Hacker Hour webinars are a series of free webinars hosted by SBS CyberSecurity. Unlike paid webinars, our free Hacker Hours aim to discuss banking issues and trends in an open format. Attendees are encouraged to join the conversation and get their questions answered. SBS will also offer products and services to help financial institutions with these specific issues.
Request Password
Hacker Hour: Red Team and Purple Team Testing
To test the effectiveness of network security controls, many organizations turn to penetration testing. The scope of testing typically depends on the maturity and goals of the organization. Many organizations rely on simple penetration testing, however, more and more are considering red team and even purple team testing.
Join us as we define the differences in red team and purple team testing and discuss which might be best for your organization.
Hacker Hour: Spooky Business Email Compromise Attacks
Just like the weather, it seems as if cyber criminals switch up their tactics with the change in seasons. The SBS Incident Response Team is seeing a string of specific business email compromise (BEC) attacks that everyone should be aware of.
Join SBS as we discuss the spooky techniques that hackers are using this season to compromise your networks. We will share simple fixes you can deploy to ensure that you are not haunted by a compromise.
Hacker Hour: Vendor Review Walk Through
Hacker Hour: Vendor Review Walk Through
We live in a world where nearly every business function can be outsourced to some type of service or cloud provider. Adopting a more proactive vendor management process is essential in enabling organizations to make better business and vendor related decisions. Although completing reviews and managing each vendor relationship can be a tedious task, if done properly an organization can see great benefits and are better positioned to deal with disruptions or cybersecurity issues.
Join SBS as we walk through the process of conducting a vendor review and discuss how organizations can structure their overall vendor management program.
Hacker Hour: 5 Steps to Completing an IT Risk Assessment
An IT risk assessment is one of the most valuable tools any business, no matter the industry, can utilize to identify and understand risk to make better business decisions. Many organizations have little guidance on how to properly complete a risk assessment or do not see enough value to keep the risk assessment up to date. Join SBS as we walk through five simple steps to completing the IT risk assessment and discuss how organizations can understand the results to provide more business value.
Hacker Hour: Wake Up the Team! Getting Your People to Pay Attention to Cybersecurity Training
Title: Hacker Hour: Wake Up the Team! Getting Your People to Pay Attention to Cybersecurity Training
Organizations are spending increasingly more time and resources on cybersecurity. Despite the additional focus and investment, creating a “Culture of Security” continues to be an organization’s greatest challenge. Our frustration builds when we push out more training and our people continue to get caught by phishing, scams, and hacks. Join SBS and special guest Honey Shelton, training expert, as we discuss what you can do to ensure your training efforts result in better security awareness and make your “Culture of Security” meaningful!
Hacker Hour: Common Questions About Business Continuity Planning
Hacker Hour: Common Questions About Business Continuity Planning
Description: A business continuity plan is a strategic collection of documents, procedures, and other information that prepares a business for interruptions that arise from unexpected events or situations. Join SBS as we address the most common questions/issues that arise when creating and maintaining a strong business continuity plan.
Hacker Hour: Remote Work Security Assessment
Hacker Hour: Remote Work Security Assessment
Description: Remote work has been a trend in the workforce for years, but the COVID-19 pandemic reignited the growth and adoption of remote workers. Organizations around the globe implemented a variety of innovative solutions to continue to serve customers and allow employees to work from home. Unfortunately, organizations had to react quickly and skip certain security steps to make sure the business was able to operate.
Join SBS as we discuss the most common steps that were missed and how you can ensure that your business has a handle on the security of remote work. We will cover risk assessment, policy/programs, remote access testing, and more.
Special Edition Hacker Hour: Innovation Through a Pandemic Round Table
The COVID-19 pandemic has caused abrupt changes in operations for organizations around the world. The result has been the implementation of a variety of innovative solutions to continue to serve customers and allow employees to work from home. Collaborate with SBS and your peers for an interactive round table discussion focused on sharing innovative ideas and ways of leveraging technology that has kept our businesses running in a mostly virtual world.
Hacker Hour: Cyber Law and Insurance - Surviving an Incident
Cyber insurance has become a common risk mitigation strategy to lessen the financial impact of a cyber incident. However, it's not until an incident happens that we really think about the type of coverage we carry and how it affects our ability to recover. Join SBS and Dickinson Law as we discuss common questions and issues that arise during an incident as well as what information you should know about your policy to quickly take action. Additionally, we will review a couple of case studies that cover real-world scenarios that will arm your institution against the next incident.
