<commit_before># Security Law
=======================
1. Terminology
   ```
   BAI -- Bank Administration Institute
   OFAC -- Office of Foreign Assets Control (2 lists: SDNs & Blocked Persons List)
   BSA  -- Bank Secrecy Act
   CIP  -- Customer Identification Program
   SDNs -- Specially Designated Nationals
   AML  -- Anti-Money Laundering
   Title III -- International Moeny Laundering & Anti-Terrorist Financing Act (2001)
   314(a)    -- Share info with law enforcement agencies
   314(b)    -- Share info with other financial institutes
   CDD       -- Customer Due Diligence (Correspondent Account & Private Banking Account)
   SAR       -- Suspicious Activity Report
   CTR       -- Currency Transaction Report ($3000, $10000)
   CREF      -- Commercial Real Estate Fraud
   FinCEN    -- Financial Crimes Enforcement Network
   AIN       -- Alien ID Number
   Structuring -- Deposit a lot of small cash
   GLBA        -- Gramm-Leach-Bliley Act  (required written information security program)
   ```
2. Robbery (lone note robery & takeover robbery)
   ```
   Safety measures:
       (1) Don't obstruct doors and windows
       (2) Be ware of security cameras and alarms
       (3) Limit cash
       (4) Know the location of security devices
   OPEN (2 people)
       One in one out
       Perform sweap
       Enter when clear
       Now you're open
   CLOSE (2 people)
       Close building
       Lock doors
       Out with customers
       Secure with a sweap
       Enable alarms
   Good habits
       (1) Be ware of your surrounding
       (2) Practice good customer service
       (3) Pay attention to individual who comes in without doing business
       (4) Be alert for suspicious individuals or vehicles outside your institution
   ```
3. Privacy
   ```
   Why?
       (1) Shoulder Surfing
       (2) Dumpster Diving (paper shredder)
       (3) Email fraud
       (4) Physhing
       (5) Pretext
   Best way: educate customer how to protect their personal info
   Private Notice: Give it to new customer & annual privacy notice
   ```
4. Biometrics (Physical attributes)
   ```
   (1) Signature recognition
   (2) Fingerprint
   (3) Retina scan
   (4) Voice recognition
   (5) Keystroke scan
   ```
5. Prevent Identity Theft
   ```
   Minimize risk:
       (1) Doc destroy or store as privacy
       (2) Customer conversation private or written
       (3) Customer info in screen minimized
       (4) Additional security steps are taken when computer are unattended
   Impact if happens:
       (1) Legal penalty you and your institute
       (2) Financial loss
       (3) Take away customer sense of security
       (4) Institute experience negative publicity
       (5) Lose job
   ```
6. Attack 3 themes & how to use
   ```
   Blatant Behaviors
       (1) Dumpster diving
       (2) Shoulder surfing
       (3) Theft
       (4) Vendor Access
       (5) Desk/Countertop skimming (lock screen before leaving)
   Trust Trampling
       i) Social Networking
          (1) policy (institute resources, internet access)
          (2) username & password (unique, not use in financial)
          (3) to access profile as "private" & enable all secure option
          (4) only access people that you know
          (5) never share personal data (SSN, account #, passwords, BOD, high school name, city of birth, etc)
          (6) messages (distributing malware/virus)
       ii) Social Engineering (charm, intimidation, playing on your desire to help sb.)
           (1) player: forgetful customer, government official, senior manager
   High-Tech Hijinks
       i) spying
          (1) keylogging with virus
          (2) baiting (left DVD/CD, USB flash drive)
       ii) pretending
          (1) pharming (fake version website)
          (2) phishing (Email to link to bad website)
          (3) smishing (text to verify info, fake bank)
          (4) vishing (voiceover, internet protocol)
   How to use
       i) True name Fraud (create a new account)
       ii) Account Takeover Fraud (intercept credit card)
       iii) Unauthorized Transaction (change address)
       iv) Warning Sign: addr change, credit line increase request, 
           card replacement followed by addr change, dorment/inactive accounts
   ```
7. SECURE method
   ```
   Storing/Filing Doc (secure location, careful paper, not leave visible with other customer, secure info before leaving)
   Eliminating files/paperworks (shredding/locked receptacles)
   Computer/workstation setup (screen/lock)
   Username/password Confidentiality (no one to share, not write down)
   Requiring Proper Identification (6 primary forms)
       physical description, photograph, signature, recognized as an official ID, 
       info difficult to duplicate, info verifiable and renewable
   Exchanging info safely
       avoid exchange info verbally (write down to pass him/her)
       let customer write down SSN, finish to return
   ```
<commit_msg>abbr security<commit_after># Security Law
=======================
1. Terminology
   ```
   BAI -- Bank Administration Institute
