florida 33173 USA
116 Northeast 3rd Avenue Miami, Florida 33132 USA
+1 260 KALY-202
KALYSIS Nicaragua, SA
Edificio Grupo Lacayo
Km 5½ Carretera Norte Managua NICARAGUA
KALYSIS Argentina
Buenos Aires ARGENTINA
AVICARD Identificación
Avda. Gestido, M-26, S-17, Sangrila
Canelones URUGUAY
KALYSIS Chile
Obispo Orrego, 42. Ñuñoa
Santiago de Chile CHILE
KALYSIS Colombia SA
CRA 46 No 56-63 OFIC. 109 Edificio Argental Medellín COLOMBIA
INTERNACIONAL Voz
+34 952 608193
Distribuidores EMEA Austria, Alemania, Suiza, Dinamarca, Suecia, Noruega, Finlandia, Polonia, República Checa, Eslovaquia, Hungría, Eslovenia, Croacia, Latvia, Estonia y LituaniaRelaciones con la prensa y medios de comunicación
Iraís Quintana:
Sindicar Artículos de Kalysis Community Tarjetas Inteligentes |
|
|
|
Noticias en la Red: Risk Management Principles for Electronic Banking
Publicado por: Redacción
|
|
Continuing technological innovation and competition among existing banking organisations and new entrants have allowed for a much wider array of banking products and services to become accessible and delivered to retail and wholesale customers through an electronic distribution channel collectively referred to as e-banking. However, the rapid development of e-banking capabilities carries risks as well as benefits.
The Basel Committee on Banking Supervision expects such risks to be recognised, addressed and managed by banking institutions in a prudent manner according to the fundamental characteristics and challenges of e-banking services. These characteristics include the unprecedented speed of change related to technological and customer service innovation, the ubiquitous and global nature of open electronic networks, the integration of e-banking applications with legacy computer systems and the increasing dependence of banks on third parties that provide the necessary information technology. While not creating inherently new risks, the Committee noted that these characteristics increased and modified some of the traditional risks associated with banking activities, in particular strategic, operational, legal and reputational risks, thereby influencing the overall risk profile of banking.
Based on these conclusions, the Committee considers that while existing risk management principles remain applicable to e-banking activities, such principles must be tailored, adapted and, in some cases, expanded to address the specific risk management challenges created by the characteristics of e-banking activities. To this end, the Committee believes that it is incumbent upon the Boards of Directors and banks' senior management to take steps to ensure that their institutions have reviewed and modified where necessary their existing risk management policies and processes to cover their current or planned e-banking activities. The Committee also believes that the integration of e-banking applications with legacy systems implies an integrated risk management approach for all banking activities of a banking institution.
To facilitate these developments, the Committee has identified fourteen Risk Management Principles for Electronic Banking to help banking institutions expand their existing risk oversight policies and processes to cover their e-banking activities.
These Risk Management Principles are not put forth as absolute requirements or even "best practice." The Committee believes that setting detailed risk management requirements in the area of e-banking might be counter-productive, if only because these would be likely to become rapidly outdated because of the speed of change related to technological and customer service innovation. The Committee has therefore preferred to express supervisory expectations and guidance in the form of Risk Management Principles in order to promote safety and soundness for e-banking activities, while preserving the necessary flexibility in implementation that derives in part from the speed of change in this area. Further, the Committee recognises that each bank's risk profile is different and requires a tailored risk mitigation approach appropriate for the scale of the e-banking operations, the materiality of the risks present, and the willingness and ability of the institution to manage these risks. This implies that a "one size fits all" approach to e-banking risk management issues may not be appropriate.
For a similar reason, the Risk Management Principles issued by the Committee do not attempt to set specific technical solutions or standards relating to e-banking. Technical solutions are to be addressed by institutions and standard setting bodies as technology evolves. However, this Report contains appendices that list some examples current and widespread risk mitigation practices in the e-banking area that are supportive of the Risk Management Principles.
Consequently, the Risk Management Principles and sound practices identified in this Report are expected to be used as tools by national supervisors and implemented with adaptations to reflect specific national requirements and individual risk profiles where necessary. In some areas, the Principles have been expressed by the Committee or by national supervisors in previous bank supervisory guidance. However, some issues, such as the management of outsourcing relationships, security controls and legal and reputational risk management, warrant more detailed principles than those expressed to date due to the unique characteristics and implications of the Internet distribution channel.
