That is what the safety and cyber security certification process is for. In your given example, that's iso27001/13/15 depending on what the bank itself does in

That is what the safety and cyber security certification process is for. In your given example, that's iso27001/13/15 depending on what the bank itself does in their operation. The company owning the certification owns the responsibility. No cheating through cheap cyber security consultant chop shops from India anymore.