Manage

Manage

Learn to apply best practices and optimize your operations.

• Gartner Security & Risk Management Summit 2014

  June 23 – 26, 2014, National Harbor, MD Continue Reading

• Enterprise security intelligence and analysis

  Is your enterprise security intelligence and analysis fully optimized? Expert Nick Selby discusses threat intelligence and talks about some best practices. Continue Reading

• Holistic fraud reduction through customer security management

  Monitoring customer behavior across multiple channels would help banks fight fraud, but today's fraud detection technology isn't there yet. In this tip, financial services expert Jerry Silva explains how banks could benefit from the concept of "... Continue Reading

• Data classification best practices in financial services

  Data classification is critical in the highly regulated financial industry. Learn key steps for data classification. Continue Reading

• Vendor management process for financial services

  In this video get tips from expert Eric Holmquist on how to handle vendors to optimize security and minimize risk. Topics include risk assessment, due diligence best practices, common mistakes financial firms make in their vendor management programs... Continue Reading

• Identity management federation best practices

  Outsourcing is necessary in the financial industry, but establishing secure partner communications can be difficult. Learn some best practices for implementing identity management federation.Continue Reading

• Data masking best practices for protecting sensitive information

  Protection of customer data is critical for financial services firms but encryption isn't the only option. Learn key considerations for data masking.Continue Reading

• Aite Group: Take action now to manage remote deposit capture risks

  Fraud losses involving RDC technology have the potential to skyrocket if banks don't work proactively to deal with the risks, research firm says.Continue Reading

• Security information management systems in financial services

  Security information management systems can help financial-services firms meet regulatory compliance and other requirements.Continue Reading

• Best practices and requirements for GLBA compliance

  GLBA requirements to protect personal information have become more relevant than ever. In this tip, Paul Rohmeyer examines best practices for GLBA compliance.Continue Reading

• Considerations for buying and implementing DLP solutions

  Financial institutions are looking to data loss prevention solutions to prevent costly data security breaches. In this tip, Dave Shackleford explains key issues to weigh before buying and installing a DLP product.Continue Reading

• Best practices to secure wireless networks

  Wireless LANs have become pervasive in the enterprise, making it critical that financial services firms secure them to ensure they remain compliant with regulations for protecting customer data. In this tip, network security expert Lisa Phifer ...Continue Reading

• Anti-money laundering compliance trends

  In this 11-minute podcast, Neil Katkov, senior vice president at Celent, talks about anti-money laundering compliance trends, including how much companies are spending on their AML programs and what they should look for when evaluating AML software.Continue Reading

• Weighing the pros and cons of end-to-end encryption and tokenization

  With PCI DSS and other compliance requirements, organizations are looking for surefire solutions to protect payment card and other sensitive data. Tokenization and end-to-end encryption have emerged as promising technologies, but as Dave Shackleford...Continue Reading

• Multifactor authentication options to secure online banking

  Banks are required to deploy multifactor authentication to secure online banking and meet FFIEC requirements. In this tip, Dave Shackleford describes some of the pros and cons associated with traditional forms of multifactor authentication as well ...Continue Reading

• Keeping up with state data protection laws

  In addition to regulatory requirements and industry standards, financial institutions need to comply with applicable state data protection laws. In this podcast, legal expert Andrew Baer discusses new requirements in Massachusetts, Nevada and ...Continue Reading

• Don't forget the cleaning crew in your vendor management program

  Banks often overlook non-IT vendors in their vendor management program, putting their organization and customers' data at risk, experts sayContinue Reading

• Get ready for remote deposit capture risk management scrutiny

  Industry experts expect federal banking examiners to pay more attention to how banks manage remote deposit capture risksContinue Reading

• How to manage security risks in vendor contracts

  Financial institutions face numerous regulatory requirements for managing vendor risk. Learn what financial firms need to include in their vendor contracts in order to conform with regulatory guidance and industry best practices for vendor risk ...Continue Reading

