Auditing Your Electronic Banking and Payment Applications: FinTech Application Audit Program [$15]

Terms & Conditions and Privacy Policy

This eBook will assist IT Audit, Risk & Assurance practitioners or anyone saddle with the responsibility of security of financial technology (FINTECH) applications such as Internet/Mobile Banking app, Electronic payment apps, e-Wallet application, Bill Payment, Money Transfer & Remittance apps, USSD system and other E-Payment applications to evaluate the effectiveness and adequacy of system controls in place to minimize the risk of confidentiality, integrity and availability from crystallizing in the application. The following scope areas are covered.

• Getting the organization's policies, procedures and governance systems right for electronic banking and payment products and services.

• Controls relating to Vendors or third party service providers including service contracts and service level agreements (SLAs).

• Logical access controls.

• User access and system privilege management.

• Application security controls.

• Business logic and functional requirement validation.

• Database security controls.

• Operating system security controls.

• Compliance with leading practice standards such as PCI-DSS, ISO27001-ISO27002, ISO22301, ISO20000, etc.

• Separation of duties controls (dual or maker/checker controls).

• Payment card personalization, production and distribution.

• Personal Identification Number (PIN) security controls

• Front-end processor security.

• Payment Terminal (ATM, POS & Web) interface security controls.

• Data Backup and recovery.

• System development life-cycle (SDLC) and Process re-engineering controls.

• Software acquisition management.

• Change management, configuration management and release management controls

• Data Privacy & security.

• Encryption key management controls

• Business continuity and disaster recovery controls.