src bonn Archive - SRC Security Research & Consulting GmbH

SRC at ICPS 2019 in dialogue with physics students

SRC attends the ICPS 2019 Jobfair

Physics students will meet for the 34th time at ICPS 2019 in Cologne. The “Jobfair” taking place on Tuesday, August 13, 2019, will provide the setting.

SRC uses the ICPS 2019 to provide physicists with insights into and an exchange on the diverse topics of IT security. The SRC experts explain the challenges of technology assessment using examples such as mobile payment methods, artificial intelligence and similar topics. This requires a strong instinct for potential sources of error in complex environments, the competence to find solutions and the will to implement them. Especially students with a physical background bring these valuable qualities with them. Dr. Max Hettrich already reported in the interview “From quantum physicist to security analyst at SRC” on how a career can develop from these qualities.

By students for students — The ICPS 2019

The ICPS finds a new home every year. More than 500 physics students and doctoral candidates from more than 50 nations not only have the opportunity to exchange their knowledge; they also get to know the culture and mentality of the host country. The ICPS is organised by the respective student associations of the host country. This year, the organisation team consisting of members of the young German Physical Society, the Institute for Theoretical Physics of the University of Cologne and the Bonn-Cologne Graduate School of Physics and Astronomy who have prepared a programme that will last 8 days.

Matthias Dahlmanns is the project coordinator of ICPS 2019 and a working student at SRC. “Coordinating the organisation of the ICPS 2019 is a great experience. The participation of SRC makes me personally very happy”, says Matthias Dahlmanns. Dr. Benjamin Botermann, Senior Consultant Test & Quality Assurance, is also looking forward to the exchange with the many interested physics students: “I am very excited about the ICPS Jobfair. As a physicist, I find myself absolutely at home working at SRC. I am looking forward to the exchange with the prospective physicists. In a personal conversation, I would like to talk about the various fields of activity at SRC and answer the numerous and detailed questions”.

SRC contributes to the German IT Security Congress 2019

IT security as a prerequisite for successful digitalisation

This is the motto of this year’s German IT Security Congress, which is held every two years by the Federal Office for Information Security (BSI). The congress will take place from 21 to 23 May 2019 at the Stadthalle Bonn — Bad Godesberg. The aim of this year’s congress is to examine the topic of IT security from different perspectives, to present and further develop possible solutions.

SRC is at the German IT Security Congress

As a BSI-approved evaluation body for evaluations according to Common Criteria (CC) and various other technical guidelines, SRC will also be present with a booth at the German IT Security Congress in 2019. Thus we offer the experts of customers, partners and those of the BSI once again the well-established contact point at the German IT Security Congress. This concept has proven itself over many years. The stable personal network between the participants offers the optimal platform for the transfer of complex technical and regulatory aspects.

SRC expert Sandro Amendola talks about compliance, mobile payment procedures and customer authentication

The triumphal march of mobile payment procedures seems unstoppable. The legislator has also intensively considered the security of these procedures and the necessary customer authentication. Sandro Amendola will talk about “Legal security requirements for payment procedures for customer authentication using mobile devices” on Thursday, 23 May 2019 at 11:00 a.m. in the main hall.

Information security officers for credit institutions

Certificate Course “Information Security Officer for Credit Institutions” — November 19 to 22, 2019

BAIT-Compliance: Use of an Information Security Officer (ISB)

The German Banking Act (KWG) and MaRisk require banks to ensure the integrity, availability, authenticity and confidentiality of data in their IT systems and processes. However, secure and efficient IT is also essential for the economic success of a bank. The new “Banking Supervision Requirements for IT” (BAIT) formulate concrete expectations. Among other things, the Federal Financial Supervisory Authority (BaFin) is calling for the newly created function “Information Security Officer for Credit Institutions” (ISB) in its guideline. They control the information security process and report directly to the management.