The Risk Management Principles fall into three broad, and often overlapping, categories of issues that are grouped to provide clarity: Board and Management Oversight; Security Controls; and Legal and Reputational Risk Management.
Board and Management Oversight Because the Board of Directors and senior management are responsible for developing the institution's business strategy and establishing an effective management oversight over risks, they are expected to take an explicit, informed and documented strategic decision as to whether and how the bank is to provide e-banking services. The initial decision should include the specific accountabilities, policies and controls to address risks, including those arising in a cross-border context. Effective management oversight is expected to encompass the review and approval of the key aspects of the bank's security control process, such as the development and maintenance of a security control infrastructure that properly safeguards e-banking systems and data from both internal and external threats. It also should include a comprehensive process for managing risks associated with increased complexity of and increasing reliance on outsourcing relationships and third-party dependencies to perform critical e-banking functi ons.
Security Controls While the Board of Directors has the responsibility for ensuring that appropriate security control processes are in place for e-banking, the substance of these processes needs special management attention because of the enhanced security challenges posed by e-banking. This should include establishing appropriate authorisation privileges and authentication measures, logical and physical access controls, adequate infrastructure security to maintain appropriate boundaries and restrictions on both internal and external user activities and data integrity of transactions, records and information. In addition, the existence of clear audit trails for all e-banking transactions should be ensured and measures to preserve confidentiality of key e-banking information should be appropriate with the sensitivity of such information.
Although customer protection and privacy regulations vary from jurisdiction to jurisdiction, banks generally have a clear responsibility to provide their customers with a level of comfort regarding information disclosures, protection of customer data and business availability that approaches the level they can expect when using traditional banking distribution channels. To minimise legal and reputational risk associated with e-banking activities conducted both domestically and cross-border, banks should make adequate disclosure of information on their web sites and take appropriate measures to ensure adherence to customer privacy requirements applicable in the jurisdictions to which the bank is providing e-banking services.
Legal and Reputational Risk Management To protect banks against business, legal and reputation risk, e-banking services must be delivered on a consistent and timely basis in accordance with high customer expectations for constant and rapid availability and potentially high transaction demand. The bank must have the ability to deliver e-banking services to all end-users and be able to maintain such availability in all circumstances. Effective incident response mechanisms are also critical to minimise operational, legal and reputational risks arising from unexpected events, including internal and external attacks, that may affect the provision of e-banking systems and services. To meet customers' expectations, banks should therefore have effective capacity, business continuity and contingency planning. Banks should also develop appropriate incident response plans, including communication strategies, that ensure business continuity, control reputation risk and limit liability associated with disruptions in their e-banking services.
This Report on Risk Management Principles for Electronic Banking is being publicly released. Comments from banking organisations and bank supervisors are welcome and may be addressed to the Basel Committee on Banking Supervision by fax (+41 61 280 9100) or e-mailed to jean-philippe.svoronos@bis.org. Comments from banking organisations should be copied to the national supervisory authorities, where appropriate.
Nota: Full Publication (PDF file) http://www.bis.org/publ/bcbs82.pdf
|
|
| |
|
Relacionado
|
|
|
|
|
|
|
Kalysis GRUPO © 2001-2021 Licensed Materials - Program Property of Kalysis. All Rights Reserved Licensed under one or more Spain Patents Nº 2,186,534 assigned to Kalysis Iberia, SL. MEI® is a trademark of Kalysis GRUPO All trademarks are the property of their respective companies. Technical data subject to change without notice
El Greco, 17. 29749 Málaga - Andalucía - España - EU ☎ (+34) 952 60.81.93 ☎ (+34) 952 22.79.60 ☎ (+34) 686-500-726 Inscrita en el Registro Mercantil nº 5 de Málaga. Tomo 3.322, Libro 2.234, Folio 45, Hoja MA-63694. Sociedad Limitada C.I.F. ES B92451996 Kalysis es un Operador Intracomunitario registrado en el V.I.E.S. © 2001-2021 Kalysis Iberia, SL
|
|