• Vendor risk management: process and documentation

  As part of the vendor risk management process, regulators expect information security officers will document vendor relationships and have proper vendor documentation.Continue Reading

• Vendor contract management: Regulatory guidance is risk-based

  From federal guidance and industry standards to state laws, financial-services firms are subject to a variety of requirements for managing vendor information security risks by contract. Andrew M. Baer explains how the regulatory guidance is ...Continue Reading

• Audit requirements drive demand for privileged account management

  SOX compliance requirements and data security concerns are accelerating growth of the privileged account management marketContinue Reading

• Social media: Risk management strategies for financial institutions

  Social media sites like Facebook and Twitter present financial institutions with reputational, liability and information security risks, making it critical that they adopt a comprehensive social media strategy. In this tip, Andrew M. Baer examines ...Continue Reading

• FFIEC guidance on RDC: Risk management basics

  Remote deposit capture can create a lot of risk for financial institutions. In part two of this three-part series, Dan Fisher gives insight into RDC risk management basics.Continue Reading

• Podcast: Detecting and investigating insider fraud

  Insider fraud is a continuing battle for financial institutions but the economic recession has increased the risk. In this 17-minute podcast, Brenda Buetow, a certified fraud examiner and senior manager of forensic services at Crowe Horwath, ...Continue Reading

• Why financials must implement Web application security best practices

  The financial services sector is a favorite target for attackers, making it critical that the industry dedicate more resources to securing Web applications. In this tip, Russ McRee describes his research into vulnerable financial Web applications ...Continue Reading

• Industry reaction to FFIEC remote deposit capture guidance positive so far, says FDIC official

  The FFIEC in January released guidance for managing risks associated with remote deposit capture systems. In this podcast, which is about 8 minutes long, Michael Jackson of the FDIC talks about the industry's reaction to the guidance and his sense ...Continue Reading

• FFIEC releases risk management guidance for remote deposit capture

  The highly anticipated guidance is expected to help financial institutions understand and manage risks associated with RDC systems.Continue Reading

• Data protection best practices for financial firms

  A priority in good times, the current crisis in the financial industry has put data protection at the top of the list for financial firms as banks merge and hackers try to take advantage of a weakened industry. Successful data governance can help ...Continue Reading

• PCI DSS 3.1 requirement best practices

  Requirement 3.1 of the PCI Data Security Standard requires minimum cardholder data storage. In this tip, learn how to determine how much data your organization should store.Continue Reading

• Emerging themes in identity access management

  During these tumultuous times in the financial industry, your organization's identity and access management efforts need to be stronger than ever. Disgruntled employees, mergers and acquisitions and hackers are just a few of the growing threats to ...Continue Reading

• Security on the street with SearchFinancialSecurity.com: Mobile banking

  Mobile banking is set to grow rapidly as customers become more and more reliant on mobile technologies and the convenience they bring. However, there are information security issues to consider. Editor Sarah Hurley recently spoke with Mark Kadrich, ...Continue Reading

• Security on the street with SearchFinancialSecurity.com: Risk management

  Societe Generale, Black Monday and bank failures are just a few of the reasons that the financial industry is in turmoil. Editor Sarah Hurley recently spoke with Chris McClean, an analyst at Forrester Research, to discuss the state of risk ...Continue Reading

• Investigation management tools ease fraud pains

  Inconsistent processes throughout a financial organization can lead to security breaches, fraud and more. Expert Michael Rasmussen recommends companies have an enterprise platform to remain secure and combat fraud.Continue Reading

• How to lay the foundation for role entitlement management

  Role entitlement management is a daunting task, however, there are steps you can take to lay the foundation for a successful management process. In this tip, expert Rick Lawhorn details these seven steps.Continue Reading

• FDIC guidance: Third party security risks are manageable

  FDIC guidance helps financial services firms effectively establish third-party security policies and manage third-party risk.Continue Reading

