Send the hosts a message - try it now!

In this episode...

• Standard & Poor's Adding Cybersecurity to Ratings
  • The headline
    • In a report issued this week, the rating agency says it could issue a downgrade before a cyberattack if a bank looked ill-prepared, or following a breach that causes significant damage to a bank's reputation or which leads to substantial monetary losses or legal damages.
  • Behind the curve? Stop.
    
    • Michael wrote about it this week - stop calling it gaps…
  • 16 questions… good start?
    • How long has it typically taken to detect a cyberattack?
    • What containment procedures are in place if the bank is breached?
    • How many times was the business the target of a high-level attack during the past year, and how far did it reach in the system?
    • What's the internal phishing success rate?
    • What kind of expertise about cyberattacks exists on the board of directors?
    • How much does the bank spend on cybersecurity, what resources does it devote, and what is the total tech budget this year versus last?
  • Including security in the ratings - and we’re crying?
  • Claim this leads to more insurance… how about that…
  • http://www.bankinfosecurity.com/sps-cybersecurity-warning-late-to-game-a-8556
• Crisis Services Top Insurers’ Cyber Claims Payouts; Average Claim at $674K
  • This is interesting; and it’s a good data point, too -- in contrast to the “costs” we hear about in briefings all the time.
  • Saw other stories that suggested the insurance is going to get jacked… of course they are.
  • More insurance, more insight, more claims, more data…. this is all good

Support the show

>>> Please consider clicking the link above to support the show!
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
YouTube home: https://youtube.com/playlist?list=PLyo0dkKRvfVtWXjRxNISrhme1MgBj3C2U&si=scHDiTuLXSEQ9qHq
LinkedIn Page: https://www.linkedin.com/company/down-the-security-rabbithole-podcast/
X/Twitter: https://twitter.com/dtsr_podcast