Is a managed SIEM right for you?

first_imgThere are three types of SIEM (security information and event management) deployments: managed, co-managed, and DIY. Deploying a fully managed SIEM means you have a trained and skilled team of off-site security analysts overseeing the logging data and events in your systems 24/7/365. These experts are actively on the lookout for suspicious activity and react to threats when necessary. If you are the type of credit union that wants to build and manage everything yourself with an internal staff – a managed SIEM is not for you. However, if you think your employees’ time can be better spent on your members, then a managed SIEM might be the right answer. Still, many credit union executives wonder about impact of deploying a managed SIEM.  A  SIEM is a Security Information and Event Management tool.  SIEMs are designed to ingest all of the logs and events from all of the devices in your network and correlate them for patterns, problems and of course – breaches.  Today most credit unions have hundreds if not thousands of devices that are spewing out tons of data.  At the same time – most can barely keep up with checking firewall logs or other critical components.  Hence, the NCUA has started requiring credit unions to install SIEM solutions that in theory make this simpler and make it more likely that you will actually know when someone has breached the credit union.  However, if you haven’t turned one of these on before it can be quite worrisome.  As always, the fear of the unknown is less than the fear of the known.  A SIEM is no different.  What happens after deployment of a fully managed SIEM?SIEM implementations are fairly invasive and time consuming.  Some aspects of the deployment can be automated, however, each device (router, switch, server, and firewall) must be touched, configured and coordinated.  Then all of the data starts flowing.  Imagine you are turning on sprinklers for the first time and all of the broken heads are shooting up!   Jesse Boyer, EVP of NIH FCU says, “After deploying the SIEM solution, it was an eye opener seeing the sheer volume of logs/incidents. The correlation of events wouldn’t have been recognizable without SIEM. It really helps to get the big picture to truly ‘know your network’ and identify third party managed devices.”  Once you have completed implementation, you unleash the firehose of data and correlations that you never knew were there.  The good news is that many of these can help you clean-up old system configuration issues or problems.  After completing the deployment, you commence with weekly calls for the purpose of going through key events and correlations to make the connections.   At first it is daunting, but after a few weeks or months, things really settle down and get much clearer.   Ultimately, you start to feel a lot more secure and confident that you can swiftly identify malicious activity.  As Joan Moran says, “…it helps me sleep better at night knowing that my network and infrastructure is being monitored 24/7 by experts for any type of suspicious behavior. There is no way I would be able to have that level of service in-house.”Though deploying a managed SIEM means putting in time on the front end, it will increase your awareness and provide peace of mind. The process of deployment helps you gain understanding of your systems, adjust for any inefficiencies or security loopholes, and allows experts to continuously monitor for threats. That way, you know that you are doing your best to keep your credit union and your members’ information secure. 18SHARESShareShareSharePrintMailGooglePinterestDiggRedditStumbleuponDeliciousBufferTumblr,Bob Miles Providing Credit Union clients with an expert, board-level resource that can help manage and steer their clients’ information security compliance, governance and/or regulatory program(s). Performing some or all … Web: ongoingoperations.com Detailslast_img read more

Are you responsible when your member dupes a third-party?

first_img continue reading » ShareShareSharePrintMailGooglePinterestDiggRedditStumbleuponDeliciousBufferTumblr Let’s say you open up a business account for a new member. The account is used to hold funds invested in the account holder’s business. You start seeing some suspicious activity such as frequent transferring of funds to other accounts, but you don’t believe it rises to the level of filing a SAR. Eventually, the business goes under because your account holder was running a Ponzi scheme. The irate investors end up suing the credit union for its mismanagement of the account. Do they have a case?This is the basic factual framework of a case recently decided by a Federal court in New York called HONGYING ZHAO, et al., Plaintiffs, v. JPMORGAN CHASE & CO. & JPMORGAN CHASE BANK, N.A., Defendants. The bank was holding funds for investors who thought they were putting money into an enterprise which involved owning and renting co-working stations across the United States. The irate investors basically argued that the bank knew or should have known that illegal activity was taking place and that by failing to act, it was aiding in the criminal deception. Interesting argument, but the court rejected it. It explained that “neither the Plaintiffs nor the Court have been able to locate a case which even suggests that New York law imposes upon banks a duty to protect non-customers from a fraud involving depository accounts.” see alsoRenner v. Chase Manhattan Bank, No. 98 Civ. 926 (CSH), 1999 WL 47239, at *14 (S.D.N.Y. Feb. 3, 1999).last_img read more

