Barclays’ cyber chief: try to break your own IT defences

Banks “must go beyond vulnerability assessments”, conference hears

Barclays' Nassiokas says banks should test physical IT security

Vulnerability assessments are good as far as they go, but banks need to go beyond them to use ethical hacking, penetration testing and red-team physical testing, delegates at the OpRisk Asia conference in Singapore heard yesterday (April 25). Theo Nassiokas, Barclays’ director of cyber security for the Asia-Pacific region, warned vulnerability assessments could only be part of a proper cyber risk assessment.

“Ethical hacking – we go way beyond that,” he said. “We don’t just do vulnerability ass