ATM Security Training Middle East Riyadh, Saudi Arabia 23 rd & 24 th February 2013

Transcription

1 ATM Security Training Middle East Riyadh, Saudi Arabia There are now over 2 million ATM s in use globally according to the ATM Industry Association and a recent report by RBR estimates that there will be nearly 3 million ATMs worldwide by The European ATM Security Team (EAST), which represents 29 ATM networks and deployers across Europe, reported over nine thousand ATM related fraud attacks with losses reaching 131 million in the first six months of 2012 with ( 128 million caused by card skimming with the remaining distributed amongst card trapping, cash trapping and transaction reversal fraud). The majority of these losses are occurring outside Europe in countries where the EMV liability shift has not yet been adopted, or where the roll out of EMV compliant ATMs has not yet been completed. It is apparent that, as card and electronic payments business evolves, opportunities are readily available to fraudsters to exploit loopholes in security controls. The Science and Knowledge Consultancy and Training Institute (SKCTI) is proud to bring to Saudi Arabia one of the best ATM Security Trainings in the world to address this concern. The ATM Security Training is the first industry recognized course of its kind globally having been attended to-date by over 200 financial institutions across EMEA. Developed by LiquidNexxus in collaboration with industry stakeholders and subject-matter experts, the training covers key security issues affecting ATM s from both physical and logical perspectives focusing on increasing knowledge of ATM fraud as well key recommendations for proactive protection at each stage of the ATM Lifecycle. Covering all industry stakeholders. enhanced with contributions from experts, real life case studies, exercises and additional resources. The course is reviewed and updated regularly to reflect latest updates. The ATM Security Training Middle East will be adapted to focus on regional issues with contributions from experts, case studies, and discussion panels. Objectives Increase attendees awareness of methods of ATM Fraud Drive adoption of proactive industry best practices from installation through maintenance and decommissioning Understand the logical device security flaws affecting ATM s as well as measures that can be employed to reduce risks Interact and learn from security experts and peers Who Should Attend? Training is suitable for executives with the following responsibilities ATM Management IT Security Security Network Engineers Fraud Prevention Service Personnel Branch/Physical Security Network Engineers Service Personnel Installers and Maintenance IT Risk CIT and generally anyone with an interest in improving overall understanding of ATM Fraud countermeasures.

2 Agenda Training last for two days and will commence 09:00 and finish approximately 17:00 and covers: Context & Introductions ATM Lifecycle Security ATM Overview ATM Stakeholders ATM Definitions & Scope ATM Components ATM Threats: Context & Statistics Fraud Overview Global ATM Fraud Survey Emerging Threats Risk Management Risk Assessment Countermeasure Action Strategy Insurance Site Validation ATM Physical Security Onsite Monitoring Positioning & Anchorage Installation and Servicing Recommended Measures Control & Monitoring ATM Bombings & Gas Attacks Brute Force Attacks PIN & Encryption Security PIN Security Recommendations Key Management from Loading to Destruction ATM Cyber Security ATM Cyber Attack Vectors ATM Malware Analysis ATM Software Environment & Lifecycle Security ATM & PCI Compliance Monitoring & Administration ATM Account Security Cybercrime Overview Data Compromise & Hacking Underground Markets Carders Forums ATM Cash Security Cash Replenishment Security Recommendations Merchant/CIT/Branch Fill Safe Operating Procedures Securing ATM Zones Cash Trapping ATM Skimming Definitions Overview Skimming Devices & Classification Latest Skimming Devices Countermeasure Recommendations Card Trapping Definition & Nature of Trapping Scams & Types of Devices Detection & Deterrence Solutions

3 ATM Data & Transactional Security Messaging Security Confidentiality & Integrity Transaction Reversal Fraud Cash Trapping Impact Trainers ATM Security Training Riyadh, Saudi Arabia Education Staff Education Customer/Consumer Education ATM War Exercise Each training session is attended by specialist trainers with years of experience in Security and managing ATM s. In addition where possible we invite guest speakers from local law enforcement, regulators, CIT companies, solution providers and specialists to discuss mitigation of ATM Fraud, and ATM Management best practices Lachlan Gunn ATM Security Expert Director of BenAlpin Ltd which he founded in July 2000 as a UK based independent consultancy providing commercial security advice to businesses. An extensive career in the British Armed Forces Managed several commercial security companies and has a strong background in risk management, mainly relating to the transportation, storage and processing of cash. He has worked in Belgium; Croatia; India; Indonesia; Hong Kong; Malaysia; the Netherlands; Singapore; Spain; Taiwan; Thailand; the United Kingdom amongst other locations Co-founder, Coordinator and a Director of European ATM Security Team Ltd (EAST) which gathers and provides information for the European ATM industry and facilitates effective representation of ATM related security issues at relevant European central institutions. EAST was founded in 2004 and has representation from 29 Countries. Member of the following professional organisations: The Institute for Independent Business (IIB) and the ATM Industry Association (ATMIA). Peter Freeman, Self Service Specialist Qualified as a Banker with AIB certification Mr Freeman has a wealth of experience in ATMs, and general knowledge of Self Service solutions in the financial industry that can help banks across the globe, he also has experience in security; this involves understanding crimes around selfservice and cards, and recommending protection solutions. Qualified as a Banker with AIB certification Mr Freeman has a wealth of experience in ATMs, and general knowledge of Self Service solutions in the

