1 min read
‘Tis the Season for Tax Scams
Every year, thousands of people fall victim to tax-related phishing scams. As with most intrusions, it only takes one click on a fraudulent link to...
Banks (7)
2 min read
Is Your Risk Assessment Authentication & Access Ready?
In August, the FFIEC released new guidance titled “Authentication and Access to Financial Institution Services and Systems”. Because the guidance...
2 min read
Meaningful Governance
Most information security professionals understand the compliance and business requirements of keeping management informed of the Information...
2 min read
Log4Shell Response for Community Financial Institutions
This post is intended to help community financial institutions appropriately prioritize their response efforts to the Log4Shell vulnerability. If...
2 min read
Extending Security Controls Beyond the Office
Over the past several years, organizations have allocated considerable resources to protect their Information Technology environment. Historically,...
2 min read
Backups vs. Retention
We often run into situations where different staff in an institution have different understandings of the goals and operations of their backup...
2 min read
Cyber New Year’s Resolution: Start with a Gut Check
Ever get that feeling that you don’t know what you don’t know about the effectiveness of your cybersecurity program?
2 min read
Tricky Phish Testing
Phishing remains one of the top threats to organizations today. Every user regularly receives emails designed to trick them into clicking on a link,...
3 min read
Multi-factor Authentication Threats Heat Up
Just a few months ago, we wrote an article about the dangers of using SMS (text) to support multi-factor authentication (MFA), called Breaking the...
1 min read
Resource for your Customers: 1-Page Cybersecurity Checklist For Small Businesses
Recently, I was presenting to a risk management forum at a banking association on cybersecurity and the question came up as to whether my company...