2 min read
Managing the Relationship Between Information Technology and Information Security
It’s easy to use the terms “Information Technology (IT)” and “Information Security (IS)” interchangeably. They are equally important but serve...
Governance (2)
2 min read
Meaningful Governance
Most information security professionals understand the compliance and business requirements of keeping management informed of the Information...
2 min read
Backups vs. Retention
We often run into situations where different staff in an institution have different understandings of the goals and operations of their backup...
6 min read
Independent Collaboration Part 2: A Framework for Outsourcing IT in Financial Institutions
This article is the second of a 2-part series on building an effective outsourcing strategy for the various components of IT for financial...
4 min read
Independent Collaboration Part 1: A Concept for Outsourcing IT in Financial Institutions
It sounds like a total oxymoron: Independent Collaboration. On the Predictive Index, those two words are on opposing ends of the spectrum when it...
2 min read
The Powerful GLBA Board Report
When the Gramm-Leach-Bliley Act was implemented, each regulatory agency adopted a set of interagency guidelines and regulations required for...
3 min read
Does your Change Management Process Need a Conversion?
We are seeing findings related to change management cropping up in several audit reports this year. Appropriately scoping change management can be...
2 min read
The Perfect Meeting Agenda to Improve IT & Cyber Governance
One of the first things we do when working with a new client is to establish recurring monthly meetings with a set agenda for every meeting. Having...
3 min read
Your Information Security Program Needs Focus
I recently had the chance to speak with Cyrene Wilke, SVP Operations & Technology at Investors Community Bank in Wisconsin on the need for community...
3 min read
The Most Underrated Control in Information Security
The access review is the most underrated control in the Information Security Officer’s toolkit.