Mobile and online banking are seeing significant and continuing growth. But so are threats to IT and network security. With members using more services digitally alongside established channels, Debra Bailey, CIO at Nationwide, is taking a fresh look.

Seeking expertise, proven by a successful track record, Debra turned to BT. Based on a longstanding foundation of trust, the two companies joined forces to further protect Nationwide both now and in the future. The security of the company’s members and their information assets continues to be of prime importance.

Dynamic security assures safer digital banking.

Case study - Nationwide Building Society.

We regard it very much as a partnership. That’s made stronger by the fact that the two organisations have similar cultures. And we know BT has the capability and expertise across the globe in an area that Nationwide doesn’t.

Debra Bailey, CIONationwide Building Society

BT managed security with consultancy services and collaborative working helps Nationwide guard against ever‑changing security threats.

Case Study - Nationwide Building Society.

The digital age brings with it the need for extra vigilance.In retail banking, massive take‑up of mobile and online apps is eclipsing other channels. Nationwide is seizing the opportunity to give customers more personalised services, on the move, and it’s working harder than ever on making those services secure.

Debra Bailey, CIO, says: “With more of our services available digitally, it’s really important we help members protect their data. For a while now at Nationwide, our executive board has had an intense focus on this area.”

Banks are not alone in their efforts to tackle the threat landscape. Among current initiatives is a move by the UK government to co‑ordinate intelligence sharing in the industry. On the front line, however, banks have the ultimate responsibility. The danger is real, and it’s changing and intensifying all the time.

To cope with a shifting threat landscape, Nationwide needed an approach that was not only more rigorous but also more nimble.

New dynamic operational model takes nothing for granted.Nationwide and BT have a longstanding relationship. A good cultural fit and strong mutual trust mean the Nationwide executive board feels confident BT has the skills and resources needed.

“We’re reassured by the deep expertise BT shows in securing its own global network and those of other large organisations and government agencies,” says Debra.

A six‑year contract awarded to BT covers all aspects of IT and network security. It combines tried and tested methods with a new dynamic operational model. BT and Nationwide discuss all security developments – in the bank, in the industry and worldwide – to see if they call for an alteration in direction, no matter how small. Nothing is taken for granted and, with several parallel security projects, change is the only constant.

Luke Beeson, vice president for security in BT global banking and financial markets, says: “There’s no doubt the security landscape we operate in is becoming increasingly threatening, and we’re delighted to be partnering with Nationwide to help protect it against that menace as it grows and changes.”

Working hand‑in‑hand to protect members’ assets.BT provides fully managed services that incorporate design, implementation, and 24‑hour proactive and reactive monitoring. It ensures strength in depth by blending diverse vendors’ equipment in multiple control layers.

For the first time, operational teams from BT are permanently based in the Nationwide enterprise command centre. Debra confirms: “Nationwide is working in close partnership with BT to develop a comprehensive risk framework and security controls to protect our assets and our members’ assets from threats.”

The Financial Conduct Authority and Prudential Regulation Authority are jointly testing security controls and technologies. In developing and maintaining comprehensive ITIL‑based services, as the Nationwide security partner BT has to satisfy both its own quality criteria and industry standards like ISO 20000 service management accreditation.

At Nationwide, we see the regulatory requirements as the minimum standard. Our aim in working with BT is to over‑achieve against that standard and get one step ahead of the threats that are out there.

Debra BaileyCIONationwide Building Society

Our experience in securing our own organisation and hundreds of customers across multiple sectors provides us with unique insight into the latest threats. That means we’re perfectly positioned to help develop plans to protect against and mitigate such hazards.

Luke BeesonVice President, SecurityBT Global Banking & Financial Markets

Case Study - Nationwide Building Society.

Rapid adaptation to counter threats as yet unknown.Nationwide has focused its security strategy to deal with the changing nature of threats facing the retail banking industry and IT organisations in general. And BT is supporting this by helping to create an environment that will outsmart today’s would‑be attackers – and will also adapt to future demands as yet unknown.

“Our experience in securing our own organisation and hundreds of customers across multiple sectors provides us with unique insight into the latest threats,” says Luke. “That means we’re perfectly positioned to help develop plans to protect against and mitigate such hazards.”

The new Nationwide security strategy and operational model is expected to grow and evolve rapidly. That will allow it to be flexible and responsive in delivering more secure and better digital services to its customers.

Debra concludes: “At Nationwide, we see the regulatory requirements as the minimum standard. Our aim in working with BT is to over‑achieve against that standard and get one step ahead of the threats that are out there.”

Offices worldwideThe telecommunications services described in this publication are subject to availability and may be modified from time to time. Services and equipment are provided subject to British Telecommunications plc’s respective standard conditions of contract. Nothing in this publication forms any part of any contract. © British Telecommunications plc 2015. Registered office: 81 Newgate Street, London EC1A 7AJ. Registered in England No: 1800000

July 2016

Find out more:

Contact your BT account manager directly

Core services.• BT Assure extensive range of managed

security services