4 financial industry that can help banks across the globe, he also has experience in security; this involves understanding crimes around self-service and cards, and recommending protection solutions. After leaving school Peter joined a small London bank, (part of a larger group) with a career in banking in mind. He carried out did many jobs in clearing and payments, branch, and worked in dealing. Later Peter progressed to Systems and IT and started a career that involved programming punched card machines and also computers. (A complete reader/sorter in and out clearing program in 256K!). Later in his career he moved into general systems looking at operations and was involved in the early cash dispenser (hardly ATMs as we know them today) deployment in After a brief period in the public sector Peter joined NCR UK in 1978 looking at new systems and potential deployment in the financial industry. These included some early ATM deployments, smart card solutions in France and early cheque imaging solutions. While generally within the wide product management spectrum, he was involved in product development of ATMs; also early kiosk and ticketing solutions. Peter has been involved with early ATM deployments across the globe working with local NCR organisations and customers to provide the best solutions. Recent projects were focused on emerging markets in Middle East, Africa, Eastern Europe and Asia as well as product development in Japan. Registration Information Training places for this course are in high demand and only available on a first come first serve basis, book early to avoid disappointment Standard Registration includes: > Access to the full 2 day training session > Hard copy Training Manual > Refreshments, Buffet Lunch & Coffee on both days > Certificate of Completion Cost: $ 1,500 or SAR 5,650 Group discounts: additional 10% if 3 or more delegates register from the same organization. Venue: To be announced shortly Enquiries Training is conducted by LiquidNexxus, SKCTI and consultant trainers, please contact us for more information: For registrations from within Saudi Arabia and the Middle East please contact SKCTI: Dr. Saleh A. Sonbul, CEO dralsonbul@skctc.com / Phone: (Direct) (Mobile) OR Mohammad Nasir, Training Operations training@skctc.com / Phone: Ext110 For registrations from anywhere else please contact LiquidNexxus: Marc Casadio, Regional Director mcasadio@liquidnexxus.com Phone:

5 About SKCTI The Science and Knowledge Consultancy and Training Institute or SKCTI is a Saudi-authorized developmental education and training service-provider, with training headquarters located, and operating, in Riyadh, organized under the laws of the Kingdom of Saudi Arabia, recognized by the Ministry of Education (MOE) and under the supervision of the Saudi Technical and Vocational Training Corporation (TVTC) having its mailing address as P.O. Box Riyadh 11447, Saudi Arabia. We are privileged and excited to timely share and offer this ATM Security Training to the local Saudi communities to bring local awareness to the global standards in card and electronic payments business security controls - under very competitive training prices. SKCTI also provides training services in its seventeen (17) training domains with focus in the areas of Financial and Investment, ISO-based Management Systems, Business Management and Improvement, Human Resources Development, Information and Communications Technology, and in the English Language Communication Skills. We are also conducting exam-preparation trainings for different levels of international certifications and designations given by recognized international certification bodies which include, but not limited to, Chartered Financial Analyst CFA, Capital Market Exams CME, Certified Management Accountant CMA, and IRCA/RABQSA Auditor/Lead Auditor for ISO-based management systems. SKCTI also provide top notch consultancy, auditing, and training services including ISO standards and widely used quality systems. Here at the institute, we provide Internal Auditor and Lead Auditor training courses, certified from RABQSA & IRCA at the following standards: ISO 9001:2008 QMS Quality Management System, ISO EMS Environmental Management System, OHSAS Occupational Health Safety Management System, ISO FSMS Food Safety Management System, ISO/IEC ISS Information Security System, ISO/IEC LQMS Laboratory Quality Management System, among others. Our training institute also gives trainings in ILM-endorsed Business Management (BM) like the ILM (Institute of Leadership and Management (City & Guilds of London Institute, UK) s Project Management Programme, Leadership and Management, and Sales Management Programme. Aside from that, SKCTI also offers Business Improvement (BI) programmes like the Lean Six Sigma and Balanced Score Card, among others. Most of our trainings are customizable and offer flexible timings and venues. We cater both for corporate, including major vertical industries, and individual clients both in-house and public. SKCTI would like to bring regular, sustainable, international-quality-standard, and globallycompetitive training programs to the local learning communities of Saudi Arabia like this coming ATM Security Training in order bring local awareness to the global standards. We hope to offer the value of our dedicated services and vast experience in quality trainings in return if given the trust and the opportunity to be a training provider to your organization. For more details, kindly visit our website at

6 About LiquidNexxus LiquidNexxus is a specialised training, education and consulting company focused on the payment and electronic card industry as well as key areas including risk, security, and corporate governance. Since LiquidNexxus was founded in July 2009 we have had the pleasure of working with many organisations throughout EMEA. For more information on our courses, portfolio and services please visit the website: nexxus.com