Intranet Security

Answered by:

Question:

Who or what department should own responsibility for ensuring that user access to the internal network and the core banking system is appropriate, and changes to access are made in a timely manner upon termination or transfer of a user to a new position? Should this be HR, managers, IT, or some combination of those three or someone else entirely?

Answer:

There is no right or wrong answer for this question. It's really up to your bank and your organizational preferences. The key is to make sure that there is a process with designated responsibilities and that these are documented, trained on, and independently tested.

First published on BankersOnline.com 8/02/10