Connect. Stay Connectedaeg-mea.com

Company Profile

Contents

ABOUT US

MESSAGE FROM THE CEO

OUR SOLUTIONS

SWIFT Service Bureau

Payment and Reconciliation

System Integration

Compliance

Business Continuity

Security

Messages Reporting and Notification

Professional Services

6

5

10

10

10

11

13

13

Our History

Our Philosophy

Our Presense

Our Team

Our Partners

6

7

8

8

8

What We Do 9

14

16

17

“At AEG, we take the initiative to serve your

needs with the utmost professionalism in order to provide you with the extra

edge you need to succeed in a highly competitive

business world”

Message from the CEOOur efforts at AEG have always been driven by the commitment that our clients have entrusted us with. We are dedicated to providing optimal end-to-end solutions as timely, accurate and secure as can be. Moreover, today’s hostile environment has raised the bar of challenge regarding security and cyber fraud. We are treating matters of security as top priority, especially with the banking sector, and we are offering our clients all the assistance they need to be protected and compliant.

We aim to retain strong customer relationships and to match the growing demands of the industry through our proactivity, competence, and high quality support.

Dr. Mohamed Sadek

6

OverviewAllied Engineering Group (AEG) is one of the leading providers of IT solutions serving banks in the Middle East and Africa. AEG o�ers products and services that facilitate payment and money transfer, reconciliation, system integration, �ltering and compliance, business continuity, information security, and reporting.

AEG was founded in January 1994 as a system solutions provider for the banking sector. In 2003, AEG has launched its SWIFT services Bureau. AEG stands today among the top SWIFT Service Bureaus worldwide with around 390 members bene�ting of its services. In 2014, AEG Service Bureau was accredited to be fully compliant with operational requirements of the “Standard Operation Practice” level as de�ned in the “SWIFT Shared Infrastructure Program”.

AEG has achieved over 1,000 successful implementations for nearly 800 Clients in more than 50 countries in the Middle East, GCC, Africa and Europe. AEG currently has around 390 active members subscribed to its Service Bureau and around 500 Clients in total under Support contract.

About usWe enable our clients to further advance their performance and expand their capabilities of doing business by leveraging our cutting-edge solutions, backed by our Support and Training services.

We cooperate with our clients in order to evaluate the challenges they are facing and understand their growing needs introduced with the ever evolving world of technology.

We strive to achieve customer satisfaction by being proactive; we inspect problems ahead of us and �nd early solutions in order to save our clients and surpass possible obstacles. Our continuous research and relentless pursuit of state-of-the-art solutions allow us to serve our clients more optimally and more fully.

“We offer you the best solutions allied with our high quality services”

“AEG was founded in 1994 as a system solutions provider for the banking sector.”

“We enable you, we cooperate with you, and we strive for you”

Our HistoryIn 1997, we partnered with SWIFT and became a Regional Business Partner and prime provider of SWIFT products and services in the Middle East and Africa.

�roughout the years, AEG has managed to attain a number of valuable partnerships with leaders in IT and banking solutions.

Early 2000s, AEG introduced its Development Department and started working on its in-house products and solutions.

In 2003, AEG established a SWIFT-compliant Service Bureau which opened the door for banks and corporates to share SWIFTNet services.

7

“We conduct business in the light of three essential values: Integrity, Innovation, and Reliability.”

“We invest in our people and share a common understanding of mutual loyalty”

Our PhilosophyMissionWe take on the duty to recreate IT and Business solutions through our sophisticated and state-of-the-art products and services that we choose to deliver to an exclusive range of clientele.

VisionWe aspire to lead the way for �nancial and non-�nancial organizations worldwide to a rising caliber of doing business with our indispensable end-to-end solutions.

ValuesIntegrity: It is said that the sum of all virtues equals integrity. At AEG, we think of our clients very highly and we believe that each and every one of them deserves the exact same commitment and dedication from our side. �e kind of relationship we seek to have with our clients is the one based on mutual trust and respect, and we guard our relations very attentively and solemnly.

Innovation: �e only notion we regard as constant is CHANGE. We live by the rule of maintaining a steadfast pace along with the continuous progress of advanced technologies. Over the past years, AEG has successfully developed and implemented state-of-the-art solutions and services in response to the rising needs and requirements of the �nancial sector. AEG stands today amongst the leaders in its sector and contributes to recreating the future of the �nancial world.

