Finosec, the purpose-built information security governance platform for community financial institutions, announced the appointment of Katherine Ring as Chief Growth Officer. Katherine brings extensive experience helping organizations scale, drive sustainable revenue,...
Why Inherent Risk Still Matters Even if You’ve Already Chosen Your Framework Many community banks have already selected a cybersecurity framework to replace the FFIEC Cybersecurity Assessment Tool (CAT). NIST CSF 2.0 is one of the most popular choices, and for good...
After the August 31st sunset of the FFIEC CAT, community banks have either started to transition away or are confirming their plan and evaluating frameworks such as the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF 2.0), or CIS Controls. Each...
In today’s banking landscape, risk doesn’t just come from inside the building. Third-party vendors are now central to how financial institutions operate. They provide everything from core processing to cybersecurity tools. But with that reliance comes responsibility....
Information Security Officers wear a lot of hats: compliance coordinator, risk watchdog, IT translator, and sometimes the voice of reason in a room full of competing priorities. One of the toughest challenges? Convincing senior leadership that vendor management isn't...
With the FFIEC CAT officially sunset on August 2025, banks are rethinking how they manage cybersecurity oversight. But one area that can’t get lost in the shuffle? Vendor management. In fact, third-party risk is getting more scrutiny, not less, under new guidance. The...
With the FFIEC Cybersecurity Assessment Tool (CAT) being sunset, financial institutions are evaluating their next move. Finosec’s modernized Cyber Assessment Tool offers a streamlined alternative that builds on the foundation of your existing work, without starting...
With the official sunset of the FFIEC Cybersecurity Assessment Tool (CAT) approaching, banks across the country are asking the same question: “What comes next?” For many institutions, the CAT has long served as the cornerstone of their cybersecurity self-assessment...
One of the most overlooked challenges in cybersecurity governance isn’t the technology itself, it’s the communication. For many institutions, the gap between information security teams and executive leadership can lead to misunderstandings, misalignment, and missed...
Spreadsheets have long been the go-to tool for tracking and managing information security tasks. They're familiar, flexible, and easy to share. But in today’s rapidly evolving landscape, where efficiency; compliance; and innovation are key, relying on spreadsheets...
Managing third-party risk, performing access reviews, and completing risk assessments are foundational elements of a sound information security program, especially in the banking industry. But these processes often rely on fragmented, outdated tools like spreadsheets....
