BITS Decade of Difference
Review of BITS' First Ten Years and a Look Ahead
(September 2006) (Large download file)
Contact Ann Patterson to have a copy mailed to you.

• Aggregation Services
• Crisis Management Coordination
• e-Insurance Risk Management
• Fraud Reduction
• Vendor Management
• Mobile Financial Services
• Operational Risk
• Payments
• Security

Aggregation Services

• BITS Voluntary Guidelines for Aggregation Services (January 2004)
  

Back to Top

Crisis Management Coordination

• Pandemic Resources (May 2008)
  
• BITS Guide to Business-Critical Power
  (September 2006)
  
• Protecting the US Critical Financial Infrastructure: An Agenda for 2005 (May 2005)
  Source: Financial Services Sector Coordinating Council
• Improving Business Continuity in the Financial Sector: A Model for Starting Regional Coalitions (December 2004)
  
• BITS Guide to Business-Critical Telecommunications Services (November 2004)
  
• Homeland Security Strategy for Critical Infrastructure Protection in the Financial Services Sector (May 2004)
  Source: Financial Services Sector Coordinating Council
  

Back to Top

e-Insurance Risk Management

• BITS Technology Risk Transfer Gap Analysis Tool(April 2002)
  

Back to Top

Fraud Reduction

• BITS Online Fraud Library
• BITS Mortgage Fraud Prevention: An Education and Awareness Toolkit for Consumers
  (January 2008)
  
• BITS Debit Card/ATM Fraud Resource List
  (January 2008)
  
• BITS ACH Check Conversion Risk Management Toolkit (March 2007)
  
• 2006 Accomplishments BITS Fraud Reduction Program (January 2007)
  
• BITS Remote Deposit Image Capture: The Processes, Risks and Strategies Used to Mitigate Them (September 2006)
  
• BITS Fraud Protection Toolkit: Protecting the Elderly and Vulnerable from Financial Fraud and Exploitation (February 2006)
  
• BITS Fraud Protection Toolkit: PowerPoint Presentation (February 2006)
  
• BITS Fraud Protection Guide: Protecting the Elderly and Vulnerable from Financial Fraud and Exploitation (October 2005)
  
• Strategies for Mitigating Fraud Risks Associated with the Check Clearing in the 21st Century Act (October 2004)
  
• BITS Voluntary Guidelines for Collections in the Financial Services Industry (March 2004)
  
• BITS Fraud Reduction Guidelines: Strategies for Identity Theft Prevention and Consumer Assistance (July 2003)
  Documents to Assist Members in Addressing Email Hoaxes (July 2003)
  
  • Questions for Financial Institutions to Ask Customers Calling to Report an Email Hoax
    
  • Memo to the US Secret Service and FBI on Reporting Email Hoaxes
    
• Financial Identity Theft: Prevention and Consumer Assistance (May 2003)
  
• Fraud Prevention Strategies for Internet Banking (April 2003)
  

Back to Top

Vendor Management
Financial institutions, service providers and consultants interested in outsourcing security should also visit The Financial Institution Shared Assessments Program webpage.

• BITS Outsourcing Glossary of Terms
  (January 2007)
  
• BITS Key Considerations for Global Background Screening Processes (June 2005)
  
• Key Contractual Considerations for Developing an Exit Strategy (May 2005)
  
• BITS IT Service Providers Expectations Matrix (January 2004)
  The Expectations Matrix is replaced by the Financial Institution Shared Assessments Program documents - the Agreed Upon Procedures (AUP) and the Standardized Information Gathering (SIG) questionnaire.
• BITS Framework for Managing Technology Risk for IT Service Provider Relationships
  (November 2003)
  

Back to Top

Mobile Financial Services

• BITS Mobile Financial Services: Recommendations for Business Requirements and Technical Guidelines (April 2002)
  

Back to Top

Operational Risk

• Reconciliation of Regulatory Overlap for the Management and Supervision of Operational Risk in US Financial Institutions (October 2005)
  
• Developing a KRI Program: Guidance for the Operational Risk Manager (September 2004)
  
• BITS Kalculator: Key Risk Measurement Tool for Information Security Operational Risks (July 2004)
  
• Kalculator Spreadsheet
  
• Kalculator Spreadsheet – Sample
  

Back to Top

Payments

• BITS Partner Group: Third Party Payments System Access Control White Paper and Recommendations (May 2007)
  
• BITS Partner Group: Liability Flows Among Networks - Comment Letter on Cross-Network Liability (May 2007)
  
• Account-to-Account Services: Emerging Product Overview (March 2005)
  
• Check 21 Resource Document (March 2004)
  Collaborative publication by 16 financial services-related organizations
• Safekeeping and Electronification in the Financial Services Industry (January 2003)
  Charles E. Siegmann, Mercantile Bankshares Corp. and Grant Cole, Bank of America Corp.
  

Back to Top

Security

• BITS Enterprise Key Management (May 2008)
  
• BITS Email Security Toolkit: Protocols and Recommendations for Reducing the Risks
  (April 2007)
  
• BITS/ABA Key Considerations for Responding to Unauthorized Access to Sensitive Customer Information (November 2006)
  
• BITS Consumer Confidence Toolkit: Data Security and Financial Services (October 2006)
  
• Catherine Allen's Editorial in American Banker
  Viewpoint: Defining and Designing the New Security (September 2006)
  
• BITS and Financial Services Roundtable Letter: Security of Municipal Broadband Networks
  (June 2006)
  
• BITS Key Considerations for Securing Data in Storage and Transport: Securing Physical Media in Storage, Transport, and for Data Erasure and Destruction (April 2006)
  
• Voluntary Guidelines for Consumer Confidence in Online Financial Services (September 2005)
  
• Critical Success Factors for Security Awareness and Training (September 2005)
  
• Results of BITS Research and Development Survey (July 2005)
  
• BITS Best Practices for Software Patch Management (July 2004)
  
• BITS/FSR Software Security Toolkit
  (February 2004)
  

BITS Publications
Comment Letters
Public Testimony
Presentations
BITS Bulletin Archive

"The BITS Strategy for Identity Theft Prevention and Victim Assistance is an outstanding example of the excellent work BITS is doing for the financial services industry."