Reliability: Working with the �nancial sector obligates the necessity of availability, operational excellence and fast response time. Our clients trust us to keep them connected and operational at all times. We take this task very seriously and we put all our e�orts in the quest of sustaining our reliability.

CultureInvesting in Human Resources: At AEG, we believe in investing in our people; i.e., building their skills, expanding their knowledge, widening their experience, and supporting their continuous accreditation and certi�cation. We strive to retain a motivated and empowered team in order to serve our purpose and succeed in ful�lling our mission. �is allows us to further excel in our �eld and helps us stay aligned with our values.

Loyalty: Our relationship with our teams is deeply rooted in the value of mutual loyalty. �is builds a more coherent environment at work which is re�ected in high performance and devotion to work.

“8 branches and 3 active sites for optimal service and high availability”

8

Our PresenceWe serve the Middle East and Africa from our head o�ce in Beirut-Lebanon and our branches across the region located in Egypt, Bahrain, Cyprus, Iraq, Algeria, UAE and KSA. Moreover, we have two operating DR sites to secure successful failovers and high availability.

Our TeamBringing together certi�ed professionals from numerous disciplines, ranging from support engineers, consultants and system analysts to trainers, designers and project managers, AEG ensures that all areas of expertise you could possibly need to realize your projects and business goals are accounted for.

Our PartnersAEG has managed to build strong business alliances and partnerships with a number of market leaders over the years. We consider these partnerships one of our strengths and advantages over our rivals in the market. Our strategic alliances allow us to further serve our clients and to spread geographically and widen our market.

9

What We DoConsultancyWe study challenges and problems you are facing and assess your business needs. Based on our �ndings, we propose proper solutions and technical requirements.

Solution DevelopmentWe develop end-to-end solutions that answer your business needs based on inhouse and partnered solutions packaged in smart cost-e�ective bundles.

Solution Implementation�is process encompasses installing and testing hardware and so�ware solutions, followed by transfer of knowledge and hands-on training of the client’s operating sta�.

SupportWe provide 24-hour support services. We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever and wherever needed.

“As your partner for the future, we make sure to provide you high quality support for a successful business”

“One of the largest SBs worldwide based on number of clients and SWIFT traffic”

“CPS is our inhouse payment solution for corporates”

10

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

“AEG makes sure to provide its clients with latest technologies and industry trends for the best business outcomes”

11

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

“We bring you the latest solutions from our Business Partner IBM for secure complex integration needs”

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

12

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

13

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

“We provide a comprehensive bundle of products serving a continuous business with no down time”

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

14

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

“We deal with cyber security as top priority and often work closely with our clients in order for them to maintain secure environments and stay protected”

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

15

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

“We bring you the latest solutions with cutting-edge technologies in the field of information security”

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

16

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

“AEG Development Department is leading in the creation of tailor-made solutions to meet just what your bank needs”

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

17

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

“Our differentiator is the manner in which we conduct business; and this encompasses our special relations with our clients, the trust we share, and the comprehensive services we provide”

Our SolutionsAEG provides a wide range of comprehensive state-of-the-art solutions driven by the needs of our clients and led by the ongoing change in the IT world.

SWIFT Service BureauAEG-SB System Connectivity

AEG-SB System Connectivity is o�ered for clients who have their own messaging interface, SWIFT Alliance Access, Alliance Entry or third-party interface and desire to outsource their SWIFT connectivity.

AEG provides an isolated and secure connectivity that guarantees maximum integrity and con�dentiality of data being transferred.

AEG-SB Fully-Managed Service

AEG-SB Fully-Managed Service is o�ered for clients who do not want to bear the cost and responsibility of installing and maintaining SWIFT infrastructure and rather prefer to utilize the facility o�ered by a service bureau. AEG allows its client to connect to SWIFT using only a client/web interface application connected to its AEG’s SWIFT infrastructure.

AEG-SB Hosting Service

AEG Hosting service is o�ered to banks who wish to bene�t from AEG’s physical and logical environment and to bene�t from AEG’s expertise. �ey can host their systems in any of the AEG Datacenters.

