The Innovator
July 2010, Social Networks and the Cloud
Roundtable Technology Group Publication
The Innovator, Past issues
The next Innovator will focus on Mobile Banking. To submit an article, please contact Dan Schutzer, Dan@fsround.org.

The CTO Corner
September 2010, Mobile Financial Services
Commentary from Roundtable CTO Dan Schutzer
The CTO Corner, Past issues

• Aggregation Services
• Crisis Management Coordination
• e-Insurance Risk Management
• Fraud Reduction
• Vendor Management
• Mobile Financial Services
• Operational Risk
• Payments
• Security

BITS Decade of Difference
Review of BITS' First Ten Years
(September 2006) (Large download file)
Contact Ann Patterson to have a copy mailed to you.

Aggregation Services

• BITS Voluntary Guidelines for Aggregation Services (January 2004)
  

Back to Top

Crisis Management Coordination

• Pandemic Resources (May 2008)
  
• BITS Guide to Business-Critical Power
  (September 2006)
  
• Protecting the US Critical Financial Infrastructure: An Agenda for 2005 (May 2005)
  Source: Financial Services Sector Coordinating Council
• Improving Business Continuity in the Financial Sector: A Model for Starting Regional Coalitions (December 2004)
  
• BITS Guide to Business-Critical Telecommunications Services (November 2004)
  
• Homeland Security Strategy for Critical Infrastructure Protection in the Financial Services Sector (May 2004)
  Source: Financial Services Sector Coordinating Council
  

Back to Top

e-Insurance Risk Management

• BITS Technology Risk Transfer Gap Analysis Tool(April 2002)
  

Back to Top

Fraud Reduction

• BITS Online Fraud Library
  A resource of publicly available fraud-related reports and documents.
  *******************************
  
• Revised BITS Payments Risk Competency Framework: Background and Context (March 2010)
  
• BITS Fraud Protection Guide: Protecting the Elderly and Vulnerable from Financial Fraud and Exploitation (April 2010, Updated from 2005)
  
• BITS Fraud Protection Training Guide: PowerPoint Presentation (February 2010, Updated from 2005)
  
• 2009 BITS Fraud Program Accomplishments (December 2009)
  
• Be Your Own Best Advocate: Mortgage Fraud Prevention (August 2009)
  BITS also published a financial institution-facing paper on mortgage fraud prevention in Dec 2009, available in the Members Only section of the site. The paper is available to non-member financial institutions and law enforcement upon request.
  
• 2008 Accomplishments BITS Fraud Reduction Program (December 2008)
  
• BITS Debit Card/ATM Fraud Resource List
  (October 2008)
  
• Ongoing Monitoring and Screening of ACH Activity-An Executive Summary (July 2008)
  For a copy of the complete paper, please log in to the Members Only section. The paper is available to non-member financial institutions and law enforcement upon request.
• 2007 Accomplishments BITS Fraud Reduction Program (January 2008)
  
• BITS Mortgage Fraud Prevention: An Education and Awareness Toolkit for Consumers (A direct-to-consumer booklet of the Toolkit is available at the link above) (January 2008)
  
• BITS ACH Check Conversion Risk Management Toolkit (March 2007)
  
• 2006 Accomplishments BITS Fraud Reduction Program (January 2007)
  
• BITS Remote Deposit Image Capture: The Processes, Risks and Strategies Used to Mitigate Them (September 2006)
  
• Strategies for Mitigating Fraud Risks Associated with the Check Clearing in the 21st Century Act (October 2004)
  
• BITS Voluntary Guidelines for Collections in the Financial Services Industry (March 2004)
  
• BITS Fraud Reduction Guidelines: Strategies for Identity Theft Prevention and Consumer Assistance (July 2003)
  Documents to Assist Members in Addressing Email Hoaxes (July 2003)
  
  • Questions for Financial Institutions to Ask Customers Calling to Report an Email Hoax
    
  • Memo to the US Secret Service and FBI on Reporting Email Hoaxes
    
• Financial Identity Theft: Prevention and Consumer Assistance (May 2003)
  
• Fraud Prevention Strategies for Internet Banking (April 2003)
  

Back to Top

Vendor Management
Financial institutions, service providers and consultants interested in outsourcing security should also visit The Financial Institution Shared Assessments Program webpage.

