About Us | Contact Us
View Cart

T7 – The Trend of Trends 2017

By Vigilize | Thursday, March 23, 2017 - Leave a Comment

The seven best trend articles in 2017 . . .


For ISO’s of small financial institutions.


ServIcons_ITAudit_01

We’ve  identified a whole new set of trend articles in Information Security that those in the field should know about, and while our take on this year’s installment is coming a little late, we think you’ll agree that there have been plenty of new developments since last year!

As we’ve said before in our previous takes on this article (Here’s the 2015 edition, and here is 2016’s), it’s important to consider when reading these pieces whether they are discussing current trends or if they’re making predictions. While both kinds of articles can be interesting to read, we try to consider them differently: by basing tactical plans on current trends, and longer term strategies based on predictions.

Whether planning or strategizing, you’ve got to start somewhere–and we think the following subjects (and articles!) are a good place to start for 2017:

  1. The Internet of Things. As common household items from thermostats to light bulbs start coming bundled with internet access the number of attack vectors for criminals has and will continue to grow at a rapid pace. Making matters worse, many of these devices lack the ability to be updated should a fatal vulnerability be discovered, and you may lose all functionality if you later decide to turn off internet access!
  2. Encryption by the bad guys. The push to encrypt everything hasn’t been lost on those wishing to do you and your business harm–the use of encryption in malware command and control channels makes detection by IDS/IPS systems more difficult, and can also prevent detection on endpoint machines as well.
  3. Cyber risk insurance. Part of your risk strategy in dealing with ransomware, reputation attacks and similar incidents should be insurance that covers some of the (potentially high) costs associated with a breach or other cyberattack.
  4. Vendor Security. Many security breaches that have made headlines as of late started due to poor vendor security–from card readers to secure messaging services, very few organizations can afford to do everything in-house, and the risks presented by a vendor may not always be obvious at first.
  5. Cloud Security. As adoption of cloud storage continues to climb, it’s more important than ever to have a good strategy when it comes to the risk such services may expose you and your organization to.
  6. More advanced and targeted phishing attacks. No, phishing attacks aren’t going away any time soon–far from it, they’re actually increasing dramatically in their complexity and how their targets are being chosen! Now if you or an employee accidentally get hit by a phishing email it’s almost certain to contain ransomware, which as we covered in #2 is also a burgeoning field.
  7. Reusing passwords coming back to haunt you. With more sites and services demanding more out of your passwords (letters, numbers, special characters and other requirements abound) it has never been more tempting to reuse that one “good” password you’ve memorized–and the bad guys are counting on you to do that!

 


This article is now a collaboration of several infotex team members.  Original T-7 article concept by Dan Hadaway CRISC CISA CISM. Founder and Managing Partner, infotex

Dan’s New Leaf is a fun blog to inspire thought in the area of IT Governance.


same_strip_012513


 

Latest News
    from Dan’s New Role . . . And note the date! Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Once again, I am turning over a new leaf.  Those who have not been following this blog for its full fourteen-year history might not realize […]
    Top Seven Risks . . . that small bank Information Security Officers face in 2023! When we present audit reports to boards of directors, we also talk to the board about the top risks the institution is facing. Since 2006, we have been compiling a list of the “top seven risks small institutions are facing,” in […]
    Another awareness poster for YOUR customers (and users). Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Check out posters.infotex.com for the whole collection! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape) You are welcome to print out and distribute this around your […]
    The new plan calls for technology providers, and not end users, to be responsible for security… An article review.  Following multiple high profile cybersecurity incidents in 2021 and 2022 the Biden Administration recently announced new long-term goals for the nation’s cybersecurity, and under the new plan companies that provide technology would carry more of the […]
    R7: 2023’s Top Seven Technology Risks Webinar-Video What are the top seven risks your board should know about in 2023? Since 2006, Dan has been compiling a list of the “top seven risks small institutions are facing,” in preparation for his board presentations. This webinar will present the 2023 list in a manner that you […]
    A new way of helping people “read” new guidance… Look for more in the future! To save you time, we are proud to present “Adam Reads” . . . recorded versions of our Guidance Summaries! Below you can find an embedded player for the audio file. If you are having issues with that working, you […]
    Times they are a-changin’ . . . The infotex website is being updated. You read that right! We are in the process of updating our website from the circa 2013 version we have had for far too long. As the Digital Media Manager for infotex this excites me greatly and I look forward to the […]
    A new Team member’s first article! In today’s news cycle, it is difficult to miss all the fuss about AI, or more specifically, ChatGPT. So many differing opinions on the matter can make it hard to decipher what the future looks like. Few people think AI is a gimmick, but not many know the possibilities […]
    A draft version of the new framework may be available as early as this summer… An article review. As the cybersecurity landscape is constantly evolving, the tools we use to address risk need to evolve as well–and by this summer we should be getting our first look at planned changes to the NIST cybersecurity framework.  […]
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Check out posters.infotex.com for the whole collection! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape) You are welcome to print out and distribute this around your […]