Events

Upcoming webcasts

January 2021 Deadline

A Refresher Course on the New FFIEC Guidance Standards

Credit Union Version: 2/23/2012 at 1pm CST
Banking Version: 2/28/2012 at 2pm CST

Now that the new FFIEC Guidance standards have officially taken effect, many institutions are scrambling to achieve compliance before the next visit from their examiners. This free, educational webinar summarizes all the vital information featured in our previous presentations related to FFIEC Guidance changes.

Attendees will receive:

  • Detailed information on all the new FFIEC requirements
  • Tips on how to comply with the new educational requirements
  • Suggestions on developing a roadmap to meet the standards

Whether you need a full breakdown of the necessary steps needed to meet compliance, or simply want a "refresher course", we encourage you to attend this free webinar!

Credit Union Version: 2/23/2012 at 1pm CST
Banking Version: 2/28/2012 at 2pm CST

Register for the Credit Union Version

 

Register for the Banking Version



Roles who will find this webinar helpful:
IT, IS, Internal Auditor, Compliance, Training, Risk Managers, CEO, CIO

 

Upcoming webcasts

January 2021 Deadline

View the recorded version of this webinar from 11/17/11.

Increase Awareness, Improve Security, and Satisfy Compliance

Security Awareness is a critical component of a financial institution’s information security program.  Not only is awareness the first line of defense against cyber threats and social engineering tactics, it is about to become a major element for compliance.

Under the newly revised FFIEC Guidance, organizations are not only required to maintain highly effective security awareness training for employees, but must now provide adequate educational resources to both consumer and commercial members.

This webinar provides insight into:

  • Reasons why institutions should enhance awareness
  • The educational requirements of the new guidance
  • Tips on improving your internal training
  • Ideas on communicating awareness to members

Click to View

 

Download the PDF Presentation


Download the Security Awareness Training Toolkit

 

January 2021 Deadline

Download or View the Recorded Version of this webinar

Beyond January 2012: Developing an Ongoing Risk Management Program

Under the new FFIEC Guidance, institutions are expected to adopt a more comprehensive approach to risk management that will allow them to be more proactive in evaluating risk and combating threats.

This webinar will discuss how organizations can achieve "continuous compliance" with an ongoing risk management strategy.

Click to view the Credit Union version



Download the PDF Presentation

 

 

January 2021 Deadline

A Free, Informational Webinar

Preparing to Comply with the New
FFIEC Guidelines

In the wake of the FFIEC's new supplemental guidance for mitigating risks to online banking systems, financial institutions face the daunting task of preparing to meet the new compliance standards by January, 2012.

To help institutions better understand what is needed to meet the requirements, as well as the most efficient methods to achieve compliance, TraceSecurity is offering this free, educational webinar.

The presentation will provide insight into:

  • Changes to the guidance since the 2005 revision
  • How the new changes impact financial institutions
  • The new "Best Practice" standards
  • The necessary steps you need to take to ensure compliance
  • What examiners will assess after the dead-line

Choose which version to view:

Click to view the Credit Union version



Click to view the Banking version



Download the PDF Presentation



Download the Security Awareness Training Toolkit

Download other resources from the webinar

 

 

Archived Webinar

A Banker's Guide to Performing IT Risk Assessments

Recorded on July 13, 2011
The goal of this educational webinar is to help attendees learn about the key components of a risk assessment so they have a better understanding of how to facilitate an ongoing risk management program based on best practice standards.

This free presentation will provide insight on ways to develop an IT risk assessment strategy, streamline the processes and use the results to improve security.

This webinar reveals:

  • Regulatory considerations for risk assessments
  • Best Practices for risk assessments
  • A detailed 7-step risk assessment process
  • Tips on streamlining processes

Click to view the recorded webcast

 

Bankers Guide to Performing IT Risk Assessments

 

View the Archived Version:

The Basics of a Risk Assessment

Recorded on May 17, 2011
Risk Assessments are a fundamental element of a security compliance program and most organizations - especially in highly regulated industries - are required to conduct regular assessments.

