Vendor Management

The Network Support Provider Review Checklist

A Webinar Short Small banks who outsource network supports have a conundrum on their hands: How do we ensure proper due diligence on a critical vendor, with possession of information, that cannot afford the standard audit regime? This webinar short attempts to answer that.

KPMG Admits “Astonishing” Misconduct, Accepts Record Fine

The firm edited workpapers ahead of examinations, and had employees cheat on certification exams… An article review. We rely on accounting firms to provide us with accurate, unbiased information, but it appears that KPMG—one of the largest firms in the world—has bee...

Google Nest Highlights IoT Risk

Product longevity and data privacy have been called into question… An article review. When Google announced it was absorbing smart thermostat maker Nest in 2018, many customers were concerned about the future of their internet-connected devices and the privacy of th...

Fiserv Sued Over Alleged Security Lapses

The nation’s largest core processor has been accused of multiple security lapses… An article review. For smaller banks and credit unions the resources needed to create and maintain their own online banking presence can be daunting. Even after the website is ru...

T7: The Trend of Trends 2019

The seven best trend articles in 2019 . . . For ISOs of small financial institutions. While it may not feel like it yet for some of us, we’re well on our way into 2019, and that means it’s time for the last of our annual articles looking at predictions and tre...

R-7 – The Top Seven Risks – 2019

Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . When Dan presents audit reports to boards of directors, he also talks to the board about the top risks the institution is facing. Since 2006, Dan has been compiling a list ...

Temporary Passwords: A Potential Weak Link

Some small organizations continue to use customer data to generate initial passwords, despite the risks. An article review. When rolling out a new online banking platform organizations are often faced with the task of issuing new usernames and passwords to existing users,...

Cybersanity in the Incident Response Age

Their unprecedented breach presents an opportunity to learn. A Jolley | Hadaway Article. The recent data breach at Equifax has shocked many of us, even the ones who have become desensitized to the “breach parade,” the regular stream of news regarding major orga...

Small Business Resource Page

Small Business Technology Risk Management Starting Points Remember, these are merely generic starting points! They may not be all-inclusive for your unique business! The infotex Small Business Technology Risk Assessment A starting point to determine tactics. For a movie on...