1 min read
Incident Response testing is critical. A lot of banks are doing it, but some still aren't. It is required to achieve Baseline maturity in the 2015 FFIEC Cybersecurity Assessment Tool (D5.IR.Te.B.1 for those following along). But what kind of...
Read More1 min read
It was during an incident response test with a client that this topic came up. The scenario was something like this: Ransomware infects several...
1 min read
The survey was conducted in January of 2016 by BankDirector.com where they asked executives and board members at 161 different financial institutions...
1 min read
We are in the security business. So "SECURITY" should be in the name, right? When I first started on my own, I was a little afraid to get specific on...
I love this article by Kevin Beaver on goals for your ISP. Although it's already the end of March, it is applicable at any time of the year because...
3 min read
What is a Virtual CISO (vCISO)? Keeping your information security and cybersecurity programs up to snuff can be difficult for community banks. Having...
1 min read
Ransomware is a very scary thing for community banks. I have a couple clients that have had to go toe-to-toe with it and were fortunate enough to...
1 min read
Dan Hadaway, with Infotex, goes into great detail on the risks associated with misconfiguration of "secure" email in one of his recent blog posts. He...
1 min read
Ever wonder why social engineering attacks are on the rise?
Mastercard will be launching an app that uses a 'selfie' to authenticate the user later this year. Will community banking apps follow suit in the...