OPERATIONAL RISK

Cyber & Data Security

Prevention and risk mitigation are key components in every aspect of bank operations - the same holds true in the protection of customer data.

Cybersecurity is the prevention of damage to, protection of, and restoration of data, systems and processes. Cybersecurity has three main components, data security, user security, and infrastructure security.

Data security is the concepts or strategies used to keep data secure. Data security focuses on protecting personally identifiable information (PII) from unauthorized access as one would see during a cyber breach or other significant cyber incident.

Prevention and risk mitigation are key components in every aspect of bank operations - the same holds true in the protection of customer data.

Sector Initiatives

Sheltered Harbor

Sheltered Harbor promotes the stability and resiliency of the financial sector through industry-developed standards for protecting and recovering customer account data if a catastrophic event causes critical systems - including backups - to fail.

.BANK

.BANK is an evolution in relationship management, offering a trusted, verified, more secure, and easily identifiable location on the internet for your customers and your bank, regardless of size. .BANK provides a trustworthy stamp of approval for your online offerings.

Carnegie Endowment for International Peace

ICBA partnered with the Carnegie Endowment for International Peace and other industry experts to update “Cyber Resilience and Financial Organizations: A Capacity-building Tool Box.” Learn more about how your bank can leverage the tool box to create a more cyber resilient workplace.

Cyber and Data Security News

CISA urges Microsoft Exchange patching against vulnerability

Mar 8, 2021 | NewsWatch Today
The Cybersecurity and Infrastructure Security Agency urged public and private sector partners to follow its emergency directive on the Microsoft Exchange widespread vulnerability affecting on-premises deployments.

CISA call today on Microsoft vulnerability

Mar 5, 2021 | NewsWatch Today
The Cybersecurity and Infrastructure Security Agency is hosting a conference call at noon (Eastern time) today on the active exploitation of a vulnerability in Microsoft Exchange Server 2013, 2016, and 2019