In the Bundesbank, we regularly discuss current threats, organize seminars focusing on cyber-security, or – like in the past year – perform a large-scale awareness campaign which dealt with subjects like “data classification", “encryption", “password protection", “mobility” and “social engineering".
This means that the analysis and synthesis of vulnerabilities are our tools of choice when it comes to heightening security awareness within the company and to giving management a deeper insight into the actual risk situation. It would be desirable to establish a system of measures and metrics that renders visible the progress already made. 4. Is 99% security enough?