Some have the ability to change information or create new data. These activities, while improving customer services and internal operations, also have increased the risk for error and abuse of the bank's information. Controls must exist to minimize the vulnerability of all information and to provide necessary security. The level of control must be assessed against the degree of exposure and the impact of loss to the institution. This includes dollar loss, competitive disadvantage, damaged reputation, improper disclosure, lawsuit, or regulatory sanctions.
Various processes are available to strengthen information security in the banks.
The most basic are sound written management policies for internal control. These include physical security, separation of duties, quality control, hardware and software access controls, and audit. Computer hardware and software technologies can help protect information resources. Although they vary, security features usually are available at each level of computer sophistication. Regardless of the controls adopted, they should apply to information produced and stored by both automated and manual methods.