6th Certificate Course “Information Security Officer (ISB) for Credit Institutions

In cooperation with Bank-Verlag, SRC has already successfully completed five certificate courses on “Information Security Officer (ISB) for Credit Institutions”. After the great response and the continuing demand, we are pleased that Bank-Verlag has made another date possible for this four-day certificate course.

From 19 to 22 November 2019, you will once again have the opportunity to receive further training as an “Information Security Officer (ISB) for Credit Institutions” on the premises of Bank-Verlag GmbH in Cologne.

Training by skilled experts

In cooperation with Heinrich Lottmann (TARGOBANK AG & Co. KGaA) and Alexandros Manakos (HSBC Germany) the SRC experts Sandro Amendola, Florian Schumann and Dr. Deniz Ulucay will give lectures. In this course, the experts inform you comprehensively about the norms and standards according to ISO and IT-Grundschutz, as well as about all legal/regulatory requirements relevant to you as an ISB. In addition, the topics IT Risks and Emergency Prevention as well as Business Continuity Management are dealt with.

After passing the final examination, you will receive the certificate “Information Security Officer for Credit Institutions”.

Optionally, you have the opportunity to acquire the basic IT knowledge required for the course in a one-day intensive seminar in Cologne on 18 November 2019 prior to the event. This course deals with the basics, terms, encryption and IT security techniques in information technology.

Course website

Online registration

NextGenPSD2 certification | SRC launches audits for XS2A

Are you ready to certify your NextGenPSD2 implementation?

The revised Payment Services Directive (PSD2) requires banks to allow authorized third parties access to customer data. These third party payment service providers (TPP) are to be granted access via a programming interface (XS2A) with the customer’s consent. With this data, TPPs will be able to offer innovative payment initiation and account information services. The NextGenPSD2 certification promotes the implementation of a uniform standard.

Most banks and API providers in Europe implement the XS2A interface using the NextGenPSD2 framework of the Berlin Group. This is an open and Europe-wide harmonized solution for implementing the PSD2 requirements for the XS2A interface.

The correct implementation of the XS2A interface relieves the institute from implementing a fallback interface solution. The NextGenPSD2 Implementation Support Program (NISP) offers the participants a testing framework with test concept, test case catalog, compliance best practices and test tool requirements. The implementing institute evaluates its own work. As a result, the implementation is completed. It remains to be seen if this self-assessment will be considered sufficient by the supervisory authority (NCA).

Why should you undergo the NextGenPSD2 certification?

The self-assessment of the NextGenPSD2 implementation already offers a high level of quality. However, different interpretations of the specification can lead to interoperability problems. There is currently no documented agreement between banks and third-party providers on the exact implementation of the XS2A interface. This increases the probability that the responsible supervisory authority of the banks will refuse the exemption from the implementation of a fallback interface solution.

SRC has extensive and detailed expertise from its involvement in the specification and implementation of the XS2A interface as part of NISP. On this basis, we have developed the NextGenPSD2 certification for you.

How does the NextGenPSD2 certification process work?

Requirements for the NextGenPSD2 certification are the test case catalogue, the implementation profile and the test specification of the implementing institute. SRC uses these requirements to carry out a complete functional, security and performance audit of the NextGenPSD2 implementation.

Audit Validation

During validation, the implementation is reviewed with respect to the requirements of the documentation.

Functional part

In the functional part, the test specifications are executed and the results are verified.

Non-functional part

In the non-functional part, the availability of the implementation (stress test) is determined and evaluated at relevant points.

Security test

In the security test, methods of penetration testing are used. It is evaluated if the implementation of the XS2A interface offers sufficient protection against fraud attempts on customer data and transactions.

The certification is documented in a final report. If all requirements are at least sufficiently fulfilled, the institute receives an SRC certificate. With this certificate, the conformity of the implemented XS2A interface can be demonstrated to third parties and the supervisory authority. Based on the first certification, regression audits can be carried out in the future.

SRC consulting services for development optimization or for creating the test specification can be used to prepare for the NextGenPSD certification.

