Many banks tend to underestimate or even ignore the security of their websites, focusing instead on more sensitive web applications such as e-banking. Outsourcing, external backup, and cloud are also problems, says Ivan Ivanovic. Ivanovic: Many financial institutions ignore the fact that their IT supplier has a privileged access to financial records of the bank, and at the same time do not care about their own internal information security. In this area, paranoia is less expensive to the business than negligence.”]