How a Major Bank is Protecting Systems and Data From Cyber-Attacks Remediating Security Vulnerabilities

The customer is a leading US-based provider of payments and financial services technology solutions for banks, credit unions, retailers, and government institutions worldwide. Their innovations span digital banking, account processing, card issuing, merchant acquiring, payment gateways, and cloud-based point-of-sale solutions.

They deliver retail banking functionality on mobile devices for over 2,800 financial institutions. Their core offering is a hosted, white-label solution that integrates seamlessly with various online and core banking systems and can be customized for a fully branded experience.

Challenge

With the exponential growth of mobile and online banking, the customer faced increasing demands for product enhancements from a growing user base. At the same time, cyber security risks have become more complex, requiring threats to be effectively managed.

They needed to integrate data protection into every layer of their mobile and online banking solution.

To address these risks, the customer sought a technology partner with both banking expertise and proven capabilities in managing advanced cybersecurity threats to prevent financial loss and safeguard their reputation.

Solution

Orion was engaged to assist the client in accelerating a cybersecurity remediation program. The banking platform includes a core processor, as well as mobile banking and virtual banks. Orion set up multiple pod teams with various skill sets that matched the needs of the banking solution. The pod teams operated in a co-location model that spanned three time zones, thus ensuring that business, product, and technology teams were well-coordinated.

Orion established a risk prioritization process, which categorized the vulnerabilities as high, medium, and low based on various technology and business parameters. The remediation program was executed in Kanban style and program metrics were created to measure the program success. The solution used key mobile frameworks like Android and iOS, as well as .NET and Selenium.

Impact

As a result of its structured program, governance, and deep knowledge of cyber remediation, Orion remediated more than 70,000 vulnerabilities (including 50,000+ critical and high issues) in two years across 4 digital banking platforms.

A month before the target date, our team brought critical and high vulnerabilities down to zero. We also reduced their average security scan duration by 40%, enabling self-service scanning.