2 min read
On June 6th, the Federal Reserve, FDIC, and OCC released new interagency guidance on third-party risk management. The new guidance, based on existing OCC guidance from 2013 and 2020, calls for a level of due diligence that might be a surprise to...
Read More2 min read
All organizations have (or should have) a firewall that blocks unexpected communications from the Internet to internal network hosts. But what about...
2 min read
While the FFIEC has released three major guidance updates since July 2019, the FDIC has not updated its examination program to include the newer...
3 min read
Over the past month, many have written about the latest LastPass breach. If you have not kept up with the breach, you can see the disclosure from...
1 min read
Recently, the New York Department of Financial Services (“DFS”) released a proposed update to its 2017 “Cybersecurity Requirements for Financial...
2 min read
A little over a year ago, banking regulators released the “Authentication and Access to Financial Institution Services and Systems” guidance. Since...
2 min read
A little over a year ago, bank regulators published new proposed guidance on managing third-party risk. One of the more controversial topics in this...
2 min read
A few weeks ago, in my life outside of cybersecurity, a person said to me: “You are always thinking three steps ahead of the rest of us”. I am not...
1 min read
Financial institutions are required to regularly assess the authentication controls, security layers, and monitoring of Internet Banking to prepare...
