This blog post is going to sound a little bit self-serving, but I promise you it's not intended to be that way. I've had the opportunity to do a little bit of traveling over the last month, and...
Recent Posts
Over the last six months we've had the opportunity to be a part of a team that has handled a few incidents involving email account takeover. Specifically, with Office 365, which is a platform a...
We're still seeing a large number of financial institutions, both large and small, struggling with appropriately sizing their vendor management program. And when I say sizing, I don’t mean a matter...
Think you always need to spend more money to make your cybersecurity program better? Think again. Deloitte and FS-ISAC teamed up to do a survey on cyber security in financial institutions, and...
Most organizations answer that question with: “examiners haven’t had any issues with them, they’re just fine.” In some cases, that may be true, but examiners have finite resources and have to pick...
Unfortunately, cyber criminals are getting better and better at what they do. Threats are constantly changing and evolving and it's our responsibility to stay one step ahead at all times. But...
According to a 2018 Risk Survey done by BankDirector[dot]com, 48% of financial institutions under $500 Million in assets are not sure if they have adequate levels of cybersecurity expertise. ...
One of the questions we get asked quite frequently is, "What does a CISO Do?" Our response has been a deep dive into the details of the responsibilities, tactics, and tasks of this role. Until...
"Are we just checking off boxes with regulators, or were there actual benefits in performing a business impact analysis (BIA)?" It's the type of question we love to hear from our clients because...
On Wednesday, April 10, 2018, the FFIEC issued a joint statement on cyber insurance, specifically, on how financial institutions manage their coverage. We've been interested in the role that...