How Soon Should Vulnerabilities Be Patched?
If you've worked in security for more than a minute, you know vulnerability and patch management are important.
Posts by:
GRC Content Manager Alyssa Pugh
Riding into the Sunset: A Community Financial Institution’s Guide to IT Asset End-of-Life
Everyone loves a good sunset……. when it's out in nature. 🌄
An Overview of the New Credit Union Succession Planning Rule
On December 17, 2024, the NCUA Board approved a final rule on the topic of Succession Planning. The rule goes into effect on January 1, 2026. In this article, we will dive into this topic and answer the questions you might be asking, including:
Model Risk Management FAQs for Community Banks & Credit Unions
Model risk management is an evolving topic for community banks and credit unions. While models have been around for a long time, their prevalence in artificial intelligence (AI), machine learning (ML), and other software applications makes understanding and managing them more important than ever. Let's dive into some frequently asked questions about model risk management.
What Framework Do I Replace the FFIEC CAT With?
On August 29, 2024, the FFIEC announced they would be sunsetting the Cybersecurity Assessment Tool (CAT) effective August 31, 2025. For the last ten years, the CAT has been a staple for many financial institutions' cybersecurity programs. As a result, many institutions now face the question:
An Overview of the FFIEC’s Development, Acquisition, and Maintenance Booklet
On August 29, 2024, the Federal Financial Institutions Examination Council (FFIEC) released a new Development, Acquisition, and Maintenance (DA&M) booklet, as part of their IT Examination Handbook. This new booklet supersedes and replaces the previous Development & Acquisition (D&A) booklet.
A Vendor Manager’s Guide to Service Level Agreements (SLAs)
What is an SLA?
A service level agreement (SLA) is a specific type of contract between a vendor and a business. It defines performance measures and compensation options for the times when a vendor can't hold up their end of the bargain. Let's dive into some specifics about what this looks like and what you (as a vendor manager who cares about information security) need to do about it.
Regulation S-P: An Overview of the SEC’s Latest Cybersecurity Amendments
On June 3, 2024, the Securities and Exchange Commission (SEC) published a final rule titled Regulation S-P: Privacy of Consumer Financial Information and Safeguarding Customer Information. The rule amends 17 CFR Part 248 and enhances the SEC's cybersecurity and incident response requirements. 📃
Growing Cybersecurity: A Look at the FCA’s New Cyber Risk Management Rule
The Farm Credit Administration (FCA) final rule goes into effect on January 1, 2025. If you work for a farm credit institution, what does the final rule mean for you? Let's find out.
BCP and IRP Exercises & Tests: Frequently Asked Questions
Businesses are expected to put their business continuity and incident response plans to the test. But what does that mean exactly? If the whole concept of exercises and tests is a bit murky, you've come to the right place. In this article, we'll answer some frequently asked questions, like: