BinckBank is an independent online bank with offices in the Netherlands and Belgium. At the end of 2007 BinckBank completed the takeover of Alex, the online broker of Rabobank. The takeover led to the creation of the largest independent online broker in the Netherlands with a top-5 position in Europe.
The takeover resulted in the creation of an organisation with approximately 550 employees and a consolidation of policy, organisation and technology. Within these parameters it was thought advisable to increase the security awareness of all employees to the same required standard. So QNH developed and implemented a security awareness programme for BinckBank.
The security awareness programme was designed to reduce the risks to an acceptable level, to gain feedback that would lead to concrete improvements, and to assure the required level of information security. The resulting changes in the knowledge, sense of responsibility and behaviour of the employees mean that (impending) security incidents are now reported, recognised and/or prevented. The security awareness programme provides for transfer of knowledge of the risks, policy, guidelines drawn up by BinckBank, and management practices that encourage desirable behaviour, and promotes employee commitment and responsibility.
The development of the approach was based on an integral business vision (the integration of business processes, communication, data and infrastructure). The definition of the ‘ist' and ‘soll' situation is an important part of this approach. The project was customised through the use of Deming’s management cycle (plan-do-check-act) and the addition of an assurance element. BinckBank opted for an approach that produced concrete results during the process.
