2 min read
Control Assessments Vs. Risk Assessments
When we first start working with new institutions, it is not unusual for us to see them struggling because they have focused their efforts on...
Risk Assessment (2)
2 min read
The Parallels of Little League Coaching and Managing Cybersecurity Risk in Financial Institutions
In the seemingly disparate worlds of coaching little league baseball and managing cybersecurity risk within financial institutions, striking...
1 min read
Enhancing Productivity in Information Security: Small Wins, Big Gains
In a previous post, we explored the transition from a reactive to a proactive approach in managing an information security program. Building on that,...
3 min read
The New ISO’s Playbook: Understanding Effective Security Policies
If you've found yourself in the role of a new Information Security Officer (ISO), then welcome to the intricate world of finance, where cybersecurity...
2 min read
4 Steps to Strengthen Your Cybersecurity Program in 2024
As we get ready to usher in the new year, it's essential to assess and enhance your cybersecurity program. Let’s explore four key strategies to...
3 min read
5 Steps to Utilizing Key Controls
Recently we’ve received a number of requests for “Key Controls” from auditors or examiners for the financial institutions we work with. Fortunately,...
1 min read
Board Cyber Awareness
Over the next few months, Information Security leaders will be presenting their annual security update to the Board as required by the Gramm Leach...
1 min read
Regulators Becoming More Prescriptive
Recently, the New York Department of Financial Services (“DFS”) released a proposed update to its 2017 “Cybersecurity Requirements for Financial...
2 min read
Self-Assessing Authentication & Access Risk
A little over a year ago, banking regulators released the “Authentication and Access to Financial Institution Services and Systems” guidance. Since...
2 min read
Charging Dr. Ransomware
Moises Luis Zagala Gonzalez, a 55-year-old Venezuelan cardiologist, has been charged with developing the Jigsaw v.2 and Thanos ransomware strains,...