Blog

The FFIEC makes sure to remind us in multiple instances of guidance that it is ULTIMATELY the Board of Directors and Senior Management's responsibility to ensure the protection of YOUR customer data. Financial institutions must understand HOW their customers information is being protected.

Read More...

In 2015 California-based Ubiquiti Networks fell victim to a $46M CATO scheme using a simple, yet complicated attack from a familiar technology - email. Man-in-the-email scams highlight the importance of monitoring cybersecurity trends and continually updating your CA Risk Assessment process.

Read More...

School is back in session, and cybercriminals around the world are licking their chops. Hackers target college students through different avenues - Craigslist, Xbox, eBay… you name it, they are exploiting it.

Read More...

On July 21st Mobile Security Firm Zimperium announced a vulnerability for Android. Potentially affecting nearly 1 billion Android devices, this is being referred to by some as the “Heartbleed of Android.” While this vulnerability is a huge risk, there are some simple things use...

Read More...

Last time we had a new series for IT was in 1990, that's 25 years ago! In the past 30 days there has been significant activity around cybersecurity between NIST and FFIEC.

Read More...

Great questions this week from bankers on the Cybersecurity Assessment process and how to interpret the results. I wanted to provide some general feedback on how to interpret your Risk/Maturity Relationship.

Read More...

The question that has been discussed in detail by examiners, bankers, and experts is this – “Is the FFIEC Cybersecurity Assessment Tool required?” I want to highlight a few clear facts that will hopefully help you decide, not necessarily is the tool required, but should I complete it today?

Read More...

As promised in their 2014 Cybersecurity Observations publication, the FFIEC has released new guidance in the form of a Cybersecurity Assessment Tool. As one would expect, it has a heavy focus on CEO and Board level involvement, as well as tying controls to other FFIEC and NIST resources in...

Read More...

Many financial institutions and business customers have experienced the type of electronic banking theft known as Corporate Account Takeover (CATO). With this type of compromise, thieves attack the customer’s computer system and use this access to fraudulently change the ACH origination file.

Read More...