�is allows the bank to eliminate maintenance and technical administration expenses while keeping all data segregated and leveraging the SWIFT Customer Security Compliance Framework (CSCF) compliant environment at AEG’s Service Bureau.

SmartConnect from SonemaSmartConnect provides point-to-point VPN connectivity for one or more sites (bank branches) via satellite links by SONEMA, one of the leading V-SAT providers. It allows each site to be connected directly – without having intermediary third-party providers – to AEG Service Bureau in a fast, secure and cost-e�ective way. AEG SmartConnect is designed to satisfy all customers’ business needs in terms of security, availability and �exibility.

Payment and ReconciliationAEG Corporate Payment System

AEG CPS is a web-based corporate-oriented solution, designed to ful�ll the needs of the corporate-to-bank business. It can adopt multiple corporates (clients), perform services for multiple institutions (multiple a�liates forming a group centralized in one system), and serve as a multi-channel interface.

AEG gpi-PRO

AEG gpi-PRO is an application based on the available tools and capabilities of SWIFT gpi. It aims to enhance and facilitate gpi use by the banks. It loads the outgoing and incoming payments messages into its own database and connect to the SWIFT gpi tracker via API and MT19x messages to update the history and status of the stored payment transactions. It can integrate with the core banking applications as well as the internet banking or mobile banking applications to o�er the bank’s customers the facility to track their payments by themselves.

It includes an interface to create payment transfers with the optimal route, to reply and update the status of the SWIFT tracker, to issue the recall and cancelation of payments, and to initiate cover messages. �e application also has facility to send noti�cations to bank’s customers about the transfer status to determine the best route of a transfer and pass it to the core banking.

AEG Universal Payment Confirmation

AEG Universal Payment Con�rmation (AEG-UPC) automates the process of sending a con�rmation to the Tracker on the payment status in compliance with SWIFT requirements. AEG-UPC is already an integrated module in AEG gpi-PRO application if the bank is a gpi member. However, if the bank is not a gpi member, AEG-UPC can work as a stand-alone application to perform the con�rmations to the Tracker automatically.

GTMatch System from Bottomline Technologies

GT-Match from Bottomline Technologies is an enterprise-wide reconciliation and exception management product that supports reconciliation for all business lines and market instruments including cash, general ledger, nostro, securities transactions, custodian holdings, funds, foreign exchange, money market, and precious metals. Its �exibility and generic capabilities provide a high automatic matching rate for any internal or external data sources. GT-Match is a proven solution to reduce operational risks while increasing STP rates.

GTMatch Corporate from Bottomline Technologies

GTMatch Corporate from Bottomline Technologies, focusing on corporate requirements, delivers leading-edge reconciliation and exception management, enabling organizations to automate the matching of outbound invoices and inbound payments, dramatically improving operational e�ciency.

AEG MT-ISO Converter

AEG MT-ISO Converter with its advanced and robust features plays an important role in adopting the ISO20022 migration by anticipating their business requirements and complying with CBPR+ de�ned rules and standards. �is also helps the bank to focus on a single point of implementing the ISO20022 instead of making the changes on all the back-end applications.

System IntegrationAEG MidSys

AEG MidSys is a middleware system that performs syntax transformation, enrichment, format conversion of SWIFT messages and integrates with SWIFT interface and core banking applications using SOAP, Websphere MQ, webservices and batch mode.

AEG MidSys3

AEG MidSys3 allows the back-o�ce systems to exchange the T2 payload information. It contains the required T2-speci�c (Target2 Consolidation – Europe) logic using the SWIFTNet interface. AEG MidSys3 handles both the InterAct and FileAct messaging services in real-time or store-and-forward mode, including the handling of T2 BAH/BFH signatures.

AEG SmartClear

AEG SmartClear is a comprehensive solution that allows the bank to manage the clearing process end-to-end in an easy, secure and optimized way. It can be easily customized to handle di�erent RTGS and ACH �ows and message formats. Moreover, besides to full integration capability with back-o�ce applications, it provides interfaces for manual creation and management of the messages and �ows. It supports di�erent payment �ows such as credit transfer, direct debit, cheques clearing, etc… and it features advanced work�ow, cut-o� time handling, dashboard, encryption, authentication and secure data �ows.

