Content by Tom Field

Phishing Report: Top Threats & Trends in 2008 and Beyond

Tom Field  •  May 15, 2008

Interview with David Jevans, Director, Anti-Phishing Working Group Phishing, vishing, whaling - there are a growing number of electronic social engineering threats to unsuspecting consumers and their identities. Financial institutions and their customers increasingly are targets of these attacks. But they're also...

FRB Action: A Sign of the Times

Tom Field  •  May 14, 2008

In case you missed it - because it wasn't a huge headline anywhere - here's a bit of news about First Pryority Bank, a 108-year-old community bank based in Pryor, OK. Well, first a bit of background. First Pryority was founded in 1900 by W.A. Graham,

How to Re-engineer an Information Security Risk Assessment Program

Tom Field  •  May 13, 2008

Just over two years ago, Brian Huntley arrived at Camden National Bank in Maine, charged with responding to regulatory guidance and transforming the bank's information security risk assessment program from one that was threat-based to one that is now asset-based.

Data Leakage: How to Prevent it

Tom Field  •  May 12, 2008

Philip Alexander, Information Security Officer at a Major US Financial Institution Data leakage - it's one of subtle insider threats to information security at financial institutions. It's tough for leaders to know exactly where their critical data resides - never mind how it's being treated when it leaves the...

How to Re-engineer an Information Security Risk Assessment Program

Tom Field  •  May 6, 2008

Interview with Brian Huntley, VP & ISO, Camden National Bank Just over two years ago, Brian Huntley arrived at Camden National Bank in Maine, charged with responding to regulatory guidance and transforming the bank's information security risk assessment program from one that was threat-based to one that is now...

Data Loss Prevention Strategies for Institutions of All Sizes

Tom Field  •  May 5, 2008

Data loss prevention (DLP) is a challenge for institutions of all sizes. But not all banking/security leaders understand the scope of the threat, where it originates and how best to eradicate it. In this interview, DLP expert Jared Thorkelson discusses: What's most misunderstood about DLP; The greatest sources of...

Anti-Money Laundering Wrap-Up: BSA Compliance Makes Big News

Tom Field  •  May 2, 2008

Given the news in recent weeks - the controversy surrounding New York's ex-Gov. Eliot Spitzer, the $15 million fine assessed against United Bank for Africa, PLC - we knew the crime of money laundering had taken on a life of its own. But who knew that it also had crept into Second Life? Real crimes in the virtual...

Data Loss Prevention Strategies for Institutions of All Sizes

Tom Field  •  April 30, 2008

Interview with DLP Expert Jared Thorkelson Data loss prevention (DLP) is a challenge for institutions of all sizes. But not all banking/security leaders understand the scope of the threat, where it originates and how best to eradicate it. In this interview, DLP expert Jared Thorkelson discusses: What's most...

Workplace Violence: What Every Financial Institution Needs to Know

Tom Field  •  April 29, 2008

Workplace violence - it's one of the most common but least understood risks to all organizations. From robberies gone awry to bullies in the workplace to domestic anger spilling over from home, the financial institution is rife for violent situations. In this interview, Kim Matlon, COO of R&A Crisis Management...

Workplace Violence -- What You Need to Know: Kim Matlon, Crisis Expert

Tom Field  •  April 28, 2008

Interview with Kim Matlon, Business Continuity/Crisis Management Expert Workplace violence - it's one of the most common but least understood risks to all businesses. From robberies gone awry to bullies in the workplace to domestic anger spilling over from home, the workplace is rife for violent situations. In...

Anti-Money Laundering Trends: 2008

Tom Field  •  April 15, 2008

From Second Life to former NY Gov. Eliot Spitzer, anti-money laundering has dominated the news in 2008. To gain new insights in the latest trends, threats and solutions, we interviewed veteran AML investigator Kevin Sullivan on: What's new in BSA compliance; How AML has evolved over the past decade; What's most...

RSA Conference: Insider Threat, Risk Management Emerge as Key Topics

Tom Field  •  April 14, 2008

Annual Security Event Offers Plenty to Financial Institutions Risk management and the insider threat. These are the two dominant themes emerging from the conversations and presentations at the RSA Conference in San Francisco. From the keynote stage to the expo floor, with stops in between at the program...

RSA Conference: Insider Threat, Risk Management Emerge as Key Topics

Tom Field  •  April 11, 2008

Risk management and the insider threat. These are the two dominant themes emerging from the conversations and presentations at the RSA Conference in San Francisco this week. From the keynote stage to the expo floor, with stops in between at the program sessions, information security experts, vendors and...

PayPal Leads Fight Against Phishing

Tom Field  •  April 10, 2008

When Michael Barrett, CISO of PayPal, joined the company two years ago, he asked how senior leaders were fighting the phishing problem. "Technically, we don't have a phishing problem," he was told. Yes, scores of PayPal customers were inundated daily with fake emails attempting to lure them to fake websites,...

Online Banking: 'Deputizing Our Customers' at Bank of America - Notes from RSA Conference Day 2

Tom Field  •  April 10, 2008

Bank of America is well known for its mobile banking services. Currently, the institution has 750,000 mobile banking customers receiving services on 400 different kinds of devices. But did you realize that one of the ways BoA secures its electronic offerings is by providing its customers with abuse reporting...