Question 4 Bank ABZ is an old bank that has its head office located in Lusaka, Zambia. The bank has many branches but the ATMs are installed only in the Lusaka branches. The bank has recently decided to invest in purchasing new ATMs to be located in all the branches across the remote areas of Zambia. Before starting the project, the company decide to hire an external IT consultant to conduct an audit in order to establish if the ATM business will support the company's' strategy and assist the company to make profit. One of the areas of fraud highlighted in the released report is Personal Identified Information (PII) theft. Areas mentioned includes, Credit Card Skimming, Dumpster Diving, and Phishing. The bank has hired you as the Information Risk Manager to assist to mitigate the risk of PII fraud. (a) Advise what the customers for Bank ABZ should do to prevent PII theft when using an ATMs in different branches and remote locations (8 Marks) The bank has previously experienced many frauds on the ATMs located in Lusaka. As the result, the CIO has asked you to create a scam book containing fraud awareness for all external and internal customers on the newly installed ATMs. (b) What recommendations would you suggest in the scam book on what the Bank ABZ customer should do if they are contacted via telephone by someone purporting to represent the bank and are asking to provide or update PII or account information? (8 Marks) The three key elements common to fraud are a financial pressure, a perceived opportunity and Rationalization (Fraud Triangle). (c) Discuss in brief the meaning of these three elements of fraud in line with Bank ABZ fraud (4 Marks)