A member moves to accept a prescreen offer, now what?

first_imgThe NAFCU compliance team has written plenty of blogs on Fair Credit Reporting Act (FCRA) issues. Some of these blogs have explained the FCRA requires a permissible purpose before using information from a member’s consumer report. Occasionally, we receive questions about whether a credit union can postscreen members who have been sent a firm offer (often referred to as “prescreening”), along with questions about changing the terms of the offer once a member expresses interest. This blog focuses on the answers to these questions.Postscreening for VerificationAs a starting point, the requirements for prescreening members in order to make firm offers of credit are explained in the Federal Trade Commission’s (FTC) guide, 40 Years of Experience with the Fair Credit Reporting Act (40-Year Guide). As described in the 40-Year Guide, the FCRA:explicitly authorizes prescreening; This is placeholder text continue reading » ShareShareSharePrintMailGooglePinterestDiggRedditStumbleuponDeliciousBufferTumblrcenter_img This post is currently collecting data…last_img read more

​KPMG review raps AP1 boss over staff trip

first_imgMagnusson organised the internal conference for 48 staff in October 2016 at a conference facility in Languedoc in France, with the four-day trip costing a total of SEK476,276, plus around SEK10,000 in other expenses. The chief executive of Swedish national pension fund AP1 acted wrongly in some respects in a potential conflict of interest case over foreign travel, according to an externally commissioned report.Auditing firm KPMG has concluded that Johan Magnusson, who heads up the state pension buffer fund, should have raised the conference he organised for employees in France in 2016 with the fund’s supervisory board “as a matter of particular importance or special importance”, according to a statement from the fund. The supervisory board had instructed the auditor to investigate whether the trip followed the fund’s rules and policies, in what it described in its latest annual report as “a potential conflict of interest”.On publishing the conclusions of the KMPG review, the SEK338bn (€32.9bn) pension fund also said it would let the Swedish Tax Agency assess whether the conference trip should be taxed as a benefit, after noticing that it may be subject to preferential taxation. Johan Magnusson, AP1AP1 said in a statement: “The conference that the fund carried out had an ambitious and professional content. The goals and objectives set for the conference were achieved.”Regarding the fact the chief executive owns a private flat near the location of the conference, the question of his own financial gain was raised, but KPMG concluded that there was no conflict of interest for Magnusson, who saw no financial gain from the trip.While the auditor found that the cost of entertainment, dinners and drinks was not abnormal for company policy, it did find some deficiencies in documentation, such as memoranda from meetings and a form for direct procurement that was not drawn up.Responding to the supervisory board’s concerns in December, Magnusson said: “I have full understanding of the board’s criticism and would have chosen a different arrangement today.”last_img read more