• Privileged password management steps to success

  Privileged password management is a pain point at many financial services firms. They're costly, hard to tame and not always secured properly. In this tip, learn how to create the foundation for your privileged password management program.Continue Reading

• The evolving value proposition and impact of identity management

  In this presentation from Financial Information Security Decisions, David Sherry, former vice president of enterprise identity and access management at Citizen's Financial Group explains how to make the business case for IAM.Continue Reading

• SIM appliance helps credit unions with compliance, incident response

  SMBs find TriGeo device an affordable way to streamline security management.Continue Reading

• Best practices in managing privileged access

  In this presentation from Financial Information Security Decisions, Forrester's Andras Cser explains how financial firms can effectively management privileged users and passwords.Continue Reading

• Key management challenges and best practices

  Key management is essential to a successful encryption project. In this tip, expert Randy Nash explains the challenges financial organizations face when implementing key management and some of the best practices to overcome them.Continue Reading

• Entitlement management systems alleviate access control pain points

  Entitlement management can be a costly and time consuming. Access control expert Tony Bradley explains how an entitlement management system can help.Continue Reading

• Password management best practices for financial services firms

  Password management is a fundamental tenet of effective information security, but it's harder than it seems to manage passwords correctly, and far too easy to mess it up. In this tip, contributor Tony Bradley shares best practices for effective ...Continue Reading

• PCI DSS pre-assessment: Managing the process to limit liability

  Conducting a PCI DSS pre-assessment can save quite a few headaches later on in the compliance process. However, it can create a lot of new ones if it isn't managed with liability in mind. Contributor Rick Lawhorn offers a brief primer on the ...Continue Reading

• Email security and compliance best practices, part two

  Secure and compliant email systems are essential for financial services companies. In part two of this two part series, George Wrenn lays out more best practices.Continue Reading

• Email security and compliance best practices

  Secure and compliant email systems are essential for financial services companies. In part one of this two part series, George Wrenn lays out a number of best practices.Continue Reading

• Best practices for implementing a data disposal policy

  Because of the Sarbanes-Oxley Act, intentional document destruction is now a process that must be carefully monitored. But a "document" takes on many forms, from spreadsheets and emails to instant messages and Word files. In this expert Q&A, Michael...Continue Reading

• Best practices for managing compliance with security standards

  Financial organizations must learn to tie their compliance efforts to their information security practices. Here are four best practices for managing compliance with industry security standards.Continue Reading

• How to make business managers responsible for security

  In this presentation from Information Security Decisions, security guru Tom Doughty provides ways to motivate security sensitivity in an organization's various lines of business.Continue Reading

• Encryption best practices

  Encryption is a necessary security tool in financial companies, but government mandates limit how much data you can encrypt and where it can be deployed. Learn how to determine what's the best plan for encryption at your financial services ...Continue Reading

• Developing a patch management policy for third-party applications

  Enterprises may push the latest critical Windows patches once a month, but here's a dirty little secret: Most organizations don't bother patching their third-party applications. The diversity of client-side software -- including everything from ...Continue Reading

• How to make management accountable for risk

  Learn how a simple document can hold management accountable for risk and encourage them to comply with security policies.Continue Reading

• Five steps to building information risk management frameworks

  Implementing a successful enterprise risk management plan can be an overwhelming and harrowing process. In order to make the process work, many aspects need to examined, and all business areas need to be hands on. In this tip, contributor Khalid ...Continue Reading

• Convergence of security and network management has pros and cons

  With security integration once again becoming a hot topic, security teams are finding themselves being merged with other operational groups, such as network management. In this tip, Mike Rothman writes why that convergence may or may not be a bad ...Continue Reading

• On-demand log management gets the nod

  Alert Logic says the SaaS model is a good fit for companies needing help with log management for compliance purposesContinue Reading

• Retention policy implementation best practices

  Security management expert Mike Rothman discusses best practices for implementing a successful retention policy within an enterprise.Continue Reading