IBM B2B Integrator

A B2B integration platform helps companies integrate all their complex B2B and electronic data interchange (EDI) processes across their partner communities in a single gateway. �e platform collects data from source applications, translates the data into standardized formats and then sends the documents to the business partner using the appropriate transport protocol. B2B integration so�ware is available for on-premises use or integration services can be accessed through hosted cloud services.

Sterling File Gateway

Sterling File Gateway o�ers point-and-click con�guration within a rules-based architecture. Sterling File Gateway provides managed �le transfer (MFT) capabilities to handle everything from high-frequency messages and huge periodic �le transfers to high volume loads of real-time data while leveraging the power of business-to-business (B2B) integration to move data in transit in a manageable way. With advanced partner on-boarding features, extensive communication channel support and improved business process management, Sterling File Gateway advances operational execution with prede�ned, event-driven business processes and centralized, enhanced management. It provides end-to-end visibility, auditing and reporting services, and the ability to manage a large number of partners and protocols e�ciently.

IBM Connect:Direct

IBM Connect:Direct provides security-hardened, point-to-point �le transfers to lessen dependency on unreliable File Transfer Protocol (FTP) transfers. It is optimized for high-volume delivery of �les within and among enterprises. �e solution ensures more reliable movement of �les, from batch integration and movement of large images or catalogs, to synchronization with remote locations.

IBM Financial Transaction Manager

Financial Transaction Manager integrates, orchestrates and monitors �nancial transactions. It delivers consistent processing across multiple payment types, enabling banks and �nancial institutions to converge their payment operations on to a single platform. Financial Transaction Manager can accelerate the delivery of improved �nancial products and services to customers.

IBM Control Center

IBM® Control Center is a centralized monitoring and management system for multiple integration servers from one central location.

AEG File Header Generator

AEG File Header Generator tool creates header �les for payload created by the bank’s back-o�ce application to enable them for SWIFT FileAct upload.

AEG IBAN Validation

AEG IBAN Validation application is designed to check the validity of the IBAN account number and retrieve information about SEPA banks.

ComplianceFirco Filtering Suite from Accuity / Fircosoft

Firco Filtering Suite products are state-of-the-art name �ltering solutions that can achieve ultra-low false positive hit rates (less than 1%) while tolerating misspellings, typos, alternate spellings, abbreviations, truncated words, acronyms, initials and multilingual text.

AEG US Transaction Monitor

AEG US Transaction Monitor application is designed for SWIFT Alliance system to scan the sent and received SWIFT messages to track transactions made to and from individuals and institution in USA.

AEG FATCA Reporting

AEG FATCA Reporting is a tool that creates an XML FATCA report with the required validation, digital signature, encryption, and compression. It prepares the report to be uploaded on the US IRS portal by the bank and meets the IRS deadline window.

AEG Sanction List Automation

�e AEG List Automation Module is an application module capable to perform the automation of the import process of the bank’s preferred Sanction Lists source (one source) (such as FircoSo�, AEG, World Check, World Compliance or Dow Jones) and make them ready to be used by the FircoSo� Filtering Suite.

AEG Message Validation Handler

AEG Message Validation Handler is an ADK plug-in application into the SWIFT Alliance Access system. �is application is used to integrate the Alliance Access with an external messages �ltering application using webservices. It connects to the �ltering application, passes the messages to it and monitors the results of the checking and the decision about the encountered hits.

Business ContinuitySmartFT from Stratus

Smart FT provides full fault tolerance to multi-processor mission-critical systems that require 100% uptime. �e solution combines the physical resources of two standard Windows servers into one single virtual operating environment with complete redundancy of all underlying hardware and data, which guarantees running applications in the event of component or system failures.

SmartDR from Arcserve

Smart DR is the perfect utility to migrate backup data o�-site for disaster recovery, or copy data from remote o�ces to a secure, centralized location.

SmartMonitor from Goliath Technologies

Smart Monitor o�ers proactive, end-to-end IT performance monitoring for Citrix and VMware to ensure a positive end-user experience. It provides complete support for monitoring virtual server, virtual desktop and hybrid cloud environments, and provides specialized modules for certain EMR/EHR applications and NVIDIA GRID vGPU.

