Credit Union Information Security Podcast

On Oct. 7, the U.S. government announced the results of "Operation Phish Phry," which saw 100 suspects in two countries charged with being part of a major multinational phishing ring.

And although these indictments are the most ever in a cyber crime case, Dave Jevans of the Anti-Phishing Working Group (APWG) says, in the grand scheme of global phishing scams ... this is a tiny catch, indeed.

In an exclusive interview on phishing trends, Jevans discusses:

Jevans is the Chairman and Founder of the Anti-Phishing Working Group, the leading non-profit organization dedicated to eradicating identity theft and fraud on the Internet. The APWG has over 1,500 member companies and agencies worldwide. Membership is limited to banks and other financial institutions, ISPs, law enforcement agencies and security technology vendors.

David has over 10 years of business experience in the Internet security industry, and has founded two high-tech startups, been through IPO, mergers and acquisitions.

Erich Spengler, professor at Moraine Valley Community College near Chicago, discusses:

Spengler has over 20 years experience in Information Systems and holds an MBA from Loyola University of Chicago and an MS in Computer Science from the University of Illinois - Springfield. In addition to serving as a tenured professor of Computer Integrated Technologies at Moraine Valley Community College, Erich also serves as a Guest Lecturer at Northwestern University and as the Director and Principle Investigator for the National Science Foundation (NSF) Regional Center for Systems Security and Information Assurance (CSSIA @ www.cssia.org). Erich holds several industry certifications including CISSP.

Insider fraud has always been a risk for banking institutions, but this risk has only grown in the past year. And so has the size of the crimes.

Shirley Inscoe and BC Krishna of Memento have written a new book, "Insidious: How Trusted Employees Steal Millions and Why It's so Hard for Banks to Stop Them." In an exclusive interview, the authors discuss:

Inscoe, Memento's Director of Financial Services Solutions, had a distinguished 24-year career at Wachovia, the fourth largest bank in the U.S. Throughout her tenure at

Krishna, founder and CEO of Memento, is a technologist and entrepreneur skilled at turning innovative software solutions into industry-leading companies. He founded Memento in 2003 after identifying the high-value business opportunity to help enterprises systematically address the long-known issue of internal fraud and inappropriate activities by insiders. In 1995, BC founded FutureTense the company that helped define the Content Management software category and was part of the management team that led it to nearly $100 million in revenue. Following the acquisition of FutureTense by publicly traded Open Market, he served as Open Market's Chief Technology Officer, as well as a Board Member. From 1987 to 1995, BC was a Principal Software Engineer at Digital Equipment Corporation.

The International Spy Museum has just celebrated its 7th year and its 5 millionth visitor, says Executive Director Peter Earnest, a former CIA officer who's run the museum since its inception. In an exclusive interview, Earnest discusses:

Earnest is a 35-year veteran of the Central Intelligence Agency (CIA). He served 25 years as a case officer in its Clandestine Service, primarily in Europe and the Middle East. He ran intelligence collection and covert action operations against a range of targets including Soviet Bloc representatives and Communist front organizations.

As Museum director, he has played a leading role in its extraordinary success as a Washington attraction. He edits the Museum's book ventures and has frequently been interviewed by the major media in radio, TV, and the press on current intelligence issues.

In an exclusive interview, Davidson discusses:

Davidson is actively involved in new product development, curriculum design, alumni relations, online distance education, and marketing and strategic alliances with sponsoring organizations and business partners.

Prior to joining GSB, Kirby was VP of Marketing for a national trade association, the Conference of State Bank Supervisors, in Washington, DC. He was recruited to develop and manage their new marketing department, overseeing nationwide marketing and membership campaigns, implementation of a new customer relationship database, and image-branding promotional activities for the organization and state banking industry.

He also worked for the Iowa Bankers Association for 10 years as their director of marketing, responsible for all marketing-related activities of a statewide trade association.

In an exclusive interview, Brown discusses:

Brown has over 20 years of banking experience. Prior to joining Insignia in 2006, he was CEO and president of Charlotte State Bank for 10 years. He previously served as the Chairman of Tier II Banks for the Florida Banker's Association and Chairman of the Florida Banker's Education Foundation. He is a frequent speaker on the topic of Disaster Recovery Plans and was a featured panelist as well as presenter at the kick-off of www.Ready.Gov, along with then Secretary of Homeland Security, Tom Ridge.

A year later ... is the banking industry better off?

William Isaac, former FDIC Chair (1981-85), believes the recession is over, but he also is concerned about the future of regulatory reform, as people's attention turns to the healthcare debate. "I worry that we won't get it done at all," Isaac says.

In an exclusive interview, Isaac discusses:

Isaac is chairman of the Secura Group, a leading financial institutions consulting firm, operating as a division of LECG. The Secura Group provides financial advisory services, strategic planning, regulatory counseling, risk-management services, strategic studies, and general management consulting for financial institutions. LECG, of which Isaac is a managing director, is one of the world's leading expert services firm with professionals serving Global Fortune 500 firms from offices around the world. Isaac also serves as chairman of various Isaac family real estate development companies. He writes for the American Banker and other publications and is a frequent speaker before banking groups. He is also a founding member of the American Bankers Council.

This is the key takeaway - and to some extent the surprise - of the new Top Cybersecurity Risks report released on Sept. 15 by TippingPoint, Qualys, the Internet Storm Center and SANS Institute.

In an exclusive interview about the report, Alan Paller, Director of Research at SANS, discusses:

Paller founded SANS in 1989 to provide graduate-level education to cybersecurity professionals. In the intervening years, more than 80,000 people have learned their technical security skills - from forensics to penetration testing to intrusion detection, in SANS courses.

Today he focuses on identifying the tipping points that can turn the tide against the growing wave of cyber crime and cyber espionage. He has testified several times before the US House and Senate, and the President named him to the National Infrastructure Assurance Council. His degrees are from Cornell and MIT.

Your organization has been breached - how should you immediately respond? How should you not respond?

Alysa Hutnik, attorney with Kelley Drye in Washington, D.C., specializes in information security and privacy, counseling clients on what to do after a security breach. In an exclusive interview, Hutnik discusses:

Hutnik is an Associate with Kelley Drye whose practice includes representing clients in all forms of consumer protection matters. In particular, she specializes in advertising, privacy, and data security law. She frequently conducts workshops and gives speeches on advertising, privacy, and data security compliance. She is often quoted on these issues in major business and law journals and newsletters, and has authored numerous advertising, privacy, and data security articles. Ms. Hutnik was recently nationally recognized as a leading practitioner in the area of Privacy & Data Security by Chambers USA.

When it comes to incident response, there's nothing for critical than first response. And first response skills are exactly what students are attaining in a unique information assurance program offered by New Mexico Tech.

In an exclusive interview, Srinivas Mukkamala of New Mexico Tech discusses:

Mukkamala, one of CAaNES' owners and its interim-Director of Operations, is a senior research scientist with ICASA (Institute for Complex Additive Systems Analysis, a statutory research division of New Mexico Tech performing work on information technology, information assurance, and analysis and protection of critical infrastructures as complex interdependent systems) and Adjunct Faculty of the Computer Science Department of New Mexico Tech. He leads a team of information assurance (IA) "first responders" who are deployed at the request of various government agencies and financial institutions around the state of New Mexico to perform vulnerability analysis, information system security audits, network analysis and forensic incident analysis. He has a patent pending on Intelligent Agents for Distributed Intrusion Detection System and Method of Practicing Same.