In this episode of CredinTalks, Giulia Crippa speaks with Andrea Clerici, Head of Information Security at Credinvest Bank, exploring the evolution of cybersecurity and the shared responsibility between banks and clients in protecting data.
Cybersecurity is no longer merely a technical matter focused on preventing attacks; it has become a continuous strategic priority involving technology, people, and processes, requiring adaptability and resilience.
The growth of online banking, digital applications, and cloud services has significantly widened the attack surface, making a structured approach to system protection and operational continuity essential.
Credinvest Bank manages security through an integrated approach, supported by an in-house IT team working alongside a dedicated cybersecurity specialist. Internal management enables deep knowledge of the infrastructure, swift response times, and constant system oversight. This is reinforced by continuous monitoring, specialised testing, and application development based on the principle of security by design. Particular emphasis is also placed on continuous employee awareness and specialised cybersecurity training, alongside prompt customer support.
Data protection does not depend solely on the bank’s infrastructure. Clients also play a key role by using strong passwords, secure credential management tools, multi-factor authentication, regular updates, and by remaining vigilant against phishing attempts.