LibGuides: TIM-6715 V1: Week 2 Resources

Week 2 Resources

Pomerleau, P., & Lowery, D.L. (2020). Countering cyber threats to financial institutions: A private and public partnership approach to critical infrastructure protection (1st ed.). 9783030540548.

Read Chapter 2, Relevance of Evidence-Based Cybersecurity in Guiding the Financial Sector’s and Efforts in Fighting Cybercrime.

This chapter emphasizes the need to approach cybersecurity efforts from a robust and research-based perspective. The authors make a case for using a collaborative effort among practitioners to raise awareness of threats and vulnerabilities, while strengthening markets of buyers and sellers of products and services.

To access the Redshelf book, click on the book link located in the Getting Started module or the Bookshelf link on the top navigation bar of the course.

FFIEC Cybersecurity Assessment Tool (CAT)
Federal Financial Institutions Examination Council (2017, May). Cybersecurity assessment tool.
The User’s Guide section provides guidance and instructions on how to complete the assessment. The Inherent Risk Profile section provides the matrix used to complete this portion of the assessment for a given financial organization. The Cybersecurity Maturity section contains each of the five domains within a matrix for assessment of a given organization. Using both sections Inherent Risk Profile and Cybersecurity Maturity, the organization is scored to provide a measurable and repeatable process to assess an institution’s level of cybersecurity risk and preparedness. This document is a valuable tool to have as a reference.
Center for Internet Security (CISE)
Center for Internet Security (n.d.). CIS center for internet security.
This website provides general resource information on the current cybersecurity threat level, best practices, the latest tools used in the field, and details on CIS controls. The most relevant area to review is the Information Hub What’s New Section at the bottom of the page. This website is a valuable tool to have as a reference.
US-CERT
Cybersecurity & Infrastructure Security Agency of the Department of Homeland Security. (n.d.). Homepage | CISA.
The Cybersecurity & Infrastructure Security Agency of the Department of Homeland Security provides up-to-date knowledge on the latest threats and vulnerabilities using bulletins, alerts, and analysis reports.The most relevant area to review is the latest finance and banking-related cybersecurity threats listed under the Current Activity section of the page. This website is a valuable tool to have as a reference.
Open Web Application Security Project (OWASP) Threat Modeling
Open Web Application Security Project (OWASP). (n.d.). Threat modeling
This webpage provides valuable information on threat modeling and best practices for improving security by identifying and assessing application threats and vulnerabilities. The relevant areas of the website are Overview, Objectives of Threat Modeling, Threat Modeling Across the Lifecycle, Threat Modeling – Generic Steps, and Benefits. This website is a valuable tool to have as a reference.

The resources below are highly suggested, optional readings that will help you with this week’s assignments.

Cybersecurity Assessment Tool (CAT)
Federal Financial Institutions Examination Council (FFIEC). (2017 May). Cybersecurity assessment tool.
In light of the increasing volume and sophistication of cyber threats, the Federal Financial Institutions Examination Council (FFIEC) developed the Cybersecurity Assessment Tool (Assessment) to help institutions identify their risks and determine their cybersecurity preparedness. The tool provides a repeatable and measurable process for financial institutions to measure their cybersecurity preparedness over time. The specific process flow institutions take to implement the Cybersecurity Assessment Tool is detailed as a resource. This website is a valuable tool to have as a reference.
The Threats of Using Computerized Accounting Information Systems in the Banking Industry
Bansah, E. A. (2018). The threats of using computerized accounting information systems in the banking industry. Accounting & Management Information Systems/Contabilitate Si Informatica de Gestiune, 17(3), 440–461.
This journal article details the importance of having measures to mitigate the occurrence of risks and threats in financial institutions.
Cyber Strategy: Risk-Driven Security and Resiliency
Carol A. Siegel, & Mark Sweeney. (2020). Cyber Strategy: Risk-Driven Security and Resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several of industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.