Financial Services Industry The Financial Services industry has understood the importance of data security for many years. Banks, brokerages, mutual funds, insurance companies and investment bankers realized that their reputation is dependent upon protecting customer data and privacy. Regulatory requirements demand attention to Security at all levels of management. Gramm-Leach-Bliley Act of 1999 (GLBA) compliance is one of the more recent security requirements that financial services industry must consider. DRG understands the robust security requirements of the financial services industry, as well as the complexities of their business and regulatory demands. We have experience working in the financial industry for many years. In the past three years, here are just a few of the many financial areas of expertise DRG has acquired: • Electronic bill payment and presentment (EBPP) • Data and Account Aggregation technologies • Web services (XML, SOAP and SAML) and authentication models (Passport, Liberty Alliance, OASIS) • Internet banking and brokerage services • Web-based cash management services, such as wire transfers, foreign exchange or ACH • Financial services portals, web-based exchanges, auctions and P2P payment services • Internet based mortgage and equity lending initiatives • Wireless financial offerings With our experience of working with the leading financial companies in the industry, DRG can provide a knowledgeable and valuable security partnership, an independent third party to assess your own security efforts, or augment your own internal security forces to meet unplanned security resource requirements. Here are some areas we can offer to your financial services business: • GLBA Audit and Compliance – do you meet the new requirements? • Third party vulnerability assessments – regulators typically require FIs to obtain an independent third party assessment of the internet and network security. In addition, we can show you where your application may provide an invitation to unwanted internet visitors (hackers). • Security risk assessment – evaluating a vendor? Implementing a new technology initiative (aggregation, 802.11x, web-based services or EBPP)? DRG can provide strategic security and business guidance as you evaluate solutions. Let us help you prevent costly security mistakes. • Authentication strategies - are you wrestling with the value of the Liberty Alliance, or implementing a web services effort? Are you considering VPNs, or hardware tokens for your remote access employees? Have you joined Identrus and need to get your arms around smart cards? Do you need help configuring your TACACS or RAS authentication services? We can assist with these and many other financial services business and security initiatives.