What Is FINRA and How Does it Handle Cybersecurity?

Apr 25, 2023 Continuum GRC 0 Comment

It has become increasingly important for financial institutions to adopt robust security measures to safeguard their client’s assets and personal data. To address this challenge, FINDA has established a comprehensive set of rules to enhance its member firms’ cybersecurity posture.

However, there isn’t a set-in-stone framework for specific security measures. Instead, FINRA consists of obligations and guidance on how to address those obligations.

This article will delve into the various aspects of cybersecurity related to FINRA. By understanding the importance of cybersecurity within the context of FINRA’s regulatory framework, financial institutions can better protect their clients, mitigate risks, and contribute to a more secure and resilient financial system.

Awareness

What Are NIST Principles for Trustworthy Secure Design?

Mar 22, 2023 Continuum GRC 0 Comment

In today’s interconnected world, IT system trustworthiness has become an essential cornerstone for critical infrastructure’s seamless and secure functioning. As governments, enterprises, and industrial organizations rely on complex digital systems, the trustworthiness of these systems must be measured and maintained.

The need for trust in IT systems has been magnified by the rapid adoption of emerging technologies such as artificial intelligence, the Internet of Things (IoT), and cloud computing, which have introduced new layers of complexity and vulnerability.

Here, we discuss trustworthiness from the perspective of the National Institute of Standards and Technology (NIST), the challenges and strategies for achieving IT system trustworthiness, exploring the technologies, methodologies, and best practices that organizations can employ to safeguard their digital assets and instill confidence in their stakeholders.

Audit Machine Awareness

Cybersecurity and Malicious Software: A History of Malware

Sep 7, 2022 Continuum GRC 0 Comment

In the earliest days of what could be considered cybersecurity, the primary threats were malicious programs that would operate against the wishes of the machine and its operator. These programs, referred to as viruses, served as the progenitors of what we generally refer to in modern parlance as malicious software or “malware.”

Because the long history of malware and anti-malware protection is often the foundation of most compliance frameworks and approaches to cybersecurity, we’re touching on the topic, including what it is and how it has evolved.