However, performing risk assessments at many organizations is a complicated, cumbersome and time consuming process that often produces imperfect results. To make matters worse, few IT departments have a risk assessment process that provides a foundation to help streamline future assessments.

This webinar outlines the key components of a risk assessment and reveals methods to facilitate an ongoing risk management program based on Best Practice standards.

This webinar reveals:

  • The first steps in a risk assessment
  • How to find out exactly what is at risk
  • Methods to evaluate risk factors
  • How to leverage the results to improve security posture

Click to view the recorded webcast

 

The Basics of a Risk Assessment

 

Maximize the Value of Your Penetration Tests

Originally recorded on February 17th, 2011

When performed properly, a penetration test can yield invaluable results.  A well executed test can assist organizations in effectively identifying vulnerabilites and combating threats, leading to reduced risk and helping to avoid future expenses.

Performed improperly, a penetration test can be counterproductive and harmful.  A poor pen test strategy could create a false sense of security for the organization, lead to undue risk exposure, and cause severe problems in the future.

This webinar shows:

  • The different components of a penetration test
  • How to scope an effective penetration test
  • Cost-effective testing strategies
  • How to leverage the results to improve security posture

Click to view the recorded webcast



 

Recorded on Thursday, November 18th, 2010

Security Compliance Essentials for Small Institutions

Now, more than ever, smaller financial institutions find dealing with the amount and complexity of security compliance regulations an overwhelming task. Although they must comply with the same standards as large institutions, most do not have the expertise - let alone the budget - to manage security compliance as efficiently as their larger counterparts.

This informational webinar will help shed light on the security compliance issues that significantly impact small institutions, plus offer ideas on cost-effective solutions to help enhance your security compliance program.
Audiences will learn the answers to these questions:

  • What are the basic requirements to comply with regulations?
  • When is a Risk Assessment necessary?
  • What are examiners looking for in an IT Security Audit?

Click to view the recorded webcast

 

 

Recorded Wednesday, August 18th, 2010

Enrich Your Security Awareness Training

A free educational webcast from TraceSecurity

Many trainers face a common dilemma: how do you deploy an effective training program that addresses the needs of the organization and also meets regulations?

This webinar will offer expert guidance on several topics, including:

  • Establishing the fundamentals of a security awareness training program
  • How to successfully communicate the staff's role in combating specific security threats like Social Engineering and ID Theft
  • Crafting memorable real-world examples for training purposes

Click to view the recorded webcast

 

 

Download the Security Awareness Training Toolkit

 

Recorded Wednesday, May 26th, 2010

Combating the Threat of Social Engineering

An educational webcast from TraceSecurity's Cofounder and CTO, Jim Stickley

Over the past 15 years, Jim Stickley, has physically robbed over 1,000 financial institution locations, hacked into many of the major online banking applications and has been involved in thousands of security assessments and penetration tests.

In this webinar, Jim shares insight into real-world scenarios to help illustrate the various methods criminals use to compromise staff and facilities. Audiences will gain a new perspective on social engineering threats and learn valuable prevention tips in order to improve security measures at their own institutions.

Click to view the recorded webcast


 

Protecting Your Network From Outbound Threats

While organizations primarily focus their IT resources on limiting inbound attacks, many overlook the threats caused by inadequate controls on outbound traffic. Internal security holes can provide a path for attackers to tunnel your sensitive information completely undetected.

The expert analysts at TraceSecurity have developed an informational webinar aimed at showing credit unions how to reduce the risk of sensitive information leaving their networks. Watch this archived webinar.

Click to view the recorded webcast

Protecting Perimeter Security from New Hacking Techniques

Traditional attack methods are becoming less effective as criminals find new ways to bypass the perimeter and infiltrate network using an unwary accomplice – the organization’s own employees.

In this webinar, we will explore how hackers are merging social engineering schemes with their traditional techniques to exploit client-side vulnerabilities with frightening efficiency. We’ll show why these new methods are even threatening tightly secured network perimeters and how your organization can protect itself from these potentially dangerous new trends.

