Customer Awareness Kit

The Risk of Convenience

Consolidating passwords and other account information can save time, but expose you to risk… An article review. Given the amount of account related information that the average person is expected to keep track of–such as account numbers, passwords, PINs and...

Awareness Posters Around The Web

Great Resources For User Awareness An article review. We at infotex take great pride in our awareness materials that we make available at posters.infotex.com. But we also wanted you to know that there are many other free poster sites out there, like this site found by o...

40% of Consumers Attacked DAILY or WEEKLY!

The case for customer education . . . The fact is, when two customers walk into your establishment, one is probably being attacked RIGHT NOW! The results of a Microsoft study revealed in this article by Warwick Ashford of Computer Weekly, is very timely, as they come d...

IBA Planning Yet Another Great Conference!

Have you checked out the itinerary? Another great lineup of speakers! Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Yesterday my Client said summed it up pretty well: “I can’t afford not to go!”...

The Anatomy of a CAT Attack

In order to understand the power of the three layers of security required by the June 2011 Supplement to the FFIEC’s 2005 Guidance on Authentication in an Internet Banking Environment, it is helpful to understand just how a corporate account takeover (CAT) attack works. N...

What customers need to be told

According to the Federal Financial Institutions Examination Council’s (FFIEC), a financial institution’s customer awareness and educational efforts should address both retail and commercial account holders and, at a minimum, include the following elements: An explanation...

Corporate Account Takeovers: Where Compliance Pays

As the “compliance burden” continues to rise, we may sometimes wonder whether information security regulations are worth the effort.  This is a story of how the FFIEC got it right. A Short History Lesson For many in banking, this story may appear to have start...

Bust Exposes PCI Challenges

According to a post by Dark Reading, the international takedown that resulted in 24 arrests for credit card fraud illustrates problems inherent in the Payment Card Industry Data Security Standard (PCI DSS). Customer Awareness is a Piece of the Puzzle! The two-year operati...

List of Controls

The FFIEC supplement is clear: you must provide a list of controls (or resources as to where to learn about controls) to your high-risk customers. Security Awareness Training This re-brandable document allows you to meet that requirement while helping your customers! On...

Commercial Customer Awareness Training Checklist

This checklist not only serves as an agenda for a one-on-one meeting with your high-risk commercial customers, but it also goes so far as to allow the ISO (or other appropriate individual) to “risk-rank” deficiencies. Security Awareness Training Makes a grea...