2 min read
Protecting Against AI-Driven Cyber Threats
From phishing scams to ransomware, cybercriminals are increasingly using AI to launch more sophisticated, faster, and harder-to-detect attacks. To...
Audit
2 min read
Don't Forget the Bank Service Company Act
Let’s discuss an old regulation that seems to be picking up new life in recent regulatory examinations, the Bank Service Company Act (BSCA). This Act...
2 min read
Fortifying the Vault: Unveiling Data Protection Strategies for Financial Institutions
Welcome to the high-stakes world of banking, where every transaction is a delicate dance of digits, and the protection of sensitive data is...
2 min read
Why Regular Security Audits and Penetration Testing Are Your Best 'Cyber Insurance' Policy
In the ever-evolving world of finance, where digital transactions and data management reign supreme, security isn't a luxury; it's a necessity. But...
2 min read
Blocking Outbound Communications
All organizations have (or should have) a firewall that blocks unexpected communications from the Internet to internal network hosts. But what about...
2 min read
The FDIC InTREX Gets Audited
While the FFIEC has released three major guidance updates since July 2019, the FDIC has not updated its examination program to include the newer...
2 min read
The 1 Thing You Can Do to Improve Your Cybersecurity Program
Let's use our imaginations for a few minutes.
2 min read
The Risk Based Audit
We have a meeting every Monday morning to do a status update on each of the 40 financial institutions we serve as their virtual Information Security...
2 min read
Self-Assessing Authentication & Access Risk
A little over a year ago, banking regulators released the “Authentication and Access to Financial Institution Services and Systems” guidance. Since...
1 min read
Effective User Access Reviews
What exactly is a user access review? In its simplest form, this review is a process that certifies that users’ (including vendors’) access within...