Regulations and compliance

Compliance is a major painpoint for the financial services industry. Just keeping track of the federal and state legislation, as well as legislation for the financial and bankin... More about Regulations and compliance

Recent Definitions

• emerging growth company

  - An emerging growth company is a business with total annual gross revenues under $1 billion for the most recently ended fiscal year, as indicat...

• Financial Crimes Enforcement Network (FinCEN)

  - Financial Crimes Enforcement Network (FinCEN) is a bureau of the United States Department of the Treasury. Fi...

• Suspicious Activity Report (SAR)

  - A Suspicious Activity Report (SAR) is a document that financial institutions must file with the Financial Crimes Enforcement Netw...

Highlights

• PayPal CISO: Laws must foster better cybersecurity information sharing

• PCI virtualisation: With new guidelines, compliance may be harder

• Financial security tutorials

More Regulations and compliance Topics

• Auditing, testing and assessment for financial services compliance

• Bank Secrecy Act compliance and anti-money laundering training

• Basel II regulatory compliance and requirements

• Compliance best practices

• Electronic data discovery compliance

• FACTA law requirements

• FFIEC compliance guidelines

• GLBA compliance requirements

• HIPAA: Laws and guidelines

• PCI DSS: Audits and requirements

• Risk management frameworks, metrics and strategy

• SEC and FDIC regulations

• SOX financial reporting compliance

• State data security breach laws

Security management strategies

The financial services security management strategies topics page provides up-to-date information and resources on data governance, threat prevention, risk assessment and disast... More about Security management strategies

Recent Definitions

• Automated Clearing House fraud (ACH fraud)

  - ACH fraud is the theft of funds through the Automated Clearing House financial transaction network. The ACH networ...

• wipe

  - Wipe, in a computing context, means to erase all data on a hard drive to render it unreadable. The term is often used in reference to making data stored on a computer, sma...

• PCI DSS (Payment Card Industry Data Security Standard )

  - The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policie...

Highlights

• PayPal CISO: Laws must foster better cybersecurity information sharing

• Cybergang plans to use Trojan against U.S. banks

• Improved Shylock Trojan targets banking users

More Security management strategies Topics

• Data governance best practices

• IT disaster recovery planning and management

• Risk assessment and management in financial institutions

• Threat prevention in financial institutions

• Risk management frameworks-Security management strategies

Business process security

The business process security topics page provides financial industry IT security professionals with up-to-date information and resources on financial transaction protocols and ... More about Business process security

Recent Definitions

• Shared Assessments Program

  - In compliance, the Shared Assessments Program provides organizations with a way to obtain a detailed report about a service provider's con...

• remote deposit capture (RDC)

  - Remote deposit capture (RDC) is a system that allows a customer to scan checks remotely and transmit the check images to a bank for dep...

• PCI DSS (Payment Card Industry Data Security Standard )

  - The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policie...

Highlights

• PayPal CISO: Laws must foster better cybersecurity information sharing

• How to ensure the security of financial transactions online

• Citigroup attack highlights insufficient authorization error

More Business process security Topics

• Business partner and vendor security issues

• Debit and credit card fraud prevention

• Financial transaction protocols and security

• Logical and physical security convergence

Information security technology management

Our financial services security technology topics page provides financial industry IT security professionals with up-to-date information and resources on ID management and acces... More about Information security technology management

Recent Definitions

• enhanced driver's license (EDL)

  - An enhanced driver's license (EDL) is a government-issued permit that, in addition to the standard features of a driver's license,...

• information-centric security

  - Information-centric security is an approach to information security paradigm that emphasizes the security of the information itself rat...

• wiretap Trojan

  - A wiretap Trojan is a program that surreptitiously records VoIP calls.

Highlights

• McGraw: Use VBSIMM software security model when buying software

• Web application threats: What you really need to know

• Evolution of online banking malware: Tatanarg Trojan and OddJob Trojan

More Information security technology management Topics

• Corporate network security

• ID management and access control for financial services

• Online, Web and application security

• Secure communications in financial institutions