1 min read
Since the pandemic and the rise of work at home, we have become very familiar with Multi-Factor Authentication (MFA). Typically, this is implemented as a One-Time Password (OTP) delivered via an application on a smartphone, phone call, or SMS text.
Read More
1 min read
If you are new to managing cybersecurity for a financial institution, I’m sure you’ll have a lot of questions. More specifically, “Where do I start?”
2 min read
A few months ago I was listening to a podcast. The business owner being interviewed wasn't in cybersecurity but had a consulting business. And he...
2 min read
A BISO (Business Information Security Officer) is an ombudsman for business lines across an institution. This person is responsible for representing...
2 min read
While the FFIEC has released three major guidance updates since July 2019, the FDIC has not updated its examination program to include the newer...
2 min read
Let's use our imaginations for a few minutes.
1 min read
Reviewing Complementary User Entity Controls (CUECs) is an important part of any financial institution’s third-party management program. However, we...
3 min read
Over the past month, many have written about the latest LastPass breach. If you have not kept up with the breach, you can see the disclosure from...
1 min read
Over the next few months, Information Security leaders will be presenting their annual security update to the Board as required by the Gramm Leach...
3 min read
I've been asked about the state of cyber insurance multiple times over the past couple of months.