A Case Study on the Information Security System of Al Wahda Bank

Abstract

This case study looks at the information security system in use by the Information Security Unit at Al Wahda Bank in Libya. It is an examination of the policies and tools used for the security of 2 main areas: software & information and data. For software security, the case study examines the security policies and tools for the following 2 aspects: the software development process related to all software developed for the bank, and the protection of all devices from malware. For information and data security, the case study examines the security policies and tools for the following 5 aspects: information and data classification, information and data storage, information and data backup, information and data communication, and information and data disposal. Afterwards, we briefly analyze the information security system. Our analysis leads us to identifying 3 areas for further review: difficulty in monitoring 3rd party software development, inconsistency between policies and actual implementation, and the retention period of ‘unwanted’ information and data.