Practical thinking on security, IT, compliance, and AI, written for leaders of regulated institutions.
Do you find it annoying to have to deal with Multi-Factor Authentication? Multi-factor authentication (MFA) is that extra log-in step that cyber experts, including Microsoft and the FBI, say will stop 95 percent of attacks. (Some say 99 percent!) We will stipu
What is the difference between compliance and security in technology? Is there a difference? Yes, there is a difference. While cybersecurity and IT compliance have elements in common, they are still different protocols. Consider the definitions: Cybersecurity
The recent Log4j exposure raises the question: Do you have a Vulnerability Management Program? A Vulnerability Management Program is a systematic approach to periodically assessing your data exposure. It involves a scan of what you have on your systems – equip
With everything on your plate, running a Vendor Management program for your Bank’s multiple vendors may seem overwhelming. Who do you call? What do you ask? An effective Vendor Management program will ascertain all vendors’ security postures. It will advise yo
Does the thought of creating a Cybersecurity Program for your bank seem overwhelming? Are you having trouble building a viable, documented program? A Cybersecurity Program should be part of your bank’s Risk Management efforts – as well as a critical element of