Archive for 'Management Awareness' Category
The Changing IT Landscape and Endpoint Detection and Response (EDR)
Threats are changing, EDR can help us adapt . . . Today’s advanced persistent threat (APT) understands that the IT landscape has changed. In the post-COVID age, more and more organizations have adopted some form of work from home. While WFH offers many conveniences, it also imparts increased risks. BitSight conducted a 2021 study of […]
Adam Reads: The “36 Hour Rule” Guidance Summary
A new way of helping people “read” new guidance… Look for more in the future! To save you time, we are proud to present “Adam Reads” . . . recorded versions of our Guidance Summaries! Below you can find an embedded player for the audio file. If you are having issues with that working, you […]
Managing Software Supply Chain Risk
Software Bill of Materials (SBOMs) are becoming more and more important. . . We are all very familiar with one aspect of the software supply chain – updates. New features, bug fixes, and performance upgrades are a regular occurrence to any device’s lifecycle, however what if these kinds of updates also include deliberately malicious code? […]
Banking Trojans: Menace to the Financial World
Understanding Banking Trojans… Another Technical Article by Tanvee Dhir! What are Banking Trojans? A trojan is a malicious program that masquerades as a genuine one. They are often designed to steal sensitive information from users (login passwords, account numbers, financial information, credit card information, etc.). A banking trojan is a malicious computer program designed to […]
R7-2022
Top Seven Risks . . . that small bank Information Security Officers face in 2022! Once again, we compile this list in preparation for updating our normal board of directors awareness training presentation and movies and such. This list is meant for community-based banks but could apply to small businesses. How this works can be illustrated […]
R7: The Board’s Role in Cybersecurity 2022 Movie
A Webinar-Movie What are the top seven risks your board should know about in 2021? Since 2006, Dan has been compiling a list of the “top seven risks small institutions are facing,” in preparation for his board presentations. This webinar will present the 2021 list in a manner that you can show to your board! […]
The Importance of Proper Multi-Factor Authentication (MFA) in 2022
Not just because it is becoming an issue of compliance. . . We all know the plot of your typical heist movie – a group of robbers seeks out special bits of information, such as PIN numbers, keycards, FOBs, and even biometrics, all to relentlessly gain entry to a secured vault. These vaults use several […]
Survey Reveals Why Employees Violate Cybersecurity Policies
Stress, not malice, is implicated in the majority of violations… An article review. Following a surge of high profile attacks in 2020, businesses have been increasing their investment into cybersecurity. However, many organizations are learning that investing in new systems may help, but one of the largest threats they still face comes from their own […]
The Magnificent Seven for 2022 Movie
A Webinar-Movie What are the top seven risks your board should know about in 2022? Since his first board presentation in 2000, when Dan presents audit reports to boards of directors, he also talks to the board about the top risks the institution is facing. Since 2006, Dan has been compiling a list of the […]
The Magnificent Seven 2022
Seven Trends . . . that small bank Information Security Officers face in 2022 Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Welcome to the Magnificent Seven, my annual predictive article about the seven trends in technology that will impact the Information Security Officers of […]
