In reply to Frank.

Hi Frank, You bring up a good point: it is not only having a secure technology environment. Financial institutions need to attend to process and training their staff. Training employees goes a long ways in protecting the enterprise. Technology can go a long ways in making sure customer data does not get downloaded to a PC, but sometimes a weak link is training a policy adherence. Today, even clicking on an "interesting" email, can lead to opening a door for a malicious attack.