Archive for 'Risk Management' Category
The Importance of Pretext Calling
It’s all about protecting Customer information . . . In 1999 the Gramm-Leach-Bliley Act (GLBA) directed the Federal Deposit Insurance Corporation (FDIC) and other federal banking agencies to ensure that financial institutions have policies, procedures, and controls in place to prevent the unauthorized disclosure of customer financial information. The FDIC and other federal banking agencies […]
T7: The Trend of Trends 2022
Top 7 Trend Articles of 2022. . . . . .For ISOs of Small Financial Institutions. Welcome to our annual T7 article: a list of our favorite trend articles from the past year. Our intent: help you organize your thoughts as you work through your strategic planning process. We hope reviewing these articles will help […]
The Changing IT Landscape and Endpoint Detection and Response (EDR)
Threats are changing, EDR can help us adapt . . . Today’s advanced persistent threat (APT) understands that the IT landscape has changed. In the post-COVID age, more and more organizations have adopted some form of work from home. While WFH offers many conveniences, it also imparts increased risks. BitSight conducted a 2021 study of […]
Managing Software Supply Chain Risk
Software Bill of Materials (SBOMs) are becoming more and more important. . . We are all very familiar with one aspect of the software supply chain – updates. New features, bug fixes, and performance upgrades are a regular occurrence to any device’s lifecycle, however what if these kinds of updates also include deliberately malicious code? […]
Pandemic Woes Add To The Cybersecurity Job Retention Struggle
According to a new survey, more organizations than ever are reporting problems with cybersecurity staffing… An article review. While pandemic related mandates and restrictions are gradually being lifted across the country, many organizations are still feeling the effects in one important area: staffing. That’s according to ISACA’s annual State of Cybersecurity survey, which asked over […]
Banking Trojans: Menace to the Financial World
Understanding Banking Trojans… Another Technical Article by Tanvee Dhir! What are Banking Trojans? A trojan is a malicious program that masquerades as a genuine one. They are often designed to steal sensitive information from users (login passwords, account numbers, financial information, credit card information, etc.). A banking trojan is a malicious computer program designed to […]
R7-2022
Top Seven Risks . . . that small bank Information Security Officers face in 2022! Once again, we compile this list in preparation for updating our normal board of directors awareness training presentation and movies and such. This list is meant for community-based banks but could apply to small businesses. How this works can be illustrated […]
R7: The Board’s Role in Cybersecurity 2022 Movie
A Webinar-Movie What are the top seven risks your board should know about in 2021? Since 2006, Dan has been compiling a list of the “top seven risks small institutions are facing,” in preparation for his board presentations. This webinar will present the 2021 list in a manner that you can show to your board! […]
The Importance of Proper Multi-Factor Authentication (MFA) in 2022
Not just because it is becoming an issue of compliance. . . We all know the plot of your typical heist movie – a group of robbers seeks out special bits of information, such as PIN numbers, keycards, FOBs, and even biometrics, all to relentlessly gain entry to a secured vault. These vaults use several […]
Behind Your Credit Union’s Recent NCUA IT Exams Findings Webinar Registration
A Webinar-Movie In 2018 the NCUA started reviewing credit unions with $1 billion or more in assets using a tool known as the Automated Cybersecurity Examination Tool, or as we call it: the ACET. The expansion to smaller credit unions is inevitable. In the new year, credit unions should now think about how they can […]
