Geneva, Switzerland, 4-5 December 2019
The International Telecommunication Union (ITU) in joint collaboration with the Bill & Melinda Gates Foundation, the World Bank Group, and the Bank for International Settlements, organized a workshop on Security, Infrastructure and Trust for Digital Financial Services which took place from 4-5 December 2019 at ITU Headquarters, Varembe 2, Geneva, Switzerland.
The main objective of the FIGI Security Clinic was to present the findings of the
Security Infrastructure and Trust Working Group
through a set of technical conferences and clinics for security practitioners. The first day sessions were a conference where the findings of the Security, Infrastructure and Trust Working Group on the following topics were shared and discussed:
- Mitigation of SS7 vulnerabilities and threats for digital financial services;
- Implementation of strong consumer authentication technologies to enhance security and provide a seamless user experience when using DFS;
- Development of a security assurance framework for DFS providers and telecom operators to better manage risks and threats to their systems; and
- Insights into the vulnerabilities of DFS applications based on USSD and STK and how these can be mitigated.
The second day of the event consisted of a series of security clinics targeting mainly those who are actively involved in technical security implementation in the area of digital financial services. These Security Clinics ran in parallel for the whole day on 5 December and participants registered for only one clinic, depending on their area of interest, as seats are limited. Some of the topics covered during the security clinics on 5 December include, amongst others:
Participation in the workshop was open to ITU Member States, Sector Members, Associates and Academic Institutions and to any individual from a country that is a member of ITU who wishes to contribute to the work. This included members of international, regional and national organizations, Telecom regulators, Central Banks, DFS Providers, Fintech Industry, IT Security, Payment Service Providers, Mobile money platform providers, Digital Currency platform providers and Law enforcement agencies in the field of digital finance. Participation in the workshop was free of charge.