Digital Financial Services Security Clinic – Pakistan

The main objectives of the DFS Security Clinic are to share the findings and recommendations from the FIGI Security Infrastructure and Trust working group for regulators and DFS providers with regards to addressing security challenges for digital finance.

The event provided insights into security best practices for SIM swaps, mobile payment applications operating on USSD, STK and Android, methodology for testing security of mobile payment applications and addressing infrastructure vulnerabilities such as SS7. The participants of the event:

• Learnt about the different infrastructure and application vulnerabilities within the DFS ecosystem.
• Learnt about the DFS security assurance framework, security governance and how to manage security risks in the DFS ecosystem.
• How to mitigate DFS threats and how to perform continuous assessments on the security of DFS to ensure applicable controls are in place to mitigate threats and vulnerabilities.
• Learnt about the recommendations for regulators on SS7 vulnerabilities, SIM swap fraud and application security best practices.