OPERATIONAL RISK

Cyber & Data Security

Prevention and risk mitigation are key components in every aspect of bank operations - the same holds true in the protection of customer data.

Cybersecurity is the prevention of damage to, protection of, and restoration of data, systems and processes. Cybersecurity has three main components, data security, user security, and infrastructure security.

Data security is the concepts or strategies used to keep data secure. Data security focuses on protecting personally identifiable information (PII) from unauthorized access as one would see during a cyber breach or other significant cyber incident.

Prevention and risk mitigation are key components in every aspect of bank operations - the same holds true in the protection of customer data.

Cyber and Data Security News

CISA follow-up call today on SolarWinds

The Cybersecurity and Infrastructure Security Agency today is hosting a follow-up call on the supply chain attack on the SolarWinds Orion Platform and subsequent customer breaches. Scheduled for 3 p.m. (Eastern time) today, the call will offer the latest on an attack that has pushed malicious code to an estimated 18,000 customers.

ICBA continues updating its Cyber and Data Security resources section with information on the attack following this week's CISA alert and emergency directive encouraging affected organizations to use available detection countermeasures.

Meanwhile, the Treasury Department is seeking feedback from financial institutions that have ever run the compromised SolarWinds Orion systems at OCCIP-Coord@treasury.gov or anonymously through FS-ISAC at sharingops@fsisac.com.