Fasoo Helps Customers with Compliance at Gartner Security and Risk Management Summit 2017

This year at the Gartner Security & Risk Management Summit in National Harbor, MD there was a lot of focus on managing and mitigating risk to a business and how to improve cybersecurity through data-centric protection. One area of concern to many organizations is how to comply with some of the newer cybersecurity and data protection regulations, like GDPR, as governments are trying to improve customer and business data security. With all the recent...

This year at the Gartner Security & Risk Management Summit in National Harbor, MD there was a lot of focus on managing and mitigating...

The Federal Financial Institutions Examination Council (FFIEC) released an update to its Cybersecurity Assessment Tool to help financial institutions establish a better baseline to identify their risks and determine their cybersecurity preparedness. The original intent of the Assessment was to provide a repeatable and measurable process for financial institutions to measure their cybersecurity preparedness over time. The updates are a response to criticism since its release in June 2015 for its vagueness and diversion...

The Federal Financial Institutions Examination Council (FFIEC) released an update to its Cybersecurity Assessment Tool to help financial institutions establish a better baseline to...

Ron Arden, Executive Vice President and COO of Fasoo, Inc., presented Countdown to Compliance with NYDFS 23 NYCRR 500 during FinCyberSec 2017 at the Stevens Institute of Technology in Hoboken, NJ on May 31, 2017. Ron was part of a day long event that focused on technical, regulatory, process and human dimensions of cyber threats faced by financial systems and markets. Dr. Paul Rohmeyer, who organized the conference, started the day with opening remarks...

Ron Arden, Executive Vice President and COO of Fasoo, Inc., presented Countdown to Compliance with NYDFS 23 NYCRR 500 during FinCyberSec 2017 at the...

One of the most critical skills information security groups have is the ability to proactively find threats in their environment – a process known as hunting. Great hunting is the combination of deep knowledge about your environment with the ability to understand the details of changes that take place in real-time. Knowledge is the greatest advantage information security professionals have when determining the best defense against an adversary. Attackers must have extensive knowledge about...

One of the most critical skills information security groups have is the ability to proactively find threats in their environment – a process known...

WikiLeaks recently obtained and released thousands of sensitive documents showing the Central Intelligence Agency’s (CIA) arsenal of hacking tools, malware, viruses, trojans, weaponized “zero day” exploits, malware remote control systems and associated documentation. Unfortunately this is not a Shakespearean play, but a real life data breach that will have huge consequences for the security of the US government. This information supposedly came from a secure location inside the CIA and raises a lot of...

WikiLeaks recently obtained and released thousands of sensitive documents showing the Central Intelligence Agency’s (CIA) arsenal of hacking tools, malware, viruses, trojans, weaponized “zero...

The problem of data breaches has just reached a new high, or maybe low, as executives are losing money because of them. A case in point is that Yahoo CEO Marissa Mayer will not receive a bonus nor stock award because of the mishandling of security breaches in 2013 and 2014. The decision came after an internal investigation found that senior executives at Yahoo mishandled the company’s security breaches. In September of last year,...

The problem of data breaches has just reached a new high, or maybe low, as executives are losing money because of them. A case...

The New York State Department of Financial Services (NYS DFS) just released the final version of its new cybersecurity regulations that affect organizations doing business under New York banking, insurance and financial services regulations. The new regulation is designated 23 N.Y.C.R.R. Part 500, and goes into affect on March 1, 2017. Paul Greene, an attorney at Harter Secrest & Emery, in a recent blog post mentioned that the main changes in the regulation from...

The New York State Department of Financial Services (NYS DFS) just released the final version of its new cybersecurity regulations that affect organizations doing...

After two days at the 2017 RSA Conference in San Francisco, it looks like Fasoo’s message of Security, Governance and Productivity is hitting a nerve with security professionals, analysts, executives and other attendees. As the regulatory and business climate change to overcome constant threats to businesses and the data they use to drive profitability, companies are looking for a more comprehensive and practical approach to providing secure ways to conduct business. An interesting theme...

After two days at the 2017 RSA Conference in San Francisco, it looks like Fasoo’s message of Security, Governance and Productivity is hitting a...

Just a few days after the IRS released it’s warning about W-2 phishing, it appears the College of Southern Idaho (CSI) reported that 3,000 employees’ personal information may have been compromised by a phishing scam. The attackers are now expanding their sights into higher education according to a recent article by Paul Greene, an attorney at Harter Secrest & Emery. Given the large number of employees, including seasonal employees, community education instructors and people...

Just a few days after the IRS released it’s warning about W-2 phishing, it appears the College of Southern Idaho (CSI) reported that 3,000...

The more things change, the more they stay the same, unfortunately. Paul Greene, an attorney at Harter Secrest & Emery, in a recent blog post mentioned a new IRS warning about the reappearance of phishing scams targeting W-2 information. Companies have lost thousands of dollars in email compromise attacks that first steal W-2s and then attempt wire transfer frauds. This is nothing new, of course, with the IRS having issued the same form of warning...

The more things change, the more they stay the same, unfortunately. Paul Greene, an attorney at Harter Secrest & Emery, in a recent blog...

Blog