Blog

"Scoping your IT Audit based on risk" is a phrase that’s thrown around a lot by IT Audit companies and examiners, but what does it really mean? How do you know if your IT Audit is truly risk-based, or if it’s based on an auditor’s idea of what security ought to be?

Read More...

Social engineering testing more than once a year is proven to be a beneficial way to keep employees alert and hold them responsible for their actions. Since hiring regular testing throughout the year is not an option for everyone, let’s go through some options for performing your own internal social...

Read More...

Join us as we discuss the struggles that organizations have when dealing with SOC 2 reporting.

Read More...

As important and measurable as the IT Risk Assessment can be, it is only part of the equation when it comes to assessing risk at your organization.

Read More...

Recording available. In recent years, financial institutions have seen a significant amount of new guidance on third party risk management and new terms coined such as Fourth Party Management. We will explore best practices for Vendor Management, Third Party Risk Management, Fourth Party Management ...

Read More...

Recording available. In addition to the guidance, we will explore applied risk management concepts for mobile banking solutions. Focus will include Mobile Risk Assessments, integration into Information Security Programs, Third Party Risk Management, and effective IT Auditing.

Read More...

Engage your team and test your emergency preparedness with eight testing scenarios. Scenarios cover a variety of situations, including malware attack, unknown media,  physical security, power outage, ransomware attack, and website hack.  Each scenario includes:   - Ground Rul...

Read More...

This CyberByte video will crack the code on the Penetration Test. Learn how to properly scope a test, the penetration test process, how to choose the right test, and variations in testing.

Read More...

Join SBS as we discuss common BEC attacks, tips to tell your customers, and simple steps in an initial  BEC investigation.

Read More...

Sheltered Harbor is a relatively new concept that is being realized today to address new and existing cybersecurity threats that could affect the financial sector on a massive scale. The idea is to create extremely secure (and segmented) backups of financial data across the financial sector with the...

Read More...