August 21, 2012 2:21 PM
Posted by: David Schneier
checking account,
checks,
credit,
credit card,
cyber security,
data security,
hack,
hacker,
hackers,
hacking,
identify theft,
identity management,
identity theft,
information security,
NPPI,
password,
password theft,
phish,
phishing,
PII,
privacy,
regulation,
regulationsI'm not much of a shopper. I decide what it is I need/want to buy, assess the market place to determine quality and price and once I have a generally strong sense for both make a decision and move forward. My wife on the other hand loves the constant trolling, scouring and scouting of just...
July 29, 2012 6:39 PM
Posted by: David Schneier
ATM,
bank,
banking,
banks,
breach,
checking account,
community bank,
credit,
credit card,
cyber security,
data security,
evidence,
financial institutions,
hack,
hacker,
hackers,
hacking,
id theft,
identity theft,
information security,
network,
oversight,
PCI,
personally identifiable informaiton,
PII,
regulation,
regulations,
Security,
security breach,
theftIf my blogging about credit card breaches has a bit of a deja vu feel to it you're not crazy, I last touched on it less than six months ago. Sadly I was handed a new update this week in the form of my bank card being cancelled from right out underneath me again. For those of you keeping score...
July 21, 2012 8:25 PM
Posted by: David Schneier
Add new tag,
assess,
assessment,
assessments,
bank,
banking,
banking crisis,
banks,
community bank,
compliance,
compliance officer,
compliant,
control,
credit,
credit card,
data security,
Dodd-Frank,
economy,
enterprise risk,
enterprise risk management,
ERM,
exam,
examination,
examinations,
examiner,
examiners,
exams,
Federal Reserve Bank,
FFIEC,
financial,
financial institutions,
framework,
information security office,
lending,
LinkedIn,
mortgage,
NCUA,
NCUA Sheila Bair,
NPPI,
observations,
oversight,
personally identifiable informaiton,
PII,
policy,
privacy,
procedure,
regulation,
regulations,
regulations audit,
regulatory,
regulatory guidance,
risk assess,
risk assessment,
risk assessments,
risk management,
risk-based,
risks,
security PII,
Sheila Bair,
social security numbers,
technology,
third party management,
third party oversight,
vendor,
Vendor Management,
vendor risk,
vendor risk assessmentI was an unabashed fan of Sheila Bair and made no secret of that fact. She was a breath of fresh air in a line of work where everything is stale and always at least a little boring. Not that Martin Gruenberg is any less effective running the FDIC, he's just a whole lot less interesting to pay...
July 6, 2012 3:18 AM
Posted by: David Schneier
assess,
assessment,
assessments,
Audit,
audits,
bank,
banking,
banks,
compliance,
compliant,
control,
credit union,
credit unions,
CU,
enterprise risk,
enterprise risk management,
ERM,
exam,
examination,
examinations,
examiner,
exams,
FDIC,
Federal Reserve Bank,
FFIEC,
financial institutions,
framework,
FRB,
general controls,
GLBA,
governance,
GRC,
guidance,
information security,
information security office,
infrastructure,
NCUA,
PII,
policy,
procedure,
regulation,
regulations,
regulations audit,
risk assessment,
risk assessments,
Risk IT,
risk management,
risk rating,
risk-based,
risks,
threats,
vendor,
Vendor Management,
vendor risk,
vendor risk assessmentThere's a joke of sorts within my personal circle of family and friends regarding what it is that I do these days. Ask me and I'll tell you that I'm a regulatory compliance expert who advises financial institutions on how to comply with the myriad rules and regulations governing information...
December 22, 2011 9:44 PM
Posted by: David Schneier
assessment,
Audit,
compliance,
GLBA,
NPPI,
PCI,
PII,
regulatory,
Regulatory Compliance,
risk,
risk assessmentLet me begin by sharing a story from the way back files. In the mid 80’s when I was first starting out in my career I was working as a junior programmer in Manhattan. Courtesy of playing on the corporate softball team I became acquainted with a fairly diverse group of...
October 13, 2011 10:42 PM
Posted by: David Schneier
compliance,
Facebook,
identify theft,
LinkedIn,
NPPI,
PCI,
PII,
privacy,
regulatory,
Regulatory Compliance,
SecurityI just came to find out that I’m old. It was somewhat sudden and sort of unexpected as I’m not quite half way to one hundred and have fooled myself into thinking that old doesn’t roll in until somewhere beyond sixty. But apparently one persons middle-aged...
August 3, 2011 6:16 PM
Posted by: David Schneier
compliance,
GLBA,
NCUA,
NPPI,
PII,
regulatory,
Regulatory Compliance,
Security,
security awarenessWhen I first started blogging professionally a colleague of mine cautioned that I should avoid posting anything where a client might recognize themselves in any story or example I might relate, good or bad. And so in the years since I've gone to sometimes great length to anonymize my content to...
November 29, 2010 3:19 PM
Posted by: David Schneier
assessment,
Audit,
CISO,
compliance,
compliance officer,
HIPAA,
ISO,
PII,
regulatory,
Regulatory ComplianceI recently decided to establish an automatic link between my personal checking account and a mutual fund account that was established for my son years ago when he was a baby. The account was originally funded with a gift from a family member and while it's grown reasonably well percentage-wise,...
September 5, 2010 5:17 AM
Posted by: David Schneier
CISO,
compliance,
Facebook,
GLBA,
information security,
ISO,
LinkedIn,
NCUA,
PII,
regulatory,
Regulatory Compliance,
Security,
social networkA few months back, the big blinking light in the middle of the information security radar was a story about how someone had harvested all sorts of personal...
