The CNBV lacks methodologies and training programs for its own staff in data security matters.
Data recently present by the Superior Audit Office of the Feration (ASF) reveal that the National Banking and Securities Commission (CNBV) could be the victim of hacking, which raises concerns to the maximum throughout the re telegram database users list gulat financial industry.
The CNBV regulates supervises and
sanctions entities of the financial system.
The ASF identifi that until 2021, the Commission had weaknesses in critical cybersecurity controls; at least five were in r light.
This refers to the fact that there was a lack of control due to the compliance level being less than 30%.
These controls were:
Data protection;
Hardware assets;
Penetration testing;
Security awareness program;
Ne-to-know access.
And while it applies fines to institutions that are breach or whose staff does not have sufficient training in cybersecurity issues, at least until 2021, it did not train its staff in information security, cybersecurity and the main types of cyberattacks and there was no formaliz hacking awareness program.
Software development staff also did not receive training relat to writing secure code, cn numbers and althoug report is from 2021, there is no guarantee that they have been updat on these issues, since staff turnover is significant given the cuts in salaries and benefits.
Failure in asset management and service levels
From 2016 to 2022, the CNBV us computers us and leas by the company Mainbit
After using them during this period, the financial regulator fail to carry o with seo rules and ensure good positioning ut the “ secure deletion ,” the ASF report states.
1,519 secure deletion certificates
“Therefore, there is a that, if the data has not been delet, confidential information from the CNBV may be obtain .”
To motivate the channel, Pure Storage will integrate this equipment into the incentive program for channels that find new customers. giving them 1% of both sales and pre-sales ng a new logo.