Case study

Conduct a risk assessment for the scenario below

A bank clerk stole money from a customers account. The clerk changed the customers address to his own, issued an extra card for the account (which he received), and then changed the

address back again. He withdrew money from ATMs. The

customer did not notice the thefts for a long time because of

the way the banks system worked: When a customer gets a

statement from an ATM (as the clerk always did), that

transaction did not appear on the statement that was mailed.

Source: Secure Computing, Summers

What is the threat?

What vulnerabilities exist?

What safeguards may have helped avoid this situation?