Page 4 - Security testing for USSD and STK based Digital Financial Services applications Security, Infrastructure and Trust Working Group

DISCLAIMER
The Financial Inclusion Global Initiative (FIGI) is a three-year program implement-
ed in partnership by the World Bank Group (WBG), the Committee on Payments
and Market Infrastructures (CPMI), and the International Telecommunication Union
(ITU), funded by the Bill & Melinda Gates Foundation (BMGF) to facilitate the imple-
mentation of country-led reforms to attain national financial inclusion targets,
and ultimately the global 'Universal Financial Access 2020' goal. FIGI funds initia-
tives in three countries-China, Egypt and Mexico; supports working groups
to address three distinct challenges for reaching universal financial access:

(1) the Electronic Payment Acceptance Working Group (led by the WBG),
(2) The Digital ID for Financial Services Working Group (led by the WBG), and
(3) The Security, Infrastructure and Trust Working Group (led by the ITU) .

FIGI hosts three annual symposia to assemble national authorities, the
private sector, and other relevant stakeholders to share emerging insights
from the Working Groups and country level implementation.

This report is a product of the FIGI Security, Infrastructure and Trust Working Group,
led by the International Telecommunication Union. The findings, interpretations, and
conclusions expressed in this work do not necessarily reflect the views of the Financial
Inclusion Global Initiative partners including the Committee on Payments and Market
Infrastructures, the Bill & Melinda Gates Foundation, the International Telecommunica-
tion Union, or the World Bank (including its Board of Executive Directors or the govern-
ments they represent). The mention of specific companies, or of certain manufacturers’
products does not imply that they are endorsed nor recommended by ITU in preference
to others of a similar nature that are not mentioned. Errors and omissions excepted, the
names of proprietary products are distinguished by initial capital letters. The FIGI part-
ners do not guarantee the accuracy of the data included in this work. The boundaries,
colours, denominations, and other information shown on any map in this work do not
imply any judgment on the part of the FIGI partners concerning the legal status of any
country, territory, city or area or of its authorities or the endorsement or acceptance of
such boundaries.

© ITU 2020
Some rights reserved. This work is licensed to the public through a Creative Commons
Attribution-Non-Commercial-Share Alike 3.0 IGO license (CC BY-NC-SA 3.0 IGO).
Under the terms of this licence, you may copy, redistribute and adapt the work for
non-commercial purposes, provided the work is appropriately cited. In any use of this
work, there should be no suggestion that ITU or other FIGI partners endorse any specif-
ic organization, products or services. The unauthorized use of the ITU and other FIGI
partners’ names or logos is not permitted. If you adapt the work, then you must license
your work under the same or equivalent Creative Commons licence. If you create a trans-
lation of this work, you should add the following disclaimer along with the suggested
citation: “This translation was not created by the International Telecommunication Union
(ITU). ITU is not responsible for the content or accuracy of this translation. The original
English edition shall be the binding and authentic edition”. For more information, please
visit https:// creativecommons .org/ licenses/ by -nc -sa/ 3 .0/ igo/