{Hacker Hour} Understanding Office 365 Security
Hacker Hour: Understanding Office 365 Security
Cohosts: Tyler Gross and Dylan Kreutzfeldt
Complimentary webinar series.
Description: According to Forbes.com, over 50% of companies have deployed a cloud solution such as Microsoft Office 365. That number is looking to surpass 70% in the next few years. When deploying Office 365 or other cloud solutions in your environment, it is important to understand the security and advanced tools that can be used to reduce risk in the organization.
Join SBS as we discuss how you can:
- Capture Office 365 or cloud solution in your risk assessment
- Address Office 365 in vendor management
- Identify and implement basic services that can impact security
- Understand how to audit the security controls
Hacker Hour: What to Look For in Your Next IT Audit or IT Exam
As expected, 2019 challenged security professionals to define and mature their security programs to protect their organizations from the changing threat landscapes. A good practice for any organization is to conduct periodic IT audits or exams to ensure that security teams are evaluating the company's program and enhancing insight into where the business can improve on security posture.
Join SBS as we reflect back on the some of the most impactful and valuable audit findings of 2019, and discuss what you can be looking for in your next IT audit or exam.
Hacker Hour: 3 Key Tips to Getting More Value From Your IT Strategic Plan
Description: An IT strategic plan defines how an organization will leverage technology to grow their business. Inherently, it is supposed to serve as the company's north star when making IT and security decisions, but many times it sits on a shelf waiting to be updated.
Join SBS as we discuss how the IT strategic plan can become the driving force for your information security program and IT strategic decisions.
{Hacker Hour} Managing MSP and MSSP Relationships
Audio only.
Earlier this year the Department of Homeland Security issued a warning about the growing number of cyber attacks targeted at managed service providers (MSP) and other IT services providers. Criminals target MSPs because they can get more bang for their buck. By breaching a single MSP system they can potentially gain access to all of the networks the MSP services.
Join SBS as we discuss the benefits and risks associated with MSP and MSSP relationships. We will highlight specific steps to take to understand and mitigate risk with your MSP relationships. We will also walk through what to look for when selecting a new MSP.
{Hacker Hour} Open the Tackle Box and Go Phishing
Many organizations are implementing valuable internal phishing programs in order to ensure their employees can spot and report phishing emails. At some point, organizations struggle with how to continue to challenge their employees and keep the phishing emails fresh.
Join SBS as we discuss tips and tricks to keep your internal phishing program fresh and continually push the maturity level of your security awareness program.
{Hacker Hour} Key Components of Your Annual GLBA Report
The “Gramm-Leach Bliley Act” (GLBA), also known as the Financial Services Modernization Act of 1999, mandates that financial institutions protect the confidentiality and security customer personally identifiable financial information. Communicating to the Board of Directors what was truly accomplished during the past year in an annual state-of-information-security report allows them to understand and approve how the organization is complying with GLBA. Creating a repeatable, specific GLBA report template will improve the efficiency of the reporting process and relieve some of the stress of aggregating all the data needed for a comprehensive report.
Join SBS as we outline a comprehensive and repeatable template that can be used to build your own annual GLBA report. We will walk through the essential report components and troubleshoot common issues.
{Special Report Hacker Hour} FSSCC Releases New Cybersecurity Framework
The FSSCC has released a new cybersecurity framework called the “Cybersecurity Profile.” The Profile is a standards-based tool to help guide financial services institutions in developing and maintaining a cybersecurity risk management program. The new framework option has people asking a lot of questions:
- How is it different than the Cybersecurity Assessment Tool?
- Will it be used by US regulators?
- Is it more efficient than the other frameworks on the market today?
Join SBS as we review the framework and provide answers to these and other common questions.
{Hacker Hour} Taking Cybersecurity From the Basement to the Boardroom
Regulators have made it clear that cybersecurity risk management and oversight is ultimately the responsibility of the Board of Directors. In theory, it makes sense for the board to be interested and engaged in what is going on in cybersecurity, however, that is not the case in some situations.
For this Hacker Hour, we went straight to the source. We asked a selection of past Hacker Hour attendees to share the most common issues they struggle with when communicating cybersecurity needs to their Board. The responses fell into three main categories:
- Frequency of FFIEC Cybersecurity Assessment completion and utilization of risk assessment data.
- Information that should be provided to the Board on a consistent basis.
- Tips for engaging and educating the Board.
Join this month's Hacker Hour as we discuss how to boost cybersecurity from its hiding spot in the basement to a consistent topic in the boardroom.