How do we respond to Marriage, Marketing, and Intimidation

first_imgPublic Discourse 9 June 2014Author’s preface: I am a gay man who is opposed to same-sex marriage. Readers can view my speech on this topic given earlier this year at the Celebration of Marriage Rally here and read my Public Discourse essay “I’m Gay and I Oppose Same-Sex Marriage.” …How did we get to the point where high-profile jurists ignore the will of the people clearly established through ballot initiatives, as well as legal precedent set by the Supreme Court? How has judicial decision-making become so influenced by subjectivity, images, clever marketing strategies, and perceptions carefully crafted by special interest groups?…..Same-Sex Marriage’s Achilles HeelBut the processes that have led to the surprising success of the radical left are also its Achilles heel. Consent that is manufactured is not real. Proponents of same-sex marriage haven’t won in the arena of ideas—they have won through manipulation.The moral high ground the radical left seems to enjoy is extremely fragile, because its popular support has been fabricated. The left’s only hope of retaining this support is to continue to suppress free speech and religion. They cannot risk the proclamation of truth—whether it be the truth of the Gospel, the truth of natural law, or even simple common sense.But the ground won by the radical left can be regained. If we are as disciplined and focused as the proponents of same-sex marriage, we can not only retake this ground, we can also pave new inroads. We must not despair; we should regroup and prepare to wage the battle in a new and different way.Mainstream Media? Work around Them.Mainstream media are bewitched by political correctness, which makes our task extremely difficult, but not impossible. The media will never stray from the politically correct narrative, no matter how implausible or ludicrous that narrative may be. So we should, for the most part, simply choose to ignore them, brush them aside, and expect nothing but roadblocks from them.That’s why at this stage in the game, speaking freely one-on-one, in small groups, or within congregations, parishes, and civic organizations is more important than ever. Anything that is said by opponents of the radical left agenda gets twisted in the public square by media collaborators. So, the public square should not be our primary place of conducting business. Our work will continue in our homes and carpools, at lunch tables and on barstools, and in churches and community meeting rooms.http://www.thepublicdiscourse.com/2014/06/13269/?utm_source=The+Witherspoon+Institute&utm_campaign=1e5b378b96-RSS_EMAIL_CAMPAIGN&utm_medium=email&utm_term=0_15ce6af37b-1e5b378b96-84094405last_img read more

Roselyn C. Wessel

first_imgRoselyn C. Wessel, age 95 of Batesville, died Sunday, January 29, 2017 at St. Andrew’s Health Campus.  Born June 22, 1921 in Franklin County Indiana, she is the daughter of Anna (Nee: Amberger) and George Kuntz.  She married Lawrence Wessel June 22, 1946 at St. Mary’s of the Rock Church and he preceded her in death December 9, 2005.Being a farm wife, Roselyn’s days were filled with raising her family and helping Lawrence with the farm.  Gardening was both a necessity and a passion.  A large garden was a necessary task each year to help feed the family, while working in her flower beds were a passion she enjoyed.  Another passion was music and dancing.  Throughout her life she had a love for music, especially big band and dancing.  Naturally, Lawrence Welk was a favorite program.  The family remembers a trip to Branson where she accepted an invitation to come up on stage with Lawrence and dance to the music of the Glen Miller Orchestra.  In fact, it was at a local dance that she and Lawrence first met.  According to her family, she loved her birds, especially Cardinals, which she referred as her “red birds.”  They also remember her homemade bread and pies.  Over the years she and Lawrence traveled a little, mostly to the western part of the country.  Las Vegas and a trip to Germany were probably her favorites.Roselyn is survived by daughters and son-in-laws Lucy and Dan Mikula of Indianapolis, Donna and Joe Wietlisbach of Batesville, Lorraine and Jerre Hampson of Batesville, Mary and Tom Hornbach of Indianapolis, Jane and Tim Scheidler of Milhousen, Indiana; sons and daughter-in-laws David and Mary Jean Wessel, Kevin and Kay Wessel, all of Batesville; brother Robert Kuntz of Brookville, 23 grandchildren and 28 great grandchildren.  In addition to her husband and parents, she is also preceded in death by brothers Lloyd, Arnold, Clifford, Francis and Eugene Kuntz; one grandchild and one great grandchild.Visitation is Wednesday, February 1st, from 4 – 7 p.m. at the Weigel Funeral Home.  Funeral services are 11 a.m. Thursday, February 2nd at St. Louis Church with Rev. Stan Pondo officiating.  Burial will follow in the church cemetery.   The family requests memorials to Southeastern Indiana Right to Life or St. Louis Cemetery Fund.last_img read more