SmartBackup from Arcserve

Smart Backup is a comprehensive solution that protects complex IT environments. �e solution protects your data residing in various types of nodes such as Windows, Linux, and virtual machines on VMware ESX servers or Microso� Hyper-V servers.

SecurityCSCF Consultancy, Guidance and Support

AEG o�ers consultancy, guidance and support service for banks to be compliant with SWIFT’s Customer Security Compliance Framework (CSCF). �e customer will be guided towards best practice and support during the implementation process. �is is an annual exercise that is based on continuous enhancement and new releases.

Risk Assessment

A consultancy service targeted to test various attack scenarios via table-top exercise using either ISO 27005 or NIST Risk Assessment framework. �e outcome of this exercise is to check possible ways that an adversary can gain un authorized access to compromise integrity, con�dentiality or availability.

�is exercise is intended to evaluate whether the existing controls are enough or whether additional controls should be added. �e scenarios are classi�ed according to likelihood of impact on the organization. �ese are prioritized and forwarded for decision to the corresponding stakeholders.

A report is generated showing results and suggesting risk treatment which is then evaluated by the bank for budgeting and handling.

Penetration Testing

A technical consultancy service by which a simulated cyber-attack is performed on an IT Infrastructure to evaluate the implemented security controls. �e test is executed to identify miscon�guration, weaknesses and strengths. Vulnerabilities may include the potential for unauthorized parties to gain access to accounts, sensitive data, or the gaining privileges and so on. �e outcome of this exercise is a report that highlights the weaknesses captured in the penetration test, its criticality and its exploitability level.

IBM QRadar: Security Information and Event Management

IBM QRadar is an enterprise security information and event management (SIEM) product. It collects log data from an enterprise, its network devices, host assets and operating systems, applications, vulnerabilities, and user activities and behaviors, then performs real-time analysis of the log data and network �ows to identify malicious activity so it can be stopped quickly, preventing or minimizing damage to the organization.

Ekran

Ekran performs user session recording to capture all user on-screen activity in a video format along with meta-data like active application name, active window title, visited URLs, typed keystrokes and typed commands. Ekran System features several in-built identity and access management so�ware capabilities in order to help you organize strong authentication and thus provide better insider threat detection and prevention. Ekran provides, as well, the functionality of Privileged Access Management by which the user logs in with normal privilege and the system maps the access to prede�ned access settings

DFA from Gema

Dual Factor Authentication (DFA) solution allows operators to authenticate to the SWIFT Interface using Dual Factor Authentication concept. �e dynamic password can be generated and displayed on the user’s mobile phone or on a hardware token.

18

Vulnerability Scanning from Rapid7

Nexpose, from Rapid7, is an on-premises vulnerability management tool. It scans IT modules for published vulnerabilities and de�ned hardening baselines, then it provides the status of the mentioned module. Further, Rapid7’s InsightVM, extends Nexpose capabilities to cloud capabilities of the tools, like Dynamic Live Dashboard, Remediation Work�ow and tracking duties.

CimTrak Integrity Suite from Cimcor

�e CimTrak Integrity Suite provides a �exible �le-based security solution that enables administrators to protect selected �les, operating system components, and network device con�gurations against unauthorized changes from a centralized location within the network. CimTrak works by detecting additions, deletions, modi�cations and reads of �les and con�gurations. It creates a cryptographic hash of initial �les and con�gurations and stores them securely in the CimTrak Master Repository. When the data received does not match the cryptographic hash of a particular �le or con�guration, CimTrak alerts that a change has occurred and takes action according to a pre-assigned con�guration.

AEG Payment Control and Monitoring Application

AEG Payment Control and Monitoring Application is a comprehensive solution that allows the bank to detect possible fraud actions, to monitor and control transactions, to generate payment reports and to assure network to SWIFT system reconciliation.

AEG AST

Advanced Secure Transfer (AST) is an application that transfers messages securely from one node to another. Each node couple have their own con�guration. �e con�guration holds the source and the destination and the necessary information to accomplish the transfer. AST can integrate with the core banking applications and SWIFT by Webservices, Websphere MQ, SOAP and batch mode.

AEG LAU Application

AEG LAU (Local Authentication Unit) application is developed to calculate the LAU for a message and insert it at the trailer of the message or return it to the core banking to insert it by itself. It also checks the LAU of messages received with LAU and determine whether it is correct or not.