Click to view the recorded webcast

Know Your IT Risks and Develop an Action Plan

The Institution’s environment is constantly changing due to the addition of assets, changes in staff, and new threats. Each change in the organization’s environment can result in a change in the organization’s risk level, which requires the organization to implement a risk management process that includes ongoing Risk Assessment. TraceSecurity Risk Manager facilitates an internal IT Risk Management program by creating an efficient, standard, repeatable process that reduces employee resource costs. This allows the institution to proactively identify risks through an ongoing program.

Click here to view the webcast recorded on October 21, 2009

Save Money, Improve Security, Increase Efficiency and Meet All IT Security Compliance Requirements

TraceSuite Solutions include Comprehensive Security Assessments, Risk Assessments, and IT Security Audits. Each Solution is delivered through TraceSecurity's SaaS based software, allowing organizations to create an ongoing Security Compliance, Risk & IT Security Audit Management program.

Click here to view the webcast recorded on October 7, 2009

Internal IT Audits are Empowering! Take Control of Your Processes

Learn how to facilitate an ongoing, internal IT Audit Management program by creating an efficient, standard, repeatable process that reduces employee resource costs.

Click here to view the webcast recorded on August 28, 2009

Know Your IT Risks and Develop an Action Plan

Learn how to facilitate an internal IT Risk Assessment program by creating an efficient, standard, repeatable process that reduces employee resource costs and allows the institution to proactively identify risks through an ongoing program.

Click here to view the webcast recorded on August 19, 2009

Save Money, Improve Security, Increase Efficiency and Meet All IT Security Compliance Requirements

Learn how to meet regulatory requirements for Vulnerability/Security Assessments, Risk Assessments and IT Audits through one, convenient, cost-effective solution.

Click here to view the webcast recorded on August 5, 2009

Security Compliance Issues Hanging Over your Head? Let Technology Carry Your Load

Learn how to internally manage the entire FFIEC IT Security Compliance Program in a centralized, cost-effective solution. TraceSecurity Compliance Manager (TSCM) facilitates the management of vulnerability assessments, vulnerability alerting, regulatory compliance audits, policy management and dissemination, file/URL integrity monitoring and employee education and testing.

Click here to view the webcast recorded on August 12, 2009

TraceSuite Webcast

Learn how to meet regulatory requirements for Vulnerability/Security Assessments, Risk Assessments and IT Audits through one, convenient, cost-effective solution.

Click here to view the webcast recorded on June 16, 2009
Click here to view the webcast recorded on July 8, 2009

TraceSecurity Compliance Manager

Learn how to internally manage the entire FFIEC IT Security Compliance Program in a centralized, cost-effective solution. TSCM facilitates the management of vulnerability assessments, vulnerability alerting, regulatory compliance audits, policy management and dissemination, file/URL integrity monitoring and employee education and testing.

Click here to view the webcast recorded on June 17, 2009
Click here to view the webcast recorded on July 16, 2009

TraceSecurity Risk Manager

Learn how to facilitate an internal IT Risk Assessment program by creating an efficient, standard, repeatable process that reduces employee resource costs and allows the institution to proactively identify risks through an ongoing program.

Click here to view the webcast recorded on August 19, 2009

TraceSecurity IT Audit Manager

Learn how to facilitate an ongoing, internal IT Audit Management program by creating an efficient, standard, repeatable process that reduces employee resource costs.

Click here to view the webcast recorded on July 29, 2009

TraceSecurity Delivery & Support A to Ω - For Customers Only.

Introducing TraceSecurity’s new Delivery and Support organization.

Presenter: Jason Lasseigne, Director of Delivery & Support

Recorded on Wednesday, December 17, 2008 By Invitation Only

In this 30-minute webinar TraceSecurity Director Jason Lasseigne introduces the significant changes that have recently been made to TraceSecurity’s Delivery and Support organization.

The new cross-functional structure provides TraceSecurity customers with faster response time and better quality services through two dedicated delivery teams… Alpha and Omega!

