Director General of Tehran Standards organization, honoring the World Standard Day, said in the ceremony, “BMI is the first bank in the country succeeded to achieve the INSO 17025 and INSO 15408 laboratory standard certificates in the fields of Information Technology, Security Techniques, Information Technology Security Evaluation Criteria (ITSEC) and Security Guarantees Components. The bank also received the INSO 20843 (ISO/IEC 25051) standard in Software Engineering, System and Software Quality Requirements and Evaluation of Testing Instructions from the National Standard Organization of Iran,” according to a report from Public Relations of Bank Melli Iran (BMI).
“Receiving these certificates is not a small success. That required hard work, knowledge and continued perseverance, which has been well demonstrated in the BMI performance,” he added.
“Given the threats to the country in a virtual environment, the bank’s measure was a positive move that I hope other banks would also follow the leading BMI and launch such a standard software laboratory,” he said, pointing out to the significance of security, particularly security of banking software.
“One of the standards organization’s achievements was developing service standards- informatics is one of its sub-branches- in addition to the product standards. Therefore, eligible institutions could simply get the certificate and comply with the standards,” Director General of Tehran standards organization, stated, explaining the organization’s achievements over the transformation period.
" One of the advantages of Software Security and Quality Laboratory of BMI is considering various filters for the software security measurement and improving security and reliability for the software user,” he continued.
“In the BMI laboratory, banking systems are evaluated in four sections of web, mobile, desktop systems and quality (functional) review penetration tests,” said Majid Turkamani, head of Network and Infrastructure Department, explaining about the IT performance of BMI.
“This laboratory aims to monitor, supervise, guarantee and confirm penetration tests of systems and mobile and desktop products, banking system simulation, security processes test, research and specialized studies, periodic security evaluation of banking products and services, evaluation of malicious codes (malicious codes cause vulnerability of banking products), assessing and providing solutions for problems existing in configurations and modeling, proposing and evaluating banking network security,” he said.
“This unique laboratory, launched by the IT experts of BMI, intends to transfer its scientific and operational capability to the organizations and institutions performing in the financial and credit industry, due to the obtaining certificate from National Standard Organization,” Turkamani stated.
At the end of this ceremony, the director general of Tehran standards Organization awarded certificate 17025 to the head of the network and infrastructure department of BMI by.