Jeanette Hedderman

2 credits

This course provides an overview of cybersecurity including common terms, policy, strategy, operations, remediation, vulnerabilities, threats, and federal and state statutes and regulations as these pertain to financial services and banking. The cybersecurity triad of Confidentiality, Integrity, and Availability (CIA) and Privacy are covered from the perspective of the Board of Directors, Risk Management Committees, Chief Risk Officers, Chief Information Security Officers, Clients, Regulators, and others. Common Cybersecurity Frameworks such as National Institute for Science and Technology (NIST) , Center for Internet Security (CIS), Assessments and Reports, Techniques for Mitigation (outsourcing, cyber-insurance), are covered. Federal and State Statutory and Regulatory compliance are covered including Graham Leach Bliley (GLBA) Sarbanes-Oxley, Payment Card Industry (PCI), and jurisdictions of Massachusetts, New York, and California. NIST pillars shall be reviewed, emerging standards, applicability to businesses, supply chains, and responsibilities of boards, senior executives, management, and the CISO. The Role of the CISO, CRO, legal counsels, and other parties shall be discussed including new assessment and reporting requirements.