NBAs offering services to individual or institutional users should be aware of the potential data and system security issues faced by any organisation offering online access. It is outside of the scope of this site to offer detailed information on this topic but security threats fall into three broad categories: system integrity threats and risks to user data. NBAs should take measures (e.g. anti-virus protection, secure firewalls, regular password changes etc.) to ensure that their systems and services reduce security risks to a minimum. In addition, NBAs should undertake regular audits to ensure their security measures remain adequate.