Security Considerations and Mitigation Measures in banks

The primary objective is to protect the confidentiality, integrity, and availability (CIA triad) of banking information assets from unauthorized access, misuse, or destruction.

An unknown software flaw exploited before a patch is available.

CIA triad stands for Confidentiality, Integrity, and Availability — the three core principles that guide information security policies in banks.

Using stolen username-password pairs to gain unauthorized account access.

A firewall is a network security device that monitors and controls incoming and outgoing traffic based on predefined security rules, acting as a barrier between trusted internal networks and untrusted external networks.

A decoy system designed to detect and study unauthorized access attempts.

An IDS monitors network or system activities for malicious activities or policy violations and generates alerts, helping banks detect unauthorized access attempts in real time.

Dividing bank network into zones to limit breach spread.