Banks’ Pledge to Fight Climate Change Isn’t Universally Lauded

Environmental groups criticize pact as a P.R. stunt that masks their un-green activities.

The banking industry, or at least a chunk of it, is making a commitment to be greener, touting an agreement at the United Nations in New York this week to push for a reduced carbon future and other means of combating climate change.

The agreement is not enough for some environmentalists, who staged a protest Monday outside the Manhattan office of the French bank BNP Paribas. That’s where a symposium of bank executives met to discuss their adherence to the Principles for Responsible Banking, as their climate effort is known.

The protesters labeled the bank pact “greenwashing,” a variant of whitewashing. They say the agreement is a ruse designed to make the banks look more climate friendly than they are in practice.

A coalition of environmental groups, including Greenpeace and the Rain Forest Action Network, applauded the intent of the banking document but denounced its signatories as hypocrites. In a statement, the coalition said the bank initiative “was yet another greenwashing tool that masks the destruction of the planet and egregious human rights abuses that are currently being fueled by much of the banking sector.”

Never miss a story — sign up for CIO newsletters to stay up-to-date on the latest institutional investment industry news.

The bank climate initiative, which was formally launched at the United Nations on Sunday, is part of the world body’s Climate Action Summit, coinciding with the convening of the UN General Assembly. The UN climate events comes after world-wide youth rallies last week decrying environmental degradation.

The principles, which 130 banks with a combined $47 trillion in assets have signed, require them to develop concrete plans on how they will fight climate change–such as by funding renewable energy and moving away from fossil fuels. The accord binds banks to publishing their goals and meeting them. If they don’t, they get kicked out of the pact.

For some banks, satisfying environmental goals will be easier than for others. Dutch giant ING, for instance, is into funding renewables. Its CEO, Ralph Hamers, told the bank gathering Monday that “we exited coal two years ago.” The Netherlands, though, doesn’t have much of a coal industry.

Contrast that to Norway’s DNB, which is heavily involved in extracting North Sea oil. Its chairwoman, Olaug Svarva, told the banking conclave that “oil and gas will be part of the mix for years to come” because making the switch suddenly out of fossil fuels is impossible. As an audience member booed her, she added that DNB was directing its lending toward gas, which is cleaner than oil. She said the bank  would lend $25 billion by 2025 to boost renewables.

Large U.S. banks were conspicuous by their absence among the pact signers, the exception being Citigroup, which advertises itself as environmentally friendly. The lone other U.S. lender was union-owned Amalgamated, whose devotion to ecological causes has a long history.

The bank executives talking Monday expressed hope that other large institutions will join their effort. Other than the US lenders, several large banks are on board. They included France’s Société Generale, Britain’s Barclays, and Spain’s Santander.

The environmental coalition made a point of highlighting the activities of various banks which it deemed contrary to the pact’s goals. The group noted Citi’s involvement in commodity trading, which the critics claimed was linked to Amazon deforestation.  Citi did not return a request for comment.

Related Stories:

Climate Change, Trade Collapse, and Cyber Warfare Among Top Investor Risks

Institutional Investors Attack Climate Change by Responsible Investing

Climate Change Risk a Threat to Scottish Pension Funds

Tags: , , , ,

Organizations Relying on Ethical Hackers to Improve Security Postures

‘Bug bounties’ offered by major technology companies to help find vulnerabilities.

When it comes to cybersecurity, sometimes the best defense is a good offense.

Hence, offering “bug bounties”financial rewards for discovering potential vulnerabilities in software and systemsis becoming increasingly popular. Technology companies and large enterprises alike have been offering financial incentives, well into the six-figure range, for wily white-hat hackers who can find potential gaps that cybercriminals might exploit for financial gain or other reasons.

Bug bounties have become such a hot topic that last month’s Black Hat USA conference dedicated a half-day “micro-summit” to covering hosting a private versus a public bounty, writing a great bounty brief, the common pitfalls of bug bounty programs, legal ramifications, measuring and reporting on bug bounty program success, and crisis management surrounding bug discoveries. Technology industry behemoths Microsoft and Apple both announced last month that they would be expanding their bug bounty programs.

Apple, for example, is widening its bug bounty program to all security researchers, whereas previously it was invite-only. Apple has also significantly upped the ante on finding vulnerabilities, from a former top reward of $200,000 to as much as $1 million for those who find vulnerabilities in Apple’s iPhones and Macs. Now, any researcher can submit discovered vulnerabilities and earn as much as $100,000 for unauthorized access to iCloud account data on Apple servers, or up to $1 million for a full chain kernel code execution attack. Additionally, bugs found on “designated pre-release builds” are eligible for a 50% bonus.

Never miss a story — sign up for CIO newsletters to stay up-to-date on the latest institutional investment industry news.

Ivan Krstić, Apple’s head of security engineering, said that next year, Apple will provide special iPhones to security researchers to help them find security flaws in iOS. Apple did not start offering a bug bounty program until 2016, and even then, it was only for iOS and iCloud.

Apple has long been notoriously isolated, relying on its internal developers when it comes to handling security vulnerabilities. The fact that even this Silicon Valley giant is getting into the big bounty game,  offering large rewards for those who can catch vulnerabilities, points to a sea change in the way that organizations view and handle IT security incursions.

For its part, Seattle-based tech titan Microsoft is offering $300,000 to anyone who can successfully hack Microsoft’s Azure public-cloud infrastructure service. Kymberlee Price, Microsoft security manager, said at Black Hat’s micro summit, “To make it easier for security researchers to confidently and aggressively test Azure, we are inviting a select group of talented individuals to come and do their worst to emulate criminal hackers.”

 Related Stories:

Fintech Can Improve Returns, But Asset Owners Must Also Protect Data Privacy and Cybersecurity

 

 

Tags: , , ,

«