Schedule of Events
Note: all dates are tentative and are in Eastern time zone (EDT/EST)!
Full 2020 Schedule
10 AM
Teaching Your Board of Directors
Movie out of a Movie
This webinar is for Information Security Officers who need to “get the board on board!” It walks through the top seven risks community banks face in 2019/2020, from a board perspective, and includes the previous movie (The Board’s Role in Cybersecurity ). Each year Dan and his team assemble a “Top Seven Risks List” which Dan uses in his board presentations. In this webinar, Dan reviews the top risks that information security officers of small financial institutions will be focused on in 2019. This is another example of our “Movie Within A Movie” concept” where the longer webinar is meant to help ISO understand what to do with the shorter movie.
10 AM
R7: The Board’s Role in Cybersecurity 2020
Movie Within A Movie
What are the top seven risks your board should know about in 2020? Since his first board presentation in 2000, when Dan presents audit reports to boards of directors, he also talks to the board about the top risks the institution is facing. Since 2006, Dan has been compiling a list of the “top seven risks small institutions are facing,” in preparation for his board presentations. This webinar will present the 2020 list in a manner that you can show to your board! (See the 2019 movie on how to present this to your board.) Your auditors want you to start training your board, this movie will help them “see” what most small banks are “seeing” at the board level. More importantly, it will kick the year off in the right fashion, and ensure continued maintenance of your security culture. A great webinar for ISO’s needing material to take into the board meeting.
10 AM
What the CAT SIEMs to Be: How the infotex SIEM helps you comply with the Cybersecurity Assessment Tool.
Webinar-Movie
How does the infotex SIEM helps us comply with the Cybersecurity Assessment Tool? Our auditors are now drilling down on baseline and evolving statements, and we’ve proceeded with an assumption that infotex helps us comply with certain CAT statements. This webinar will help us not only from a compliance perspective, but also a contract management perspective (did the tuning process establish all the controls Dan will be discussing in this webinar?) This webinar may be a bit more technical than normal . . . your network engineer should join you if you’re a CIO type!
9:30AM - 3:00PM
Infosec Day
Is a day in March 2020 where three banking specialists share information about current trends in information security and risk management for banks. And it is all FOR FREE!
WHERE:
March 3rd, Chesterton Indiana
Sand Creek Country Club
1001 Sand Creek Dr, Chesterton, IN 46304
March 5th, Richmond Indiana
Forest Hills Country Club
2169 S 23rd Street Richmond IN 47374
Register Now!
10 AM
Drawing a Mortgage Loan Process in PowerPoint
Short
A question we are often ansked: what medium should we use for data flow diagrams? Visio? One of the many free on-line tools?
We are now convinced of the answer. PowerPoint. In this webinar short Dan will explain why.
10 AM
Incident Response Diagramming
Short
With the renewed interest in data flow diagrams we would like to present a type of drawing that would not technically qualify, and yet will bring as much value (if not more) than any data flow diagram: Your incident response process. Using a diagram to illustrate your process helps keep people on the same page during an incident. This is actually the process diagram infotex is using to design our “Incident Response Wizard.”
10 AM
The Three Teams in the SIEM Process
Short
You’ve heard it from every MSSP you’ve met: the definition of a SIEM is in the eye of the beholder. But at infotex, we are not talking about the database – an asset whose definition is continuously evolving. We’re talking about the way three teams collaborate in an overall Technology Risk Monitoring process. And whether you use infotex or a different MSSP, this approach will still be in place.
10 AM
The Network Support Provider Review Checklist
Short
Small banks who outsource network support have a conundrum on their hands: How do we ensure proper due diligence on a critical vendor, with possession of information, that cannot afford the standard audit regime? This webinar short attempts to answer that.
10 AM
Down and Dirty Vendor Management
Webinar-Movie (Rerun)
A rerun: Based on what Dan is finding in reviews of several audits where Clients talked us into accepting shortcuts, Dan will review at least three five seven far-reaching shortcuts (that your auditor and/or examiner MAY agree with).
10 AM
Incident Response for Directors
Short (Rerun)
You are ready to bring your board on board . . . the incident response process. Incident Response for Directors is the movie meant to play directly to your directors. It is the “movie within a movie” from the webinar, called Teaching Incident Response to your Board meant for ISO’s . . . if you have not watched that, you may want to (it includes this movie).
10 AM
Vulnerability Management for Directors
Short (Rerun)
Our Board Awareness Training program continues with this movie, entitled Vulnerability Management for Directors, that can be presented directly to your board of directors.
10 AM
Technology Planning
2020 Update
Our annual webinar on the subject will be focused on a simplified process for small institutions, and provide starting point boilerplates for documentation. Feel free to invite your entire technology committee!
10 AM
Teaching Out of Wallet Questions
Movie out of a Movie
One of the highest likelihood attacks we face as community-based banks is the pretext call. Resolving the issue is both difficult and time-consuming. This webinar, which will be the basis of a movie meant for all users, will define the problem, the solution, and (for ISOs) how we can teach our employees to implement the solution. This is another of our Movie Within a Movie Webinars, where the longer webinar is meant to help ISOs understand what to do with the shorter movie (see next.)
10 AM
Asking Out of Wallet Questions
Movie Within A Movie
Do you know how to prove a caller is who they say they are, before giving them sensitive information?
Let’s say it another way: Do you know how to identify telephone callers by asking what the regulators call “Out of Wallet Questions?”
This movie is meant to teach all bank employees how to ask Out of Wallet Questions, and why using them is so important to our customers’ financial health.
10 AM
The Change Control Procedure
Short
The world has changed; we need to document it. We’re taking our patch management programs to a new level while calling it Vulnerability Management. Let’s document it! And while most auditors don’t know what to look for, YET, in a change management program, let’s document what we have BEFORE they do! A webinar short.
What to expect in an infotex tabletop test
2020 Update
This presentation is intended for those who are planning to participate in an infotex incident response test. Please let us know what questions you have, when we have our Plan Walkthrough and Test Plan Approval meeting!
As Simple as it SIEMs: Technology Risk Monitoring for Banks
2020 Update
Update: Having worked as the MSSP of choice for several school corporations since 2003, infotex has developed a posture approach that will ensure our number one deliverable:
“Our Clients Sleep at Night.”
Dan will review why a school corporation should be using a SIEM, what a SIEM actually is . . . . and then the fun begins as we walk through a SIEM in action and discuss tuning processes.
Testing Your SIEM part Deux
2020 Update
Update: All our eggs are in one basket now, and we’re watching that basket. Or are we? Now that we have fully deployed a SIEM how do we make sure that the SIEM is indeed functioning properly? This session will deliver a test plan that we can implement independent of our auditors. This is an update to our movie, with new test methods.
Have a suggestion for an upcoming topic? Send your idea to [email protected]