Messages Reporting and NotificationAEG UETR Application

AEG UETR application is developed to add UETR to messages generated by the core banking without UETR or to remove the UETR from messages to be received by the core banking applications. �e application features also facility to retrieve related messages and to add the same UETR to them.

AEG SmartSMD (SWIFT Message Dispatcher)

AEG SmartSMD is a comprehensive solution that allows the bank to dispatch and notify the business units across the bank (head o�ce and its subsidiaries in case of centralized SWIFT setup) of incoming/outgoing SWIFT messages.

�e application features multi-level validation and has noti�cation capabilities. It has a security module that manages users, pro�les and functional permissions. AEG SmartSMD also features monitoring, logging and reporting capabilities to enhance security, productivity, visibility and performance.

AEG Trans-Rep

AEG Trans-Rep is a powerful message reporting tool speci�cally designed for SWIFT Alliance system to enhance its functionality by generating sophisticated statistical reports.

�e application comprises a number of commonly needed report templates ready to be generated. In addition, the application o�ers the capability to dynamically create ad-hoc reports to satisfy the manager’s requests, and it features a powerful archiving and searching capabilities.

AEG Duplicate Detection Application

AEG Duplicate Detection Application (DDA) is designed for SWIFT Alliance systems to detect incoming and outgoing duplicate messages allowing users to take the necessary decision. It detects fully and partially duplicate messages based on system administrator’s de�ned �elds.

AEG Notify

AEG Notify consists of:

1. Noti�cation for customers; de�ned customers receive a copy of sent or received messages related to them via SMS or email.

2. Noti�cation for operators; the system operator or a speci�c system user receives messages about occurred events and errors in the system.

3. Noti�cation for branches: sent and received messages related to a bank’s branch or department are transferred to it by e-mail.

AEG AckView

AEG AckView application automatically exports SWIFT incoming and outgoing messages as separate message �les. SWIFT messages containing many transfers are fragmented into single messages each saved separately as an individual �le into a speci�c directory in PDF format for printing.

Professional ServicesMaintenance and Support

AEG maintenance and support services are available 24 / 7. Since the working hours and weekends vary in some countries; for example, GCC countries have their weekend Fridays and Saturdays instead of Saturdays and Sundays, hence, AEG bene�ts from its branches in the GCC, Cairo and Algeria to support its customers at all times.

We have our elite engineers on-call and ready to help in any enquiry via phone, email, or on site whenever intervention is needed.

Consulting

AEG has been providing consulting services for banks and �nancial institutions ever since it was founded in 1994. Over the years, AEG has developed a deep experience in the �nancial �eld and gained a wide reputation as a knowledgeable and trusted expert.

As a consultant, we study the business needs of the client, understand the challenges and problems they are facing by undertaking gap analysis, risk analysis, security assessment, etc. Eventually, we prescribe the technical requirements and solutions based on our �ndings. �en, we go further through intervention and supervising implementation of the needed solutions and providing all the necessary support.

Training

We consider training a key element during the implementation process of our di�erent products and solutions. AEG o�ers a number of administrative and technical training courses. Training sessions are given by certi�ed trainers and professionals, while the trainee is granted a certi�cate of the corresponding course by AEG.

Copyright © 2019 Allied Engineering Group (AEG). All rights reserved. All trademarks, trade names, service marks and logos referenced herein belong to their respective owners. This document is for your informational purposes only. AEG assumes no responsibility for the accuracy or completeness of the information. To the extent permitted by applicable law, AEG provides this document “as is” without warranty of any kind, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. In no event will AEG be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits, business interruption, goodwill or lost data, even if AEG is expressly advised in advance of the possibility of such damage.

A leading provider of IT solutions serving banks and corporates in the Middle East and Africa. We are present in 10 countries and counting.

LebanonCyprusBahrainEgyptIraqAlgeriaUAEKSA

Head Office - BeirutVerdun, Rachid Karameh Street, Assaf Center, 8th floorP.O.Box: 113-6005 - Beirut, Lebanon

Phone: +961 1 791002Fax: +961 1 791003

aeg@aeg-mea.comsales@aeg-mea.comsupport@aeg-mea.com

www.aeg-mea.com

© 2

020

YOUR PARTNER FOR THE FUTURE