Application Security: Exactly What Can Your Users Access?
David Schneier • June 5, 2008
The OCC recently issued a bulletin (2008-16) in which it targets application security and the need for banking institutions to properly address application security "whether internally developed, vendor-acquired, or contracted for." I for one am relieved.
The Growing Business Role for Security Leaders: John Pironti, ISACA
Tom Field • June 4, 2008
Interview with John Pironti of ISACA's Education Board Security leaders are quickly evolving in their roles to focus more on the business of banking, less on the technology of information security. This is the main message delivered by the results of ISACA's recent Information Security Career Progression...
Customer Innovation and the Art of Reaching Generation Y
Mike D'Agostino • May 23, 2008
Let's face it, the goal of any business is to make money -and grow a base of customers. So where does a banking institution find new customers?
FRB Action: A Sign of the Times
Tom Field • May 14, 2008
In case you missed it - because it wasn't a huge headline anywhere - here's a bit of news about First Pryority Bank, a 108-year-old community bank based in Pryor, OK. Well, first a bit of background. First Pryority was founded in 1900 by W.A. Graham,
When is a Customer Too Much of a Security Risk?
Linda McGlasson • May 14, 2008
It's not always easy to decide to stop doing business with a person or entity. In fact, it might be a decision that many bankers aren't willing to face. However, when an institution sees a growing amount of fraud losses on a customer's online banking account due to their negligence,
Banking or Security - Which Leadership Skill Set Does Your Institution Need Most?
Here's the situation: You have to hire a new CISO for your financial institution. Which is better: to hire a banker who can be trained in information security, or to hire an information security professional who can be trained in banking? We posed this question to a group of industry experts and professionals,...
Identity Theft Red Flags Progress Report: How Does Your Institution Stack up?
Linda McGlasson • May 6, 2008
Let the countdown begin. As of May 1, U.S. financial institutions have just six months left to comply with the new Identity Theft Red Flag Rules, which (among other things) mandate new levels of documentation, training and awareness. Red Flags is one of the top regulatory priorities of the year, and for many...
How to Re-engineer an Information Security Risk Assessment Program
Tom Field • May 6, 2008
Interview with Brian Huntley, VP & ISO, Camden National Bank Just over two years ago, Brian Huntley arrived at Camden National Bank in Maine, charged with responding to regulatory guidance and transforming the bank's information security risk assessment program from one that was threat-based to one that is now...
Workplace Violence: What Every Financial Institution Needs to Know
Tom Field • April 29, 2008
Workplace violence - it's one of the most common but least understood risks to all organizations. From robberies gone awry to bullies in the workplace to domestic anger spilling over from home, the financial institution is rife for violent situations. In this interview, Kim Matlon, COO of R&A Crisis Management...
Workplace Violence -- What You Need to Know: Kim Matlon, Crisis Expert
Interview with Kim Matlon, Business Continuity/Crisis Management Expert Workplace violence - it's one of the most common but least understood risks to all businesses. From robberies gone awry to bullies in the workplace to domestic anger spilling over from home, the workplace is rife for violent situations. In...
Crime Time: Malware and the Latest Threats to Your Business
Linda McGlasson • April 18, 2008
The best offense is a good defense, especially when it comes to fighting criminal hackers. Dr. Markus Jakobsson, principal scientist at Palo Alto Research Center and an adjunct associate professor at Indiana University, and Zulfikar Ramzan, a Senior Principal Researcher in the Advanced Threat Research Group at...
PayPal Leads Fight Against Phishing
When Michael Barrett, CISO of PayPal, joined the company two years ago, he asked how senior leaders were fighting the phishing problem. "Technically, we don't have a phishing problem," he was told. Yes, scores of PayPal customers were inundated daily with fake emails attempting to lure them to fake websites,...
Online Banking: 'Deputizing Our Customers' at Bank of America
Tom Field • April 9, 2008
Bank of America is well known for its mobile banking services. Currently, the institution has 750,000 mobile banking customers receiving services on 400 different kinds of devices. But did you realize that one of the ways BoA secures its electronic offerings is by providing its customers with abuse reporting...
DHS Secretary Chertoff to Business: 'Send us Your Best & Brightest'
In stepping up the fight against cyber crime, Michael Chertoff, Secretary of the US Department of Homeland Security (DHS), has a simple request: Send some of your best & brightest employees to help the government's efforts. "We want your ideas, insights and I daresay your employees," Chertoff told the crowd in a...
With the Identity Theft Red Flags deadline looming large, many financial institutions are scrambling to create or beef up their customer awareness programs. Read this interview for insights from banking attorney Charlotte Bahin on: What banking institutions are doing for customer awareness - and what they should be...