Many substantial risks were identified during the assessment. Those risks mainly include:

• Lack of protection for the bank data at the level of the data base of some departments,
• Absence of confidentiality on the flows between the different departments.

In order to improve the protection level of the bank data, "high priority" and "more medium term" actions were identified to cover the risks.

Methodology