2 min read
Why the FFIEC CAT Isn’t Your Risk Assessment—And What To Do Instead
With the upcoming sunset of the FFIEC Cybersecurity Assessment Tool (CAT) in less than three months, community banks are beginning to get nervous...
Risk Assessment
2 min read
From Compliance to Confidence
Building a Risk-Based Information Security Program for Community Banks For many community banks, passing a regulatory exam can feel like a victory...
2 min read
How Financial Institutions Can Get Ahead of 2025 Cybersecurity Exams
If you work in a bank or credit union, you already know the expectations have changed. Regulators aren’t just asking whether you have cybersecurity...
3 min read
Understanding the Second Amendment to DFS Part 500: What Financial Institutions Need to Know
The Second Amendment to the New York Department of Financial Services (NYDFS) Part 500, finalized on November 1, 2024, introduces more stringent...
2 min read
In a World of Emerging Technology, One Truth Remains
Artificial intelligence, quantum computing, cryptocurrency, banking as a service - there’s no shortage of new technology shaking up the financial...
2 min read
Five Essential Cybersecurity Tasks to Complete Before Year-End
As we approach the end of the year, it's crucial for institutions to ensure their cybersecurity measures are robust and up to date. We typically put...
2 min read
The Superpower of Consistency in Cybersecurity
In the ever-evolving world of financial services, where cyber threats are a constant and compliance mandates tighten, the importance of a robust...
2 min read
Control Assessments Vs. Risk Assessments
When we first start working with new institutions, it is not unusual for us to see them struggling because they have focused their efforts on...
2 min read
The Parallels of Little League Coaching and Managing Cybersecurity Risk in Financial Institutions
In the seemingly disparate worlds of coaching little league baseball and managing cybersecurity risk within financial institutions, striking...
1 min read
Enhancing Productivity in Information Security: Small Wins, Big Gains
In a previous post, we explored the transition from a reactive to a proactive approach in managing an information security program. Building on that,...