Security in the digitalization of banking services for individuals

It was found that many key aspects of security remain underdeveloped in banks: security system testing, vulnerability management, network segmentation, response and recovery capabilities, information access management. To prevent and neutralize cyberattacks, the general culture of information security management in banks should be raised by regularly assessing the state of information security, storing critical information in the cloud environment, planning response measures to accidents and attacks, focusing on prevention, early detection and rapid recovery, a system of continuous training of bank personnel and clients to prevent errors, timely updating of software products for protection against external threats. Banks should ensure appropriate management and supervision of outsourcing agreements (supplier risk). The ISO 27001 certificate confirms the system's compliance with the requirements of the information security standard, but Ukrainian banks in practice are moving in this direction at different speeds. Ensuring information security should be systemic; banks should continuously improve information security management; measures to protect against threats to the bank's information security must be timely and adequate; ensuring an adequate level of information security for the bank is impossible without support and control from the bank's managers, in particular, providing sufficient resources for the development of information security. One of the key factors is also training users (clients) in the rules of prudent behavior.