Practical thinking on security, IT, compliance, and AI, written for leaders of regulated institutions.
You know you have a robust cyber security training program, but you still wonder whether you are doing enough to implement it to the level you need to protect against cybercriminals. You’re not alone. Hackers usually start with your organization’s weakest secu
As a business owner or executive, you know that keeping your company’s sensitive data secure is a top priority. However, with the growing number of cyber threats and the increasing complexity of managing passwords, it can be challenging to ensure that your bus
No one likes to think their business has weaknesses. But unfortunately, almost all businesses have weaknesses in their cybersecurity defenses. The problem is that most companies ignore the vulnerabilities entirely or do not even know they exist. That’s why par
With the rampant rise of cybercrime worldwide, you want to protect your organization’s data security. Not only is it necessary for compliance reasons, but it also helps to improve your customers’ trust in your company. You may believe you’re protected with a t
“When tackling a complicated issue like cybersecurity, sometimes the hardest thing is knowing where to start.” We certainly get that! So we’re sharing a recent publication of Cybersecurity Advice by the Nashville Business Journal. It features our CEO, Milton B
Do you know someone who spends a lot of time on Social Media? Someone who’s posting nearly daily about their activities? Even if you avoid Facebook, Instagram, Pinterest, TikTok, and other Social Media outlets, your friend could still be putting you at risk. D
Do you find it annoying to have to deal with Multi-Factor Authentication? Multi-factor authentication (MFA) is that extra log-in step that cyber experts, including Microsoft and the FBI, say will stop 95 percent of attacks. (Some say 99 percent!) We will stipu
What is the difference between compliance and security in technology? Is there a difference? Yes, there is a difference. While cybersecurity and IT compliance have elements in common, they are still different protocols. Consider the definitions: Cybersecurity
A security incident is an event that would cause financial and/or reputational harm, disrupt daily operations, or create compliance issues with state or federal regulations. An Incident Response Plan (IRP) tackles those problems ahead of time, allowing plannin
The recent Log4j exposure raises the question: Do you have a Vulnerability Management Program? A Vulnerability Management Program is a systematic approach to periodically assessing your data exposure. It involves a scan of what you have on your systems – equip
With everything on your plate, running a Vendor Management program for your Bank’s multiple vendors may seem overwhelming. Who do you call? What do you ask? An effective Vendor Management program will ascertain all vendors’ security postures. It will advise yo
Does the thought of creating a Cybersecurity Program for your bank seem overwhelming? Are you having trouble building a viable, documented program? A Cybersecurity Program should be part of your bank’s Risk Management efforts – as well as a critical element of