Tips

Tips

• Identity management for financial firms in turbulent times

  Tough times and ongoing challenges in the financial services industry have led many organizations to step up their identity management efforts. In this tip, Mark Diodati explains how financial firms are using authentication and provisioning tools to...  Continue Reading

• Identity management for financial firms in turbulent times 2

  Tough times and ongoing challenges in the financial services industry have led many organizations to step up their identity management efforts. In this tip, Mark Diodati explains how financial firms are using authentication and provisioning tools to...  Continue Reading

• How to use data loss prevention tools to stop data exfiltration

  Data loss prevention tools are usually considered as a defensive tactic against insider risks, but they can also help protect secure data against external attacks. In this tip, Rich Mogull explains how properly configuring and positioning your DLP ...  Continue Reading

• Red Flag Rules compliance demands a risk-based approach

  Financial-services firms face significant risk if they cannot demonstrate compliance with the federal Red Flag Rules, which require organizations to implement a program that effectively detects, prevents and mitigates identity theft risk. In this ...  Continue Reading

• Book chapter: Remote deposit capture risks

  Remote deposit capture isn't without its risks. In Chapter 6 of his book, "Capturing Your Customer! The New Technology of Remote Deposit," author Dan Fisher reviews RDC risks.  Continue Reading

• Understanding the impact of new state data protection laws

  States have passed new regulations to boost data security, requiring financial-services firms and other companies to encrypt data at rest, in transit and even on portable devices like laptops. In this tip, Robert Mullins explains the impact of the ...  Continue Reading

• Understanding the FFIEC remote deposit capture guidance

  Federal banking regulators recently released guidance for assessing and managing risks associated with remote deposit capture. In this tip, Dan Fisher explains the key components of the guidance, including its definition of RDC and how it emphasizes...  Continue Reading

• How to communicate the value of security controls for online transactions

  Selling security to financial business managers always seems like a losing battle. A better approach is to draw analogies to the physical world to convey the importance of encryption and other security controls for online transactions.  Continue Reading

• How to leverage your legal team in the PCI compliance audit process

  As part of the PCI compliance process, financial institutions will usually conduct a pre-assessment review. But proceed with caution: the pre-assessment findings can become a liability if not properly protected. In this tip, Rick Lawhorn explains ...  Continue Reading

• How to perform a network device audit

  From unauthorized applications to rogue devices like data-slurping USB sticks, enterprise networks face a growing number of security risks. For financial-services firms, the data loss or network intrusions that can result from unauthorized network ...  Continue Reading

• Using virtualization for compliance efforts

  Information security professionals at financial institutions deal with a myriad of regulatory requirements and many experts expect the compliance burden will grow in 2009 in the wake of last year's industry meltdown. To meet reporting and other ...  Continue Reading

• PCI 1.2: Seven key changes for financial organizations

  PCI DSS version 1.2 was released on Oct. 1. So what changes will effect financial services firms? In this tip, we explore seven key changes that financial firms need to pay attention to.  Continue Reading

• PCI DSS 3.1 requirement best practices

  Requirement 3.1 of the PCI Data Security Standard requires minimum cardholder data storage. In this tip, learn how to determine how much data your organization should store.  Continue Reading

• How to make information security a company-wide effort

  For an information security program to be successful, it must include everyone in the company, not just the security group. In this tip, Eric Holmquist outlines steps financial firms should take to ensure they have an army of people working on their...  Continue Reading

• Mobile payment adoption risks

  As mobile banking grows in popularity, financial institutions need to weigh the adoption risks to determine whether it's a product they want to offer. Rick Lawhorn lays out the top three risk factors and what your company should do to help overcome ...  Continue Reading