2 min read
5 Simple Steps to a Proactive Information Security Program
If your Information Security Program feels more like you’re constantly putting out fires than preventing them, you’re not alone. Many community banks...
Risk Management
1 min read
A Strong Defense Wins Championships—and Protects Your Data
In football, it’s often said that defense wins championships. The same principle applies to information security: the strength of your defensive...
2 min read
Why You Need Both an Information Security Risk Assessment and a Framework Self-Assessment
When it comes to managing cybersecurity risk in community financial institutions, there’s often confusion between two key activities: the Information...
2 min read
Why We Built The BaaS Risk Checklist (And What We’re Hoping to Learn)
Over the past year, I’ve had more than a few community bank leaders ask me the same question: “How can we explore innovation without putting the bank...
2 min read
Why the FFIEC CAT Isn’t Your Risk Assessment—And What To Do Instead
With the upcoming sunset of the FFIEC Cybersecurity Assessment Tool (CAT) in less than three months, community banks are beginning to get nervous...
2 min read
The Wild, Untamed, and Exciting World of Passkeys
In today's digital landscape, securing user authentication is more critical than ever. Recently, I explored the benefits of using Yubikeys and...
2 min read
From Compliance to Confidence
Building a Risk-Based Information Security Program for Community Banks For many community banks, passing a regulatory exam can feel like a victory...
2 min read
Using RACI Charts to Strengthen Risk Management and InfoSec Programs
Without defined roles, critical tasks like policy reviews, incident response, and business continuity planning, or risk assessments can be overlooked...
3 min read
Strengthening Cybersecurity with a Single Source of Truth
In the current cybersecurity landscape, organizations generate and rely on vast amounts of data from various tools, systems, and platforms. Without a...
4 min read
Beyond the CAT: Building on a Foundation That Lasts
Introduction As most bankers know by now, the FFIEC Cybersecurity Assessment Tool (CAT), first released in 2015, will officially sunset on August 31,...