The FFIEC has updated their expectations for access management with the Authentication and Access to Financial Institution Services and Systems Guidance. This guidance expands beyond traditional customer authentication and places a significant emphasis on...
Finosec Tools and Resources to Empower You and Your Team
Finosec BlogTopics
Get notified on new insights from Finosec now!
Be the first to know about new Finosec blogs to grow your knowledge of the cybersecurity governance industry today!Search results for:
Zach Duke
The Critical Foundation of Managing Access to Banking Systems
Managing access to banking systems has become increasingly complex as financial institutions navigate legacy reporting systems, API access, and cloud solutions. These challenges, along with the risks posed by unmanaged systems, emphasize the need for maintaining a...
How to Get Your Information Security Budget Approved in Cost-Sensitive Times for Community Banks
In the current economic environment, community banks face unique challenges such as rate compression, shrinking margins, liquidity and commercial real estate concerns. These factors make the upcoming budgeting season particularly daunting for IT and information...
Preparing for Your Next Exam: Ensuring Identity Access Management Meets Expectations
Preparing for your next examination can feel overwhelming as the regulatory expectations continue to expand. As you gear up for your next regulatory examination (or audit), it is crucial to align with the expectations outlined in the Federal Financial Institutions...
Why You Need to Know Every System for Every Employee
Are you confident that your bank has clear and thorough visibility to every employee’s physical and digital access to systems? If you’re like most banks we work with, the answer to this question is “no”. There are many challenges that make tracking employee access...
My Epiphany of AI During a Session With My Therapist
For over a year now, every Tuesday, the Finosec team has been holding a meeting to discuss how we are leveraging AI personally, at work, and in our platform. These weekly meetings have consistently focused on sharing the impact of AI for each of us personally and the...
AI in Financial Services: Balancing Innovation, Third-Party Risk Management, and Regulatory Scrutiny
The integration of artificial intelligence (AI) in the financial services sector presents both transformative opportunities and significant challenges. As financial institutions increasingly evaluate AI technologies, it is crucial to ensure these innovations comply...
AI -The New Gutenberg Printing Press
For those of you who don’t know me or my family well, we are a Disney family. For those of you who just rolled your eyes, bear with me, this article isn’t just about Disney. It’s about a lightbulb moment I had while riding Epcot’s Spaceship Earth, which illustrates the journey of human progress from the dawn of time.
The area shows before the printing press how communication was handled; handwritten copies and one-to-one conversations. Then you see society’s leap from the written word to the digital age and computers. Just as the ride highlighted the milestone and impact of Gutenberg’s printing press, I found myself contemplating AI’s place in our future and the striking realization that the two journeys are more similar than they are different.
Navigating Cyber Insurance: Are You Really Covered? Critical Lessons Learned
In the evolving state of cybersecurity, financial institutions grapple with the challenge of safeguarding their digital and financial assets against cyber threats. Cyber insurance has emerged as a critical component of risk management strategies. However, the complexities surrounding these policies, particularly regarding coverage in the event of a breach, can leave many organizations vulnerable.
Integrating FFIEC Authentication Guidance: A Blueprint for Your Next Exam With Insights from Recent Regulatory Actions
The Federal Financial Institutions Examination Council (FFIEC) Authentication Guidance update in August 2021 has marked a significant step towards enhancing authentication and security access measures within financial institutions. This update expanded upon previous handbooks from 2005 and 2011, emphasizing a broader scope that now includes employees, third-party vendors, and system-to-system communications via APIs.