Products under consideration include fingerprint, face, and iris scanners, for applications such as employee access to data centers. First Union, which operates the world's second-largest automated teller machine network, may someday use biometric technology to authenticate customers at its ATM machines, Browne says. First Union relies heavily on outside vendors such as Cisco Systems to test its security on a regular basis and brings in consultants to test security whenever it acquires another bank. But tools and services are only part of the bank's security strategy. As part of its approach to security, First Union has created training programs for new employees.
Ongoing training is provided through videos, books, and on the Web.
Managers must take IT security training sessions several times a year. The company posts security updates on its intranet, and its Web site has a feature that lets IT managers and administrators download security standards for specific computing platforms. The bank's head of systems management has said he'll hold managers accountable by means of pay cuts if the systems they run don't comply with the bank's security standards, Browne says. Everyone at First Union seems to be paying attention. CTO Fogarty says security touches all facets of IT, including keeping the infrastructure running, making new product purchases, and granting access to certain applications.