Credit Union Information Security Podcast

How vulnerable are organizations to cyber attack? It depends on your definition of "vulnerable," says Robert Richardson, Director of the Computer Security Institute (CSI). "There's vulnerable," he says, "and then there's likely to be attacked."

There are some great technology solutions to help detect fraud, but none of them are worth a cent if banking institutions don't have the people and processes in place to maximize these solutions.

In an interview focused on current mortgage fraud trends, Cindi Dixon, president of Mela Capital Group of Florida, discusses:

Mela Capital Group is a nationally recognized mortgage fraud mitigation and credit risk management consulting firm that has audited $5 billion in high risk mortgage loans for private industry and law enforcement. As a recognized industry expert in mortgage and securities fraud investigation and operational procedure, Cindi Dixon, President, provides expert witness testimony and is a frequent presenter at public speaking engagements. As a private contracting firm, Mela has assisted US Customs/ICE, the FBI, the US Postal Inspector General and other agencies in unraveling complex criminal schemes involving mortgage fraud.

Be sure to listen to this overview, and check out all of the weeks news and views on BankInfoSecurity.com

Increasingly, consumers long for a simple payment solution that allows them to send money to family and friends via email or text message.

Boeing Employees Credit Union (BECU), Washington's largest credit union, is at the forefront of the person-to-person (P2P) payments revolution. And in an exclusive interview, Howie Wu, VP of Virtual Banking, at BECU, discusses:

He earned a B.A. in Accounting and a MBA in Information Systems from Washington State University. His professional interests include IT, finance and business leadership. He also participates as a panelist in various industry forums and is a member of several financial technology committees.

Social media aren't just coming - they're here. And senior leaders need to understand how to maximize Facebook, LinkedIn, Twitter and other popular sites, as well as how to protect their organizations from very real security risks.

In an exclusive interview, Prof. Sree Sreenivasan, Dean of Student Affairs at the Columbia Graduate School of Journalism, discusses:

Sreenivasan is a technology expert and dean of student affairs at the Journalism School, where he teaches in the digital journalism program. He specializes in explaining technology to consumers/readers/viewers/users. For more than eight years, he served as technology reporter for WABC-TV and WNBC-TV in NYC and now occasionally appears on various TV shows to talk tech. For more than six years, he wrote a Web Tips column for Poynter.org. He has written articles for The New York Times, BusinessWeek, Rolling Stone, National Journal, Bloomberg, Forbes, and Popular Science. In March 2004, Newsweek magazine named him one of the nation's 20 most influential South Asians; and in 2009, AdAge named him "one of 25 media people to follow on Twitter." You can find him on Twitter and his Twitter Guide for Newbies and Skeptics.

Want to know if a prospective loan customer is lying? Watch their eyes. And their breathing. And especially whether they move their lower lip.

These are the tips from Robert Nolan, a former mortgage banker, and Genie Laborde, an author and speaker, who have teamed up to offer training for banking institutions looking to reduce first party fraud.

In an exclusive interview, Laborde and Nolan discuss:

Laborde is the author of several books, Influencing with Integrity: Management Skills for Communication and Negotiation(170,000 sold); the follow-up book, Fine Tune Your Brain: When Everything's Going Right and What To Do When It Isn't, and the workbook 90 Days to Communication Excellence. Influencing with Integrity has been translated into French, Spanish, German, and Polish. Her latest is Influencing with Integrity on the Internet, which is an eBook and a book on paper.

She has produced the video training films and courses, "Influencing Skills," "TeleSkills," "Managing Meetings with PEGASUS," and "Paradigm Changes in Business" (co-produced with Florida Power and Light). The videos and trainings have been purchased by Fortune 500 Companies and educational institutions including Hewlett-Packard, Chase Manhattan Bank, IBM, Rochester Institute of Technology, Continental Airlines, and Eastman Kodak. Her videos, books and course materials are also available in Spanish.

