Picture of SMBC
Sumitomo Mitsui was the subject of a £220m robbery attempt in 2005

Hacked bank unifies defences

Sumitomo Mitsui takes integrated view of cyber and physical threats

Written by Tom Young

The bank subjected to the UK’s largest ever robbery attempt will be the first in this country to take a joined-up approach to physical and electronic security.

Sumitomo Mitsui Banking Corporation (SMBC) aims to integrate security across 19 offices throughout Europe, followed by the US. Staff will have a single profile, so that the system identifying physical location is the same as that tracking network activity.

To create the holistic system, the traditional management split has been united in a single role, said Andrew Weston, senior information security officer at SMBC for EMEA.

“I am now responsible for physical security and information security ­ the integrated project would be much harder without the combined approach,” he said.

In its first phase, the joined-up system will be rolled out to 1,000 users in the UK by July.

A combination of one-time passwords and fingerprint checks will be required to log on to any bank system.

“The ultimate aim is to have physical and logical access systems, as well as CCTV, all linked together across Europe and the US in the next three years,” said Weston.

In 2005, the bank was the subject of a £220m robbery attempt using a combination of physical and electronic tactics. Thieves gained physical access to the bank and used key-logging devices to glean passwords later used by hackers to access computers.

Weston declined to comment on the incident, but acknowledged that internal threats are a growing concern in the banking sector.

“Over the past year or so everyone has become increasingly aware of the dangers from inside an organisation,” he said.

Combining physical and network security sounds like a logical step. But the strategy does have drawbacks, according to Richard Hackworth, ex-chief information security officer at HSBC.

“Integrating these roles is not a priority for managing risk,” he said. “The issues and skills needed are different for each job and the areas of danger are so different that historically it has been very hard to do.”

The technology will be supplied by Imprivata.

Further reading

Business must see IT as everyday task

There will always be a need for technology experts. But what business needs is to see IT as part of everyday life   More...

ING Direct seeks security using anti-keylogging

New security login process for online bank   More...

HSBC online banking fears

Researchers claim they have discovered a vulnerability in HSBC's online banking security   More...

The hackers who can put your IT security to the test

Computing reports on how businesses are using penetration testing   More...

Related articles

Cyber-criminals target online donations

Users urged to exercise caution after Children in Need weekend   More...

Web threats hit 12-month high

58 per cent rise in malicious websites   More...

Cyber-criminals move with the times

Adware giving way to more serious threats   More...

TechEd 2007: Security should be taught in schools

More user education and better collaboration needed to beat online threats   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

24 Jul 2008

3.68 MBSpammer jailed, Esquire e-cover, and network passwords More...

23 Jul 2008

2.99 MBSmall time security, official 'spying' requests and a spammer jail break More...

22 Jul 2008

3.22 MBSat-nav crashes, open source security and female gamers More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Credit card transaction

Credit card fraud rampant in the UK

Attempted frauds go unreported and ignored, analysts claim   More...

Intel

Intel rolls out new embedded line-up

System-on-a-chip offerings promise footprint and power saving   More...

Advertisement

Network cables

Tech giants collaborate on wireless HD

Another attempt at cable-free transmission in the home   More...

iPhone fever fills AT&T coffers

US provider cashes in on Apple smartphone   More...

Advertisement