2 min read
Lessons Learned from 2025 And What Financial Institutions Should Prepare for in 2026
As 2025 comes to a close, one theme stands out for community financial institutions: cybersecurity is no longer about reacting to individual threats....
Risk Management
3 min read
Managing Bank-wide Change: Why Cybersecurity Should Lead the Conversation
Change is a constant in banking. Whether it’s rolling out a new digital banking platform, upgrading your core, or going through a merger, most banks...
2 min read
Measuring Cybersecurity That Matters: KRIs Every Financial Institution Should Track
For regulators, auditors, and your board, good cybersecurity isn’t just about having controls in place—it’s about proving they work. That’s where...
2 min read
5 Simple Steps to a Proactive Information Security Program
If your Information Security Program feels more like you’re constantly putting out fires than preventing them, you’re not alone. Many community banks...
1 min read
A Strong Defense Wins Championships—and Protects Your Data
In football, it’s often said that defense wins championships. The same principle applies to information security: the strength of your defensive...
2 min read
Why You Need Both an Information Security Risk Assessment and a Framework Self-Assessment
When it comes to managing cybersecurity risk in community financial institutions, there’s often confusion between two key activities: the Information...
2 min read
Why We Built The BaaS Risk Checklist (And What We’re Hoping to Learn)
Over the past year, I’ve had more than a few community bank leaders ask me the same question: “How can we explore innovation without putting the bank...
2 min read
Why the FFIEC CAT Isn’t Your Risk Assessment—And What To Do Instead
With the upcoming sunset of the FFIEC Cybersecurity Assessment Tool (CAT) in less than three months, community banks are beginning to get nervous...
2 min read
The Wild, Untamed, and Exciting World of Passkeys
In today's digital landscape, securing user authentication is more critical than ever. Recently, I explored the benefits of using Yubikeys and...
2 min read
From Compliance to Confidence
Building a Risk-Based Information Security Program for Community Banks For many community banks, passing a regulatory exam can feel like a victory...