Credit Union Information Security Podcast

But when can we hope to escape it?

In this exclusive interview, Ed Friedman, a director with Moody's Economy.com, a division of Moody's Analytics, shares fresh insights on:

Ed Friedman is a director of Moody's Economy.com. He covers the states of Texas and Minnesota, provides monthly summaries of the U.S. financial industry, and maintains a high-frequency econometric model used to estimate current-quarter GDP. Dr. Friedman also edits monthly regional and macroeconomic publications, is participating in a project to expand metropolitan area forecasting to foreign cities, and manages the work of junior personnel. Now based in the company's West Chester PA office, he previously worked for the Federal Reserve Bank of New York, supervising the collection of data on cross-border transactions in securities. Friedman received a Ph.D. in international economics from Yale University. His bachelor's degree in mathematics is from Dartmouth College.

In an exclusive interview, Pironti discusses:

In addition to his role with ISACA, Pironti is currently the Chief Information Risk Strategist for CompuCom. He has designed and implemented enterprise wide electronic business solutions, information security programs, and threat and vulnerability management solutions for key customers in a range of industries, including financial services, government, hospitality, aerospace and information technology on a global scale. Pironti has a number of industry certifications including Certified in the Governance of Enterprise Information Technology (CGEIT) Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Information Systems Security Architecture Professional and (ISSAP) and an Information Systems Security Management Professional (ISSMP). He is also a published author and writer, and a frequent speaker on electronic business and security topics at domestic and international industry conferences.

With a new administration, new banking landscape and regulatory changes expected, we live in interesting times, indeed. In an exclusive interview, Katz discusses:

The world's first Chief Information Security Officer, Steve Katz is a prominent figure in the network security discipline. Since 1985, he has served as the senior security executive for Citibank/Citigroup, JP Morgan, and most recently Merrill Lynch - and has been a force in raising the visibility and shaping the direction of the security industry at industry and government levels.

Deeply respected within both the financial services and security industries, Katz has testified to Congress on information security issues and was appointed as the Financial Services Sector Coordinator for Critical Infrastructure Protection by the Secretary of the Treasury.

Other credentials include: Founder and Chairman of the Financial Services Information Sharing and Analysis Center; Chairman of the American Bankers Association Information Systems Security Committee; Vice Chair, Financial Services Roundtable-BITS Security and Risk Assessment Committee; member of the New York Clearinghouse Banks Data Security Officers Committee; and member of the Securities Industry Association Information Security Committee.

Aite Group, the Boston-based financial services analyst firm, takes a stab at answering this question in a new report "What Next? Legislative and Regulatory Response to the Financial Crisis."

In an exclusive interview, Aite Analyst Eva Weber discusses:

Weber focuses on the regulatory and compliance issues facing financial institutions. Recent research has focused on anti-money laundering, risk management, fraud, and bank regulation at the federal and state levels. She brings to the position research and analytical skills gained in five years as a practicing attorney, and has helped Aite Group clients respond to major regulatory initiatives, such as Sarbanes-Oxley, the Bank Secrecy Act, the USA PATRIOT Act and new bankruptcy laws.

Weber has presented before the BITS Fraud Steering Committee and at user conferences for Metavante and Postilion. She has been quoted in leading press outlets, such as Associated Press, USA Today, The Boston Globe, and The Atlanta Journal-Constitution on mortgage industry regulation, and more broadly in trade publications, such as American Banker and The Greensheet.

To help prevent these crimes - and to help banking institutions to protect their customers - Linda Foley, founder of the Identity Theft Resource Center, discusses:

Linda Foley founded the Identity Theft Resource Center with Jay Foley in 1999. The nationally recognized victim assistance and public education organization was established in response to an epidemic rise in identity theft crimes. Today, Linda is acknowledged as an expert on identity theft issues.

At a time when risks are high and consumer confidence is low, corporate boards of directors aren't paying nearly enough attention to information security and cyber threats.

This is the key takeaway from a new Carnegie Mellon University CyLab survey, which shows that there is a "gaping hole as wide as the Grand Canyon" in board and senior executive oversight of these critical business issues.

Read more about this survey in an article by Linda McGlasson.

To understand this study, we spoke with its author, Jody Westby, Adjunct Distinguished Fellow at CyLab and CEO at Global Cyber Risk. In an exclusive interview, she discusses:

Jody Westby received her B.A., summa cum laude, University of Tulsa; J.D., magna cum laude, Georgetown University Law Center; Order of the Coif. Drawing upon a unique combination of more than 20 years of technical, legal, policy, and business experience, Jody Westby brings a seasoned, multidisciplinary perspective to the many issues facing businesses and governments today in the areas of privacy, information security, outsourcing/offshoring risks, cybercrime, and IT business risk management. She regularly consults with governments, private sector executives, and operational personnel on the development of enterprise security programs that dovetail the technical, legal, operational, and managerial considerations.

Prior to forming Global Cyber Risk, Ms. Westby served as senior managing director for PricewaterhouseCoopers (PwC), specializing in outsourcing and cyber security/privacy issues. Before that, she was president of The Work-IT Group, launched an IT solutions company for the CIA, managed the domestic policy department for the world's largest business organization, was senior fellow and director of information technology (IT) studies for one of the nation's leading think tanks, practiced law with two top-tier New York firms, and spent 10 years in the computer industry specializing in database management systems.

To reflect on the year behind us and consider the year ahead, we caught up with Doug Johnson, Vice President of Risk Management Policy with the American Bankers Association to discuss:

Doug Johnson serves as Senior Policy Analyst for the American Bankers Association, where his public policy responsibilities include payments system technology and the relationship between technology, privacy, and security. Doug also advises the ABA and its members on a variety of other matters, including social security reform, real estate brokerage, mortgage finance, and public funds. He was responsible for the ABA's recent release of a series of tools to assess information technology risk and safeguard customer information in financial institutions. He is on the advisory board of the Financial Services Information Sharing and Analysis Center and serves on the Financial Services Sector Coordinating Council, which advises the federal bank regulatory agencies on homeland security and critical infrastructure protection issues.

Prior to joining the American Bankers Association, Doug spent ten years as Assistant Director of the Florida Division of Banking, where he oversaw the supervision and regulation of Florida's domestic and international banking industry. During that time, Doug served as an advisor to the U.S. Congressional Office of Technology Assessment, assisting in their study of the use of information technologies for the control of money laundering.

Doug also spent time in Miami as a planning analyst for Royal Trust Bank Group, and as a bank consultant for First Research Corporation. He has Bachelors in Economics from the University of Florida and a Masters in Finance from Florida State University.

Regulatory compliance - it's the priority that never goes away for banking institutions. And in today's economy, it's the lynchpin of the safety and soundness that customers need to see to retain confidence.

In this exclusive interview, Dwayne Melancon of Tripwire discusses:

Dwayne Melancon joined Tripwire in 2000 and serves as Tripwire's Vice President of Corporate and Business Development leading the company's strategic partnerships and alliances. In previous positions at the company, He was vice president of Professional Services and Support, Information Systems, and Marketing.

Melancon is certified on both IT management and audit processes, possessing both ITIL Foundations and CISA certifications.

In this exclusive interview, W. Hord Tipton, Executive Director of (ISC)², discusses:

Career trends in information security;

W. Hord Tipton is the executive director for (ISC)², the global leader in educating and certifying information security professionals throughout their careers. Tipton previously served as president and chief executive officer of Ironman Technologies, where his clients included IBM, Perot Systems, EDS, Booz Allen Hamilton, ESRI, and Symantec. Before founding his own business, he served for five years as Chief Information Officer for the U.S. Department of the Interior.