This internship opportunity at Secure Banking Solutions provides interns experience in information security through technical projects, social engineering exercises, and security awareness training. The intern's roles would include assessing vulnerabilities, managing security awareness training programs for clients, conducting pretext calling and social engineering tests to educate clients, and creating mock unknown media devices to test security controls. The goal is to give interns practical, real-world experience in diverse information security areas to supplement their academic knowledge.

1. Secure Banking Solutions Internship
SEPTEMBER 9TH – DECEMBER 9TH
1

2. My Job Title
Christian Ries
Information Security Consultant Intern
Email: Christian.ries@protectmybank.com
2

3. Outline of Topics
 Why is Security Important?
 My Role at SBS
 Example Work
 Technical Services
 TRAC
 Support Staff Projects
 Social Engineering
 Pre-Text Calling
 Unknown Media
3

4. Why is Security important?
C onfidentiality
I ntegrity
A vailability
4
The Pros & Cons of an
overly Secured Bike

5. My Role at SBS
Technical Services
Social Engineering
Support Staff Projects
5

6. Technical Services
 TRAC
 ‘Homework’ – Assignments
 Client Accounts
 Projects
 Data Entry
 SBS Institute
 ‘Work Papers’
 VA (Vulnerabilities Assessment)
 Vendor Management
 Security Awareness Training
6

7. Technical Services 7
Gain practical and factual
knowledge regarding in
depth business processes

8. Security Awareness Training
 Great Final Project to recapture information and experience gained during
internship
 Unique opportunity to get actual face to face experience with client
8

9. Social Engineering
 Human-based
 Pretext Calling
 Physical Impersonation
 Computer-based
 Phishing
 Unknown Media
9

10. Pretext Calling
 Social Engineering over the phone
 Surprisingly Easy
 Information is everywhere
 Very Effective
 Help Educate Clients with practical examples instead of boring theory
 Example Compliance Officer
 “SE” Reports
10

11. Social Media
 Public Information
 Facebook, Twitter, etc.
 Makes Identity theft easy
 Number one source for intel
 Once information is online, you can’t possibly tell who has access to it
 Example (Online Dead Certificate)
 “Think like a bad guy”
 Use this weakness of new Social Norm to demonstrate importance of Security
11

12. Technical Exploitation
 Using technical means to obtain information
 Email
 Malicious Files
 Hardware
 Extremely efficient when combined with
Social Engineering
 Phishing
 Physical Impersonation
12

13. Unknown Media Devices
 Type of Social Engineering
 Used to further test security controls for client
 Created multiple physical devices
13

14. Summary
 Diverse ‘Field of Study’ related work environment
 Ability to gain lot’s of real world experience
14

15. Thank You For Your Time
15