2 min read
A little over a year ago, bank regulators published new proposed guidance on managing third-party risk. One of the more controversial topics in this guidance is whether a data aggregator needs to be considered a third party by a bank. A data...
Read More
2 min read
A few weeks ago, in my life outside of cybersecurity, a person said to me: “You are always thinking three steps ahead of the rest of us”. I am not...
1 min read
Financial institutions are required to regularly assess the authentication controls, security layers, and monitoring of Internet Banking to prepare...
2 min read
Most financial institutions understand the importance of Multifactor Authentication (MFA) in keeping unauthorized parties from gaining access to user...
2 min read
In August, the FFIEC released new guidance titled “Authentication and Access to Financial Institution Services and Systems”. Because the guidance...
2 min read
We often run into situations where different staff in an institution have different understandings of the goals and operations of their backup...
2 min read
Phishing remains one of the top threats to organizations today. Every user regularly receives emails designed to trick them into clicking on a link,...
2 min read
Being on the board of a financial institution is not easy. Board members are expected to not only be knowledgeable about the operational and...
2 min read
It is a good practice to identify a cybersecurity framework as part of an institution’s Information Security Program. A framework helps to identify...
2 min read
Multifactor Authentication (MFA) is one of the most important controls to block account takeover fraud. There are many different forms of MFA...
