2 min read
Corporate Account Takeovers
I want to talk about something that’s been on my mind a lot lately: corporate account takeover (CATO). As someone who has worked in the cybersecurity...
Threats (3)
3 min read
Discussions Triggered from the LastPass Breach
Over the past month, many have written about the latest LastPass breach. If you have not kept up with the breach, you can see the disclosure from...
3 min read
Cyber Insurance is Broken. How Do We Fix it?
I've been asked about the state of cyber insurance multiple times over the past couple of months.
2 min read
Self-Assessing Authentication & Access Risk
A little over a year ago, banking regulators released the “Authentication and Access to Financial Institution Services and Systems” guidance. Since...
1 min read
Preparing for a Security Incident
The worst time to develop an Incident Response Plan for dealing with a security incident is during an actual incident. It’s not a matter of “if” but...
1 min read
Strong Cybersecurity is a Moving Target
As cybersecurity budgets increase, I’ve been posed with the question of “When will it ever be enough?” In my opinion, we are either getting better or...
3 min read
Five Questions You Should Be Asking About Your Cybersecurity Program
Ahh, springtime. I love it. The birds, the flowers, the warm sunshine, the BankDirector.com Risk Survey Report.
2 min read
MFA Enrollment Mistakes
Most financial institutions understand the importance of Multifactor Authentication (MFA) in keeping unauthorized parties from gaining access to user...
2 min read
What You Can do About the Okta Compromise
News this week brought us word of something very disappointing, a breach in a large player in the identity services company, Okta. If I’m being 100%...