Nolan founded IvyStone Consulting Group in 2007 to help Mortgage Loan Officers as well as others in professional sales to build better relationships with Real Estate Agents and clients. He has developed a course for Mortgage Fraud detection, which introduces new training techniques for detection during the mortgage loan application process.

Prior to ICG, he worked for Phoenix Consulting Group, helping companies in the pharmaceutical, medical device manufacturing and consumer goods industry train salesman and researchers how to detect competitors interested in obtaining intellectual property rights at trade shows.

He was in the Mortgage Industry for 12 years and held positions such as loan officer and manager for builder partnerships with national mortgage companies.

In an exclusive interview, Leigh Williams, BITS President at the Financial Services Roundtable, discusses:

Williams was appointed President of BITS in April 2007. Previously, Leigh was a Senior Fellow at the Kennedy School of Government at Harvard University, in the Mossavar-Rahmani Center for Business and Government. While at Harvard, his research focused on public and private sector collaboration in the governance of privacy and security. Prior to joining the Kennedy School, Leigh worked for many years at Fidelity Investments in various risk management, security and privacy roles, including Chief Risk Officer and Chief Privacy Officer. His most recent position at Fidelity was Senior Vice President, Public Policy. While with Fidelity Investments, Leigh served the industry in a variety of leadership roles, including many within BITS and the rest of The Financial Services Roundtable.

A division of The Financial Services Roundtable, BITS is a not-for-profit industry consortium whose members are 100 of the largest financial institutions in the United States. Created in 1996 by the CEOs of these institutions, BITS fosters the growth and development of electronic financial services and e-commerce for the benefit of financial institutions and their customers.

Organizations have made strides in business continuity/disaster recovery (BC/DR) planning. But BC/DR professionals need to sharpen their business skills to truly protect their organizations.

This is the stance taken by Roberta Witty, research VP at Gartner. In an exclusive interview, Witty offers candid insight on:

Witty is part of the Compliance, Risk and Leadership group within Gartner. Her primary area of focus is business continuity management and disaster recovery. She is the role specialty lead for the Gartner for IT Leaders (GITL) business continuity manager role. She is also a GITL Premier coach for Security and Risk.

Prior to joining Gartner, Witty managed the global technology risk management function for the corporate trust business of The Chase Manhattan Bank. In this role, she was responsible for awareness, advisory and compliance services regarding the business implementation of IT control policies, including information security, business continuity and Y2K business resumption planning. Before joining Chase, she was the information security officer for ING/New York, where her responsibilities included information security program development and implementation, security administration, and business continuity planning.

Everyone is talking about cloud computing these days - but are they having the right conversations?

H. Peet Rapp is an information security auditor who sits on ISACA's Cloud Computing Work Group, and he's co-author of the white paper Cloud Computing: Business Benefits With Security, Governance and Assurance Perspectives.

In an exclusive interview, Rapp discusses:

Rapp entered the IT audit/compliance profession in 2003, after publishing the widely read paper "An IT Executive's Overview of the Sarbanes-Oxley Act of 2002." With his firm, Rapp Consulting, he has audited, provided risk assessments and developed IT control frameworks for more than 70 organizations and developed a reduced IT control set for non-accelerated filers.

The topic has been discussed for years, but now truly is the time for organizations to invest in federated identity management.

So says Tom Smedinghoff, partner at Chicago-based law firm Wildman Harrold. In an exclusive interview, Smedinghoff discusses:

Smedinghoff is a partner at Wildman Harrold, where his practice focuses on the new legal issues relating to the developing field of information law and electronic business activities. He is internationally recognized for his leadership in addressing emerging legal issues regarding electronic transactions, information security, and digital signature authentication issues from both a transactional and public policy perspective. He has been retained to structure and implement e-commerce, identity management and information security legal infrastructures for the federal government, and national and international businesses including banks, insurance companies, investment companies, and certification authorities. He also frequently counsels clients on the law relating to first-of-their-kind electronic transactions, privacy,4 information security legal matters, and e-commerce initiatives. At the same time, he has been actively involved in developing legislation and public policy in the area of electronic business at the state, national, and international levels.