Schedule of Events
Note: all dates are tentative and are in Eastern time zone (EDT/EST)!
Full 2020 Schedule
10 AM
Incident Response Diagramming
Short
With the renewed interest in data flow diagrams we would like to present a type of drawing that would not technically qualify, and yet will bring as much value (if not more) than any data flow diagram: Your incident response process. Using a diagram to illustrate your process helps keep people on the same page during an incident. This is actually the process diagram infotex is using to design our “Incident Response Wizard.”
10 AM
The Three Teams in the SIEM Process
Short
You’ve heard it from every MSSP you’ve met: the definition of a SIEM is in the eye of the beholder. But at infotex, we are not talking about the database – an asset whose definition is continuously evolving. We’re talking about the way three teams collaborate in an overall Technology Risk Monitoring process. And whether you use infotex or a different MSSP, this approach will still be in place.
10 AM
The Network Support Provider Review Checklist
Short
Small banks who outsource network support have a conundrum on their hands: How do we ensure proper due diligence on a critical vendor, with possession of information, that cannot afford the standard audit regime? This webinar short attempts to answer that.
10 AM
Down and Dirty Vendor Management
Webinar-Movie
A rerun: Based on what Dan is finding in reviews of several audits where Clients talked us into accepting shortcuts, Dan will review at least three five seven far-reaching shortcuts (that your auditor and/or examiner MAY agree with).
10 AM
Incident Response for Directors
Short
You are ready to bring your board on board . . . the incident response process. Incident Response for Directors is the movie meant to play directly to your directors. It is the “movie within a movie” from the webinar, called Teaching Incident Response to your Board meant for ISO’s . . . if you have not watched that, you may want to (it includes this movie).
10 AM
Vulnerability Management for Directors
Short
Our Board Awareness Training program continues with this movie, entitled Vulnerability Management for Directors, that can be presented directly to your board of directors.
10 AM
Technology Planning
2020 Update
Our annual webinar on the subject will be focused on a simplified process for small institutions, and provide starting point boilerplates for documentation. Feel free to invite your entire technology committee!
10 AM
Teaching Out of Wallet Questions
Movie out of a Movie
One of the highest likelihood attacks we face as community-based banks is the pretext call. Resolving the issue is both difficult and time-consuming. This webinar, which will be the basis of a movie meant for all users, will define the problem, the solution, and (for ISOs) how we can teach our employees to implement the solution. This is another of our Movie Within a Movie Webinars, where the longer webinar is meant to help ISOs understand what to do with the shorter movie (see next.)
10 AM
Asking Out of Wallet Questions
Movie Within A Movie
Do you know how to prove a caller is who they say they are, before giving them sensitive information?
Let’s say it another way: Do you know how to identify telephone callers by asking what the regulators call “Out of Wallet Questions?”
This movie is meant to teach all bank employees how to ask Out of Wallet Questions, and why using them is so important to our customers’ financial health.
10 AM
The Change Control Procedure
Short
The world has changed; we need to document it. We’re taking our patch management programs to a new level while calling it Vulnerability Management. Let’s document it! And while most auditors don’t know what to look for, YET, in a change management program, let’s document what we have BEFORE they do! A webinar short.
What to expect in an infotex tabletop test
2020 Update
This presentation is intended for those who are planning to participate in an infotex incident response test. Please let us know what questions you have, when we have our Plan Walkthrough and Test Plan Approval meeting!
As Simple as it SIEMs: Technology Risk Monitoring for Banks
2020 Update
Update: Having worked as the MSSP of choice for several school corporations since 2003, infotex has developed a posture approach that will ensure our number one deliverable:
“Our Clients Sleep at Night.”
Dan will review why a school corporation should be using a SIEM, what a SIEM actually is . . . . and then the fun begins as we walk through a SIEM in action and discuss tuning processes.
Testing Your SIEM part Deux
2020 Update
Update: All our eggs are in one basket now, and we’re watching that basket. Or are we? Now that we have fully deployed a SIEM how do we make sure that the SIEM is indeed functioning properly? This session will deliver a test plan that we can implement independent of our auditors. This is an update to our movie, with new test methods.
Have a suggestion for an upcoming topic? Send your idea to [email protected]
