Content by Tom Field

The Faces of Fraud 2010

Tom Field  •  April 2, 2010

Payment cards, ACH, ATM - these are the forms of fraud that have made the biggest news so far in 2010. But there's another variation preying upon banking institutions, too.

PCI Compliance: The QSA's Perspective

Tom Field  •  April 2, 2010

Over the past year or so, since the Heartland Payment Systems breach, we've heard a lot about the Payment Card Industry Data Security Standard (PCI DSS). What does 'PCI compliant' mean? Can a PCI compliant organization be breached? What's the role of the Qualified Security Assessor (QSA)? Peter Spier, Senior Risk...

Insider Threat: Your Greatest Risks

Tom Field  •  April 1, 2010

Insider crimes are among the biggest threats to public and private sector organizations. And yet too many groups continue to struggle to prevent or even detect these crimes. In an exclusive interview, Dawn Cappelli of Carnegie Mellon University's Software Engineering Institute, discusses: Insider threat...

Business Continuity: Needs Improvement

Tom Field  •  April 1, 2010

Interview with Gartner's Roberta Witty Organizations have made strides in business continuity/disaster recovery (BC/DR) planning. But BC/DR professionals need to sharpen their business skills to truly protect their organizations. This is the stance taken by Roberta Witty, research VP at Gartner. In an exclusive...

Fighting Mortgage Fraud - Leigh Williams, BITS President

Tom Field  •  April 1, 2010

Payment cards and ACH fraud have dominated the headlines, but mortgage fraud remains a very real threat to banking institutions and consumers alike. In an exclusive interview, Leigh Williams, BITS President at the Financial Services Roundtable, discusses: Mortgage fraud trends of top concern; Risks to banking...

DLP Case Study: RealTick and Code Green Networks

Tom Field  •  March 30, 2010

When it comes to data loss prevention (DLP), what are the major challenges facing financial institutions and other organizations? And how can these challenges be overcome? In this exclusive interview, Jason Vander Meer of RealTick discusses his organization's DLP strategy, and the solution he deployed from Code...

Payments, Privacy and Vendor Management - Global Best Practices

Tom Field  •  March 29, 2010

Interview with Adrian Davis of the Information Security Forum In terms of payments, privacy and third-party relationships, U.S. security leaders have much to learn from - and share with - their peers in the U.K. and elsewhere in the world. This is the perspective of Adrian Davis, a senior research consultant...

The Case for Federated ID Management

Tom Field  •  March 29, 2010

Interview with Tom Smedinghoff of Wildman Harrold The topic has been discussed for years, but now truly is the time for organizations to invest in federated identity management. So says Tom Smedinghoff, partner at Chicago-based law firm Wildman Harrold. In an exclusive interview, Smedinghoff discusses: What's...

Information Security Agenda - Kevin Richards, President of ISSA

Tom Field  •  March 26, 2010

With Howard Schmidt's appointment as national cybersecurity coordinator, his role as president of the Information Systems Security Association (ISSA) has been filled by Kevin Richards, a risk management advisor with Crowe Horwath.

Global Fraud Trends: How to Avoid the Scams

Tom Field  •  March 25, 2010

Interview with Mike Urban, Sr. Director, FICO Financial institutions and their customers are experiencing a frightening range of fraud scams. Where are their greatest risks? Mike Urban, Senior Director of Global Fraud Solutions at FICO, discusses: Today's top trends; Where organizations are most...

Data Loss Prevention Case Study: The Challenges Facing Financial Institutions

Tom Field  •  March 24, 2010

When it comes to data loss prevention (DLP), what are the major challenges facing financial institutions and other organizations? And how can these challenges be overcome? In this exclusive interview, Jason Vander Meer of RealTick discusses his organization's DLP strategy, and the solution he deployed from Code...

PCI Compliance: The QSA's Perspective

Tom Field  •  March 24, 2010

Interview with Peter Spier of Fortrex Technologies Over the past year or so, since the Heartland Payment Systems breach, we've heard a lot about the Payment Card Industry Data Security Standard (PCI DSS). What does 'PCI compliant' mean? Can a PCI compliant organization be breached? What's the role of the Qualified...

Insider Threat: Your Greatest Risks

Tom Field  •  March 22, 2010

Interview with Dawn Cappelli of Carnegie Mellon University's Software Engineering Institute Insider crimes are among the biggest threats to public and private sector organizations. And yet too many groups continue to struggle to prevent or even detect these crimes. In an exclusive interview, Dawn Cappelli of...

Warren Axelrod on Banking Information Security

Tom Field  •  March 18, 2010

C. Warren Axelrod is a veteran banking/security executive and thought-leader, and in an exclusive interview he discusses top security trends and threats.

Secure Access to Sensitive Data: Insights from John Bordwine, Public Sector CTO, Symantec

Tom Field  •  March 18, 2010

We've emerged from a global financial crisis, and now regulatory reform is coming to financial services. What do these events mean for the financial regulatory agencies - especially in terms of securing access to sensitive data? John Bordwine, Public Sector CTO at Symantec, tackles this question,...