Finosec Official Blog

Supporting CURE Cancer while at ICBA LIVE

Zach Duke posted in Cybersecurity, Innovation, Banking, ICBA, Cure Cancer, ICBA Live

0 Comments

One of the most difficult moments in my career happened several years back at an ICBA Live event in New Orleans.   I can immediately go back to that moment…

Read More

How the ICBA ThinkTECH changed the trajectory of our business.

Zach Duke posted in Cybersecurity, Innovation, Banking, ICBA, infosec

0 Comments

 

Read More

The Customer is Why You are in Business

Zach Duke posted in Cybersecurity, What's New, Banking, information security, infosec

0 Comments

“The Customer is Why You are in Business”  Allen Duke, Mentor & Father.

Those who know me well have probably heard me talk about my father's impact on me and business.   For those of you who haven’t heard the passion I have related to these lessons I learned, here is some context:

My dad was a manufacturer sales representative for furniture companies, selling furniture to furniture stores across multiple states.  My dad was intentional about teaching me business lessons; some of the most memorable lessons were when I would travel with my dad.  As part of these trips, we would visit his customers all across the territory.  I learned so much from these trips and have many fond memories of the time with my dad…

One of the lessons that he continuously reiterated to me was that “The Customer is Why You are in Business.”   Being in business held a ton of weight, partly because my dad didn’t have a base salary; he only made an income if the furniture stores sold his furniture, and it was embedded in his deep-rooted integrity for going the extra mile.

In case you haven’t heard, we are ecstatic to announce that Beth Sumner has joined us as VP of Customer Success.  Beth has deep roots in community banking, technology, and information security.  As part of her role, she will be a facilitator for our customers to maximize the Finosec impact of helping our customers simplify information security and cybersecurity governance.  She will also be a conduit for our customers to give our team feedback on enhancements and improvements we can make to go the extra mile for our customers.  If you are a customer, be on the lookout for a meeting with Beth in the coming weeks, and if you have known Beth for as many years as I have, you know we are truly blessed to have her on the team.

Read More

Step 5 – User Access Review Best Practices: Increase Maturity

FINOSEC posted in Cybersecurity, Innovation, Banking, User Access, User Access Reporting, infosec

0 Comments

Read More

Step 4 – User Access Review Best Practices: Review System Access and Permissions

FINOSEC posted in Innovation, Fintech, User Access, User Access Reporting, information security, infosec

0 Comments

Step Four in the FINOSEC user access review best practice series is to ensure users who have access to your systems have legitimate duties that justify not only access but their specific permissions for those systems.

Read More

Step 3 - User Access Review Best Practices: Risk Rate Systems & Access

FINOSEC posted in Innovation, User Access, User Access Reporting, information security, infosec

0 Comments

Step Three in the FINOSEC user access review best practices series is to rate and prioritize the system risks you identified as the most important systems in Step Two of the UAR Best Practices and align those with the access permissions required.

Read More

User Access Review Best Practices: Step 2 - Start With The Most Important

FINOSEC posted in Cybersecurity, Innovation, Fintech, Banking, community banking, User Access, User Access Reporting, Information Security Officer, Cyber

0 Comments

We learned about the importance of a System Map in Step One: Building the Foundation, last week.

This week, we are discussing Step 2 – Start with the Most Important. In this critical step in the user access review process, you will identify the most important systems by identifying the high-risk activities each system performs.

Read More

User Access Review Best Practices:            Step 1 - Building the Foundation

FINOSEC posted in Cybersecurity, Innovation, User Access, User Access Reporting, information security, infosec

0 Comments

Let’s acknowledge a few things at the start.

  1. User access reviews (UAR) are important, and increasingly so.

  2. Examiners expect you to complete them regularly.

  3. They’re a crucial element of your overall cybersecurity program.

  4. They’re complicated and they take time.

Read More

User access reviews are (not) hard and (don’t have to) take too much time!

FINOSEC posted in Cybersecurity, Innovation, community banking, User Access, User Access Reporting, information security, Information Security Officer, infosec

0 Comments

Do you believe the full title? Or do you believe the parenthetic comments are a better descriptor? Here’s a simple and universal truth of the human condition: we tend to avoid tasks we think will be hard. Or complicated. Or time consuming. Or all three!

Read More

FINOSEC’s technology-based pain reliever for your user access reviews

FINOSEC posted in Cybersecurity, Innovation, What's New, Latest News, Banking, community banking, User Access, User Access Reporting, information security, infosec

0 Comments

Financial institutions have long viewed user access reviews as a double edged sword. On one hand, regulators require them. They’re a crucial component in managing to least privilege. But they’re a challenge to conduct on a regular schedule. And if you have to rely on legacy technology and outdated manual processes, the frustrations can compound logarithmically.

But you don’t need to be stuck in the past. Help is on the way.

Read More