About Us | Contact Us
View Cart

T7 – The Trend of Trends 2017

By Vigilize | Thursday, March 23, 2017 - Leave a Comment

The seven best trend articles in 2017 . . .


For ISO’s of small financial institutions.


ServIcons_ITAudit_01

We’ve  identified a whole new set of trend articles in Information Security that those in the field should know about, and while our take on this year’s installment is coming a little late, we think you’ll agree that there have been plenty of new developments since last year!

As we’ve said before in our previous takes on this article (Here’s the 2015 edition, and here is 2016’s), it’s important to consider when reading these pieces whether they are discussing current trends or if they’re making predictions. While both kinds of articles can be interesting to read, we try to consider them differently: by basing tactical plans on current trends, and longer term strategies based on predictions.

Whether planning or strategizing, you’ve got to start somewhere–and we think the following subjects (and articles!) are a good place to start for 2017:

  1. The Internet of Things. As common household items from thermostats to light bulbs start coming bundled with internet access the number of attack vectors for criminals has and will continue to grow at a rapid pace. Making matters worse, many of these devices lack the ability to be updated should a fatal vulnerability be discovered, and you may lose all functionality if you later decide to turn off internet access!
  2. Encryption by the bad guys. The push to encrypt everything hasn’t been lost on those wishing to do you and your business harm–the use of encryption in malware command and control channels makes detection by IDS/IPS systems more difficult, and can also prevent detection on endpoint machines as well.
  3. Cyber risk insurance. Part of your risk strategy in dealing with ransomware, reputation attacks and similar incidents should be insurance that covers some of the (potentially high) costs associated with a breach or other cyberattack.
  4. Vendor Security. Many security breaches that have made headlines as of late started due to poor vendor security–from card readers to secure messaging services, very few organizations can afford to do everything in-house, and the risks presented by a vendor may not always be obvious at first.
  5. Cloud Security. As adoption of cloud storage continues to climb, it’s more important than ever to have a good strategy when it comes to the risk such services may expose you and your organization to.
  6. More advanced and targeted phishing attacks. No, phishing attacks aren’t going away any time soon–far from it, they’re actually increasing dramatically in their complexity and how their targets are being chosen! Now if you or an employee accidentally get hit by a phishing email it’s almost certain to contain ransomware, which as we covered in #2 is also a burgeoning field.
  7. Reusing passwords coming back to haunt you. With more sites and services demanding more out of your passwords (letters, numbers, special characters and other requirements abound) it has never been more tempting to reuse that one “good” password you’ve memorized–and the bad guys are counting on you to do that!

 


This article is now a collaboration of several infotex team members.  Original T-7 article concept by Dan Hadaway CRISC CISA CISM. Founder and Managing Partner, infotex

Dan’s New Leaf is a fun blog to inspire thought in the area of IT Governance.


same_strip_012513


 

Latest News
    A Webinar-Movie In 2018 the NCUA started reviewing credit unions with $1 billion or more in assets using a tool known as the Automated Cybersecurity Examination Tool, or ACET. The expansion to smaller credit unions is inevitable. In the new year, credit unions should now think about how they can come into compliance with the […]
    What are the top seven risks your board should know about in 2021? Since his first board presentation in 2000, when Dan presents audit reports to boards of directors, he also talks to the board about the top risks the institution is facing. Since 2006, Dan has been compiling a list of the “top seven […]
    It’s time for another workshop for the technical side of the community-bank. The infotex Team brings you all new topics for 2021! Topics that are jam packed with all the techno-babble that is often lost on management, but is music to the Bank IT Geek’s ears. Time for a workshop where we can turn off the […]
     A Timeline Update as of 02/22/21 An update to our Newest Employee’s FIRST Technical Article Another interim post-mortem review . . . . A Note About Updates: We have decided to leave the original article as it was originally posted and to update this post with any changes that have been made. You can see […]
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape)   You are welcome to print out and distribute this around your office.  
    A Webinar-Movie The 2020 annual webinar update on the subject will include a review of the previous years’ movies that are already available, and a discussion about alternative tactics that have arisen from recent virtual conferences and regulator panels.
    The cybersecurity industry faces challenges, and some of them may involve your business… An article review. In a world where threats to your organization’s electronic assets are constantly emerging and evolving a cybersecurity insurance policy can help mitigate risk…but what kind of risk does the cybersecurity insurance industry face?  A new article in the Harvard […]
    A Timeline as of 01/24/2021 Our Newest Employee’s FIRST Technical Article Another interim post-mortem review . . . . A Note About Updates: We are leaving this article as is, but for any updates to the timeline, check the Autopsy of the SolarWinds Hack Timeline Update article!      – Vigilize Introduction: As the managing […]
    PRESS RELEASE – FOR IMMEDIATE RELEASE BUSINESS NEWS FORUM AND CONFERENCE NEWS infotex is proud to announce that Dan Hadaway will be moderating a series of IT Forums for the Ohio Bankers League. “We are excited to continue fostering the relationship with the OBL to help educate and keep Risk Management at the forefront of […]
    Top 7 Trend Articles of 2021. . .  . . .For ISOs of Small Financial Institutions. Welcome to our annual T7 article:  a list of our favorite trend articles from the past year.  Our intent: help you organize your thoughts as your work through your strategic planning process.  We hope reviewing these articles will help you […]