Customer Awareness

Awareness Poster: Don’t be Conned!

Here’s an awareness poster for YOUR customers.  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Don’t let schools be the next victim in this cyber war. Boost information security to help mitigate the risk of h...

Your Next Assignment: Customer Awareness

78% of Consumers Think CyberSecurity is Not Their Problem Now that our perimeters are hardened, now that our information security programs are fine-tuned and working, and now that our users practice basic information security habits thanks to the hard work and efforts of th...

False Sense of Security of the Month

An untested control is not a control, it’s a wish. I’m not the kind of person who trusts technology or controls.  It’s just not in me. But I do trust my wife’s intuition. So when I saw this youtube video, forwarded to me by my friend Joe Cychosz, I w...

The Anatomy of a CAT Attack

In order to understand the power of the three layers of security required by the June 2011 Supplement to the FFIEC’s 2005 Guidance on Authentication in an Internet Banking Environment, it is helpful to understand just how a corporate account takeover (CAT) attack works. Nowa...

What customers need to be told

According to the Federal Financial Institutions Examination Council’s (FFIEC), a financial institution’s customer awareness and educational efforts should address both retail and commercial account holders and, at a minimum, include the following elements: An explanation of...

Corporate Account Takeovers: Where Compliance Pays

As the “compliance burden” continues to rise, we may sometimes wonder whether information security regulations are worth the effort.  This is a story of how the FFIEC got it right. A Short History Lesson For many in banking, this story may appear to have started ...

Sharpening Your Vendor Management Tools

Mark your calendars! Dan Hadaway will be delivering a workshop with the Indiana Bankers Association to outline what makes an effective vendor management program. The workshop will be on September 10th starting at 9:00 AM and ending at 4:00 PM. For information on how to regis...

The FFIEC’s Technology Education Requirements

Mark your calendars! Dan Hadaway will be delivering a workshop with the Indiana Bankers Association to review FFIEC statements involving technology training. The workshop will be on June 6th starting at 9:00 AM and ending at 4:00 PM. For information on how to register, visit...

Authenticating Callers

The art of “out-of-wallet” questions! When somebody calls wanting information that is sensitive (such as social security numbers, account numbers, account balances, the names of applications on our network, names of personnel, etc.), we must “authenticate&#...

Strong Passwords

What is a strong password?   When designing a password, we need to keep three things in mind: First and foremost, if we use paper to write alternative passwords down, BE SURE to shred that paper, no matter how little it is! Second:  let’s remember that our goal i...