Why SRC?

As a co-editor of the NextGenPSD2 Framework and the NISP Testing Framework, SRC has a deep understanding of the NextGenPSD2 standards and all tasks associated with testing. In addition, SRC has many years of experience in developing test environments with many licensed auditors for multiple functional and security evaluations according to formal certification schemes. As a result, SRC is able to carry out a high-quality audit with manageable effort.

Are you interested in NextGenPSD2 certification? Then please contact us at info@src-gmbh.de.

Transakt complies with the EBA RTS

SRC confirms that the mobile banking solution Transakt by Entersekt meets the PSD2 requirements

Certificate Course “Information Security Officer for Credit Institutions” — November 6 to 9, 2018

The German Banking Act (KWG) and MaRisk require banks to ensure the integrity, availability, authenticity and confidentiality of data in their IT systems and processes. However, secure and efficient IT is also absolutely essential for the economic success of a credit institution.

The new “Banking Supervisory Requirements for IT” (BAIT) formulate concrete expectations. Among other things, the Federal Financial Supervisory Authority (BaFin) has issued a guideline calling for the new function of the ” Information Security Officer ” to be set up. He or she controls the information security process and reports directly to management.

In cooperation with Bank-Verlag, SRC has already successfully offered three certificate courses to become an “Information Security Officer (ISB) for credit institutions”. After the great response and the continuing demand, we are pleased that the Bank-Verlag has made another date for this four-day certificate course possible.

From 6 to 9 November 2018, you will again have the opportunity to receive further training in Cologne to become an “Information Security Officer (ISB) for credit institutions”.

Teamed up with Heinrich Lottmann (TARGOBANK AG & Co. KGaA) and Alexandros Manakos (HSBC Trinkaus & Burkhardt AG), the SRC experts Sandro Amendola, Florian Schumann and Randolf Skerka will give a lecture on the norms and standards according to ISO and IT-Grundschutz, as well as on all legal/regulatory requirements relevant to you as an ISB. In addition, the topics IT risks and emergency precautions as well as business continuity management will be dealt with.

After passing the final examination, you will receive the certificate “Information Security Officer for Banks”.

Optionally, you will have the opportunity to acquire the basic IT knowledge required for the course in a one-day intensive seminar in Cologne on 5 November 2018 prior to the event. This course deals with the basics, terms, encryption and IT security techniques in information technology.

Course website

Online registration

Course Flyer

SRC supports the 5th Computer Science Conference for University of Bonn Students — CSCUBS 2018

SRC is pleased to support the 5th Computer Science Conference for University of Bonn Students — CSCUBS 2018, which will take place on May 16, 2018.

Promotion of research and scientific exchange

CSCUBS 2018 is organised by PhD and Masters students. Its goal is the promotion of research in computer science, as well as the scientific exchange between students, researchers and practitioners. “The CSCUBS is an initiative from among the students that SRC gladly supports,” says Detlef Kraus, authorized signatory at SRC. “And especially the professional exchange between research, practice and teaching is urgently needed if our society wants to meet the challenges of IT security with confidence,” Kraus continues.

Starting point for personal and professional exchange

The 5th Computer Science Conference for Students of the University of Bonn (CSCUBS 2018) provides a platform for university projects, dissertations and results from research, development and practice in the field of computer science. The conference will take place on 16 May 2018 at the University of Bonn. SRC supports the event not only as a sponsor. We will also be present with a booth to offer a point of contact for personal and professional exchange.

Presentation of a project result at CSCUBS 2018 included

SRC will also present one of its many projects at the CSCUBS. Practice often provides surprising research approaches and exciting insights. The CSCUBS is a welcome platform for SRC to present our work to an interested, young and competent circle of experts and to exchange ideas. Perhaps the many discussions will also provide qualified starting points for using the expertise gathered at CSCUBS 2018 in joint project work.

Tag Archive for: src bonn