Case Study /

FCA regulation & Compliance for a money transfer provider

FCA regulation & Compliance for a money transfer provider

Client

Our client, BCRemit is a respected, global money transfer provider that has been recognised as one of the top 100 Fintech Disruptors. Specialising in fast, reliable, and secure payment transfers, BCRemit has been helping its customers get the best exchange rates with competitive, low transfer fees. BCRemit enable their customers to enjoy a seamless money transfer experience and peace of mind through their extensive bank/partner outlets and award-winning mobile application.

FCA - Operational & Security Risk, Compliance & Governance

All Payment Service Providers (PSPs), like BCRemit, must submit their Operational & Security Risk Assessment reports to the FCA at least once a year.

Like any other PSP, systems, people, legal, process, security and compliance risks for BCRemit constantly evolve due to external (eg political, regulatory, etc) or internal (eg deployment of new systems, software, etc) pressures.

Inadequate security and operational risk mitigation measures would have an adverse impact upon the quality of service afforded to BCRemit’s clients, and potentially be damaging to their reputation.

Strengthen their cyber resilience to mitigate operational and security risks withcontrol mechanisms

Have visibility and oversight with escalation mechanisms in place supporting their risk framework

Ensure continual monitoring arrangements are in place to prevent cyber attacks

Embed a ‘Security & Compliance by design’ framework which increases BCRemit’s security posture against internal and external cyber risks.

Solution

Proactive monitoring and defence for BCRemit’s network and security infrastructure using BlockAPT’s central management system active detection including endpoint and devices monitoring and security for:

  • Malware protection
  • Ransomware protection
  • Advanced endpoint protection

Used BlockAPT’s central management system as part of the overall infrastructure monitoring

Used BlockAPT’s central management system as part of the overall infrastructure management

Used BlockAPT’s central management system as part of the overall infrastructure orchestration

Risk Assessment of Processes and Information Assets

External: Used BlockAPT’s central management system to provide overall visibility of cyber threats and prevent breach of sensitive data resulting from cyberattacks. Automated and orchestrated monitoring and response to mitigate against external cyber threats – Advanced Persistent Threats (APTs)

Internal: Cyber threats for malicious and fraudulent activities from employees or administration continuously monitored via the BlockAPT Platform for ongoing visibility and response

Robust network and security scans to check for emerging risks using the BlockAPT Platform

Cyber Analysis & Risk Monitoring

Network transactions risk monitoring and alerts

Alert on malicious network traffic related activities

Web application transactions risk monitoring and alerts

Alert on malicious applications traffic related activities

API transactions risk monitoring and alerts

Alert on malicious API traffic related activities

“Our security, governance and risk framework is critical to our business so it is important to have a proactive, centralised management system in place which can give us a defined structure, orchestration and transparent visibility across our security and network infrastructure. BlockAPT’s Platform has not just strengthened our compliance with the FCA Operational & Security Risk Report but increased our cyber resilience and confidence so we are better placed to protect our business and customers globally…”
Oliver Calma
Chief Executive Officer