   OFAC -- Office of Foreign Assets Control (2 lists: SDNs & Blocked Persons List)
   BSA  -- Bank Secrecy Act
   CIP  -- Customer Identification Program
   SDNs -- Specially Designated Nationals
   AML  -- Anti-Money Laundering
   Title III -- International Moeny Laundering & Anti-Terrorist Financing Act (2001)
   314(a)    -- Share info with law enforcement agencies
   314(b)    -- Share info with other financial institutes
   CDD       -- Customer Due Diligence (Correspondent Account & Private Banking Account)
   SAR       -- Suspicious Activity Report
   CTR       -- Currency Transaction Report ($3000, $10000)
   CREF      -- Commercial Real Estate Fraud
   FinCEN    -- Financial Crimes Enforcement Network
   AIN       -- Alien ID Number
   Structuring -- Deposit a lot of small cash
   GLBA        -- Gramm-Leach-Bliley Act  (required written information security program)
   OCC -- Office of the Comptroller of the Currency
   ```
2. Robbery (lone note robery & takeover robbery)
   ```
   Safety measures:
       (1) Don't obstruct doors and windows
       (2) Be ware of security cameras and alarms
       (3) Limit cash
       (4) Know the location of security devices
   OPEN (2 people)
       One in one out
       Perform sweap
       Enter when clear
       Now you're open
   CLOSE (2 people)
       Close building
       Lock doors
       Out with customers
       Secure with a sweap
       Enable alarms
   Good habits
       (1) Be ware of your surrounding
       (2) Practice good customer service
       (3) Pay attention to individual who comes in without doing business
       (4) Be alert for suspicious individuals or vehicles outside your institution
   ```
3. Privacy
   ```
   Why?
       (1) Shoulder Surfing
       (2) Dumpster Diving (paper shredder)
       (3) Email fraud
       (4) Physhing
       (5) Pretext
   Best way: educate customer how to protect their personal info
   Private Notice: Give it to new customer & annual privacy notice
   ```
4. Biometrics (Physical attributes)
   ```
   (1) Signature recognition
   (2) Fingerprint
   (3) Retina scan
   (4) Voice recognition
   (5) Keystroke scan
   ```
5. Prevent Identity Theft
   ```
   Minimize risk:
       (1) Doc destroy or store as privacy
       (2) Customer conversation private or written
       (3) Customer info in screen minimized
       (4) Additional security steps are taken when computer are unattended
   Impact if happens:
       (1) Legal penalty you and your institute
       (2) Financial loss
       (3) Take away customer sense of security
       (4) Institute experience negative publicity
       (5) Lose job
   ```
6. Attack 3 themes & how to use
   ```
   Blatant Behaviors
       (1) Dumpster diving
       (2) Shoulder surfing
       (3) Theft
       (4) Vendor Access
       (5) Desk/Countertop skimming (lock screen before leaving)
   Trust Trampling
       i) Social Networking
          (1) policy (institute resources, internet access)
          (2) username & password (unique, not use in financial)
          (3) to access profile as "private" & enable all secure option
          (4) only access people that you know
          (5) never share personal data (SSN, account #, passwords, BOD, high school name, city of birth, etc)
          (6) messages (distributing malware/virus)
       ii) Social Engineering (charm, intimidation, playing on your desire to help sb.)
           (1) player: forgetful customer, government official, senior manager
   High-Tech Hijinks
       i) spying
          (1) keylogging with virus
          (2) baiting (left DVD/CD, USB flash drive)
       ii) pretending
          (1) pharming (fake version website)
          (2) phishing (Email to link to bad website)
          (3) smishing (text to verify info, fake bank)
          (4) vishing (voiceover, internet protocol)
   How to use
       i) True name Fraud (create a new account)
       ii) Account Takeover Fraud (intercept credit card)
       iii) Unauthorized Transaction (change address)
       iv) Warning Sign: addr change, credit line increase request, 
           card replacement followed by addr change, dorment/inactive accounts
   ```
7. SECURE method
   ```
   Storing/Filing Doc (secure location, careful paper, not leave visible with other customer, secure info before leaving)
   Eliminating files/paperworks (shredding/locked receptacles)
   Computer/workstation setup (screen/lock)
   Username/password Confidentiality (no one to share, not write down)
   Requiring Proper Identification (6 primary forms)
       physical description, photograph, signature, recognized as an official ID, 
       info difficult to duplicate, info verifiable and renewable
   Exchanging info safely
       avoid exchange info verbally (write down to pass him/her)
       let customer write down SSN, finish to return
   ```

{'fraction_non_alphanumeric': 0.06922300706357215, 'fraction_numerical': 0.015338042381432895, 'mean_word_length': 2.5651079136690647, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1663251', 'n_tokens_mistral': 2696, 'n_tokens_neox': 2567, 'n_words': 1187}