Many Banks And Credit Unions Fail The Vulnerability Testing Component Of Their IT Security Audit Due To Weak Patch Management

Do you have a patch management plan?  If so, how effective is it?  Many companies either lack a comprehensive plan or the necessary tools to properly automate the processing of updates.  In fact, the underlying reasons many banks and credit unions fail the vulnerability testing component of their IT security audit is this lack of… Continue reading Many Banks And Credit Unions Fail The Vulnerability Testing Component Of Their IT Security Audit Due To Weak Patch Management

15% Of Users Will Divulge Logon Credentials To Strangers – Social Engineering Attacks

Social engineering is the art of manipulating people into performing actions or divulging confidential information and/or proprietary information, non-disclosed information or usernames and passwords. It is the classic approach of the confidence man, convincing someone he or she is something they are not.  If you think your personnel would never be fooled, you’re fooling yourself.… Continue reading 15% Of Users Will Divulge Logon Credentials To Strangers – Social Engineering Attacks

7 out of 10 Bank IT Audits Inadequate – Banking Cyber Security Standards

Are your IT auditors using best-of-breed commercial grade products or do they use freeware and open source IT Assessment tools? Vulnerability Assessment Tools – IT Audits and Banking Cyber Security Standards Based on BAI Security’s review of previous IT auditor’s results, the majority of banks are being left exposed with potentially serious undiscovered vulnerabilities. The… Continue reading 7 out of 10 Bank IT Audits Inadequate – Banking Cyber Security Standards

BAI Security Blog

Welcome to the BAI Security Blog! We are going to write and comment about the latest issues in IT Security and Compliance. Our focus will be on writing about IT Security and Compliance issues in the Banking and Financial Services Sector. We want this blog to be a resource for people interested in discussing the latest… Continue reading BAI Security Blog