This session provided a general overview of the ITU DFS Security  Lab and the assistance that it provides to developing countries to adopt the DFS Security recommendations. This session also introduced the ITU knowledge sharing platform. The ITU DFS Security Knowledge Sharing Platform was designed to foster collaboration among regulators and other stakeholders in the development and implementation of security guidelines and best practices for Digital Financial Services (DFS).

​ITU DFS security recommendations

This session presented the  security measures from the ITU DFS security recommendations to be adopted by DFS regulators and providers  to secure the telecom infrastructure and payment system infrastructure. In particular, the following recommendations were presented:

Following up on the ITU DFS security recommendations on Day 1, this session continued the elaboration of the security control measures to the application layer. As DFS cyber threats continue to evolve, protecting applications from vulnerabilities becomes paramount. The DFS application security best practices included in the ITU DFS security recommendations can be adopted by regulators to establish a minimum security baseline for DFS providers to build in security at the design phase. This session explored the security tests that are conducted in the ITU DFS security lab to verify compliance of mobile payment apps against the Security best practices. 

This session discussed the DFS security assurance framework that can be implemented by DFS providers to better manage the risks and mitigate their impact.