In this webinar, customers will learn the roles and responsibilities within each team and the benefits they’ll experience through this new structure. You will also be introduced to the First Level Support organization and our new process for receiving, documenting and resolving your support requests!

This presentation is 30 minutes with 15-minute Q&A.

Recorded on November 18, 2008

TraceSecurity Suite Coverage for Governance, Risk
and Security Compliance

An overview on how and why to integrate continuous Risk Management, Security Compliance and IT Security Audit programs.

Click here to view the webcast.

Presenter: Dariel LeBoeuf, SVP of Communications and Educational Services

For years, banks and credit unions referenced the independent Comprehensive Security Assessment as its primary source of meeting security compliance. However, as FFIEC requirements have expanded to include more areas of institutions at risk with increased security breeches, a continuous risk/compliance methodology has evolved.

TraceSecurity, with its team of experts in the field and compliance analysts, have taken Best Practices methodologies and expanded our web-based TraceSecurity Compliance Manager software to assist companies of all sizes in reducing staff workload and meet FFIEC regulations. All of which help boost stakeholder confidence and in turn, increase ROI.

In this webinar, you’ll see how integrated IT risk and security programs can benefit your institution and the rationale for why continuous security compliance is a necessity in today’s environment.

About the Presenter: Dariel LeBoeuf is responsible for the creation and implementation of TraceSecurity training programs to ensure overall customer success. He is a graduate of Louisiana State University with a Bachelor of Science degree Quantitive Business Analysis.

Recorded on March 27, 2008

Security Compliance Essentials for Small Credit Unions

Presented by CUNA and TraceSecurity

Speaker: Brady Justice
The world of financial services is becoming an increasingly regulated place. Small credit unions face the same compliance needs as their larger counterparts. In fact, hackers and scammers more routinely concentrate on small financial institutions because they assume that they are an easier target. The problem is that many small credit unions are already overwhelmed, and don’t have the expertise let alone the budget to tackle security compliance the same way as the larger credit unions.

Learner Outcomes:

  • Learn how small credit unions can stay compliant in a cost effective way.
  • Learn how your credit union can determine the adequacy of your existing network security and identify security deficiencies.
  • Learn how you can determine how your credit union staff will respond to potential security threats.
  • Learn how your credit union can build or adapt existing security programs and prepare for the future security technology challenges.
Recorded on March 18, 2008

Archived Webcast: Audit and Security: Turning Foes into Friends

Presented by Mike Rothman and Brady Justice

Speaker: Mike Rothman is Security Incite's president and principal analyst, and author of The Pragmatic CSO (www.pragmaticcso.com) and Security Mike's Guide to Internet Security (www.securitymike.com). Mike's bold predictions and irreverent style are invaluable as companies determine effective strategies to grapple with the dynamic security threatscape. After 15 years in the trenches of the security business, he's one of the guys that "knows where the bodies are buried" in the space.
Developing and implementing an effective IT security audit program that reduces the cost of compliance efforts is a challenge for many security professionals today. What can your company do to establish an IT security audit strategy that can help you remain secure and compliant?

Attend this webcast and learn how you can turn security and audit from foes to friends. Discover step-by-step how you can create an IT security audit management strategy and remain compliant with regulations such as HIPAA and regulatory bodies such as the FFIEC.

To view the webcast visit: Audit and Security: Turning Foes into Friends

Recorded on October 23, 2007

Archived Webcast: A Continuous Assessment Program for Bank Secrecy Act (BSA) Compliance

Credit unions, no matter the size, are subjected to increasing levels of regulatory scrutiny, which has become more extensive and comprehensive than ever before. The Bank Secrecy Act now requires credit unions to designate a BSA compliance officer and to implement monitoring programs to ensure compliance with regulations and proper reporting to the government. Non-compliance with BSA regulations can result in significant fines and penalties, and more regulatory scrutiny.

Learner Outcomes:

  • Learn what BSA compliance audits should include, at a minimum
  • Understand the role technology plays in the efforts of BSA compliance
  • Learn secrets for successful BSA audits
  • Know the cost of ignoring the BSA