KSE adds Stock Cars, SportMods to IMCA awards program

first_imgThe RaceSaver Sprint Car national champion receives a Gen2 power steering gear while second through 10th place drivers in national standings for the division get $100 product certificates.  The Modified national champion earns a TandemX power steering/fuel pump. Second through fifth place fin­ishers in the national standings receive $200 product certificates while sixth through 10th place driv­ers get $100 product certificates.  Modified regional rookies of the year get 700 Series steering boxes.  Designated place finishers at special events for Modifieds, Late Models and Sprint Cars also receive $100 product certificates.  The White House, Tenn., manufacturer gives 700 Series steering boxes to IMCA Sunoco Stock Car, Karl Kustoms Northern SportMod and Smiley’s Racing Products Southern SportMod rookies of the year, and $100 product certificates at designated special events for those divisions. Information about KSE products is available at the www.kse-racing.com website, by calling 615 672-5117 or by follow­ing the company on Facebook, Twitter and Instagram. center_img In its 23rd year as an IMCA sponsor and 41st year in the high performance parts business, KSE has also re­newed awards for IMCA Modified, IMCA Late Model and IMCA RaceSaver Sprint Car drivers.  WHITE HOUSE, Tenn. – KSE Racing Products expands its IMCA program of awards this season with the ad­dition of Stock Car and SportMod prizes.  “KSE and IMCA have been linked together for a long time and we value this partnership as much as any,” stated Kevin Yoder, director of marketing for the sanctioning body. “Their continued willingness to increase their awards to racers is a source of pride for them and a huge asset to our members.”last_img read more

FIFA Ranking: Nigeria Remains Sixth in Africa

first_imgThree-time African champions, Super Eagles retained their sixth spot on the continent in the latest FIFA world ranking released yesterday.Nigeria is behind leaders Egypt, Senegal, Congo Democratic Republic, Tunisia and reigning African champions, Cameroon.However, Nigeria’s 2-0 defeat to South Africa in the AFCON 2019 qualifier may have been responsible for why Eagles dropped to the 39th position in the global ranking.On the African scene, Congo Democratic Republic (28th, up 11) and Mauritania (81st, up 23) registered their highest positions to date.Germany climbed to the world number one spot after two solid years in the shadow of other challengers.Following their 1-0 win over Chile (7th, down 3) in St Petersburg, the newly crowned FIFA Confederations Cup champions overtook Brazil (2nd, down 1) and leapfrogged Argentina (3rd, down 1). Switzerland is 5th while Poland (6th, up 4) also has cause to celebrate, having risen to their best-ever ranking. Colombia (8th), France (9th) and Belgium (10th ) complete the global Top Ten ranking.The next FIFA world ranking will be published on Thursday, August 10.AFRICA’S TOP TENEgyptSenegalCongo DRTunisiaCameroonNigeriaBurkina FasoAlgeriaGhanaCote d’Ivoire Share this:FacebookRedditTwitterPrintPinterestEmailWhatsAppSkypeLinkedInTumblrPocketTelegramlast_img read more

APASS director works to build a community

first_imgAsian Pacific American Student Services Director Jonathan Wang is dedicated to making sure the students he works with get the support they need — and not just because that’s his job description.As a first-generation Taiwanese American college student at UC San Diego,  Wang struggled to find his own calling.“When I was at UCSD, I wish that I had an APASS, I wish that I had someone who I could talk with … I struggled with a lot in my first year,” Wang said. “I didn’t fit in somewhere, [I didn’t find] that sense of belonging, and that really guided me in how I work for the students here at USC.”While Wang initially went into college to study management, he realized that his true passions lie with supporting students through college. As the first in his family to go to college, Wang is able to draw upon his own experiences in order to relate to the first-generation students that he works with at USC.Wang became involved with a number of programs at UCSD where he supported students, including being a resident advisor and participating in an internship where he worked with a local charter school that served low-income students. While he initially started the internship as part of his education requirements, Wang fell in love with the program — and continued to work there for all four years of college.“A lot of [the students at the charter school] were going to be the first in their family to go to college, which is kind of how I was the first in my family to go to college, so really, it was something I found myself in as I was helping these students,” Wang said.After graduating from UCSD, Wang returned to his hometown to start a tutoring company, JKs Tutoring, for high school students. The company didn’t only focus on helping  kids receive good grades in high school, but also ensured that they would be prepared  for college.“It was my way of trying to figure out how I could merge my major, in economics and operations management, with my passion for education,” he said. “A lot of it was college prep. We were mostly helping students with one class, but we were also looking at how that one class fit in the overall picture of getting these students through high school and into college.”But Wang soon found that he was drawn more to working in student services at the college level. For that, he needed a graduate degree. After much deliberation, Wang chose to pursue a master’s degree in administration and