Reach, RE: TCF
TCF isn't a huge bank, only 8000 employees (only lol). Basically they are aware of the TCG and the TPM, but are not implementing it today (per this guy). He wasn't the "head" decision maker, but he was head of their fraud team and was aware of their current implementation.
What he said was:
-the Feds are there every week harassing them about audit trails
-they have a number of checks in place for on line banking
-they use pointsec drive encryption
-they have employee system checking to ensure data is not copied and taken home
-they don't adopt non-"mature" technology
...and some other stuff. I talked to him for about 20 minutes. I discussed the STX drive and he was going to take that info to his other groups. Basically, he said other institutions may be more "cutting edge" than them, but they were a smaller outfit but took security seriously. He did verify before contacting me that I had an account with them. He was also very concerned about me moving my account away from them and continued to ask what banks I was considering and what their responses were to my questions.