• BITS Framework for Managing Technology Risk for Service Provider Relationships
  (November 2003; Revised in Part, February 2010)
  
• BITS Key Considerations for Managing Subcontractors
  (June 2008)
  
• BITS Outsourcing Glossary of Terms
  (January 2007)
  
• BITS Key Considerations for Global Background Screening Processes (June 2005)
  
• Key Contractual Considerations for Developing an Exit Strategy (May 2005)
  
• BITS IT Service Providers Expectations Matrix (January 2004)
  The Expectations Matrix is replaced by the Financial Institution Shared Assessments Program documents - the Agreed Upon Procedures (AUP) and the Standardized Information Gathering (SIG) questionnaire.
• BITS Framework for Managing Technology Risk for IT Service Provider Relationships
  (November 2003)
  

Back to Top

Mobile Financial Services

• BITS Mobile Financial Services: Recommendations for Business Requirements and Technical Guidelines (April 2002)
  

Back to Top

Operational Risk

• Reducing the Delta Between New Regulations and Cost-Effective Practices Within the Financial Services Industry
  A study sponsored by The Financial Services Roundtable's Anthony T. Cluff Research Fund and conducted by Deloitte. (September 2009)
  
• Reconciliation of Regulatory Overlap for the Management and Supervision of Operational Risk in US Financial Institutions (October 2005)
  
• Developing a KRI Program: Guidance for the Operational Risk Manager (September 2004)
  
• BITS Kalculator: Key Risk Measurement Tool for Information Security Operational Risks (July 2004)
  
• Kalculator Spreadsheet
  
• Kalculator Spreadsheet – Sample
  

Back to Top

Payments

• BITS Payments Risk Competency Framework: Background and Context
  (March 2010)
  
• BITS Partner Group: Third Party Payments System Access Control White Paper and Recommendations (May 2007)
  
• BITS Partner Group: Liability Flows Among Networks - Comment Letter on Cross-Network Liability (May 2007)
  
• Account-to-Account Services: Emerging Product Overview (March 2005)
  
• Check 21 Resource Document (March 2004)
  Collaborative publication by 16 financial services-related organizations
• Safekeeping and Electronification in the Financial Services Industry (January 2003)
  Charles E. Siegmann, Mercantile Bankshares Corp. and Grant Cole, Bank of America Corp.
  

Back to Top

Security

• Top 10 Secure Password Tips (Jan 2010)
  
• Secure Web Browser Recommendations
  (Dec 2009)
  
• Email Sender Authentication Deployment: Best Practices and Considerations for Financial Institutions (Jun 2009)
  
• BITS Enterprise Key Management (May 2008)
  
• BITS Email Security Toolkit: Protocols and Recommendations for Reducing the Risks
  (April 2007)
  
• BITS/ABA Key Considerations for Responding to Unauthorized Access to Sensitive Customer Information (November 2006)
  
• BITS Consumer Confidence Toolkit: Data Security and Financial Services (October 2006)
  
• Catherine Allen's Editorial in American Banker
  Viewpoint: Defining and Designing the New Security (September 2006)
  
• BITS and Financial Services Roundtable Letter: Security of Municipal Broadband Networks
  (June 2006)
  
• BITS Key Considerations for Securing Data in Storage and Transport: Securing Physical Media in Storage, Transport, and for Data Erasure and Destruction (April 2006)
  
• Voluntary Guidelines for Consumer Confidence in Online Financial Services (September 2005)
  
• Critical Success Factors for Security Awareness and Training (September 2005)
  
• Results of BITS Research and Development Survey (July 2005)
  
• BITS Best Practices for Software Patch Management (July 2004)
  
• BITS/FSR Software Security Toolkit
  (February 2004)
  

BITS Publications
Comment Letters
Public Testimony
Presentations
BITS Bulletin Archive

"The BITS Strategy for Identity Theft Prevention and Victim Assistance is an outstanding example of the excellent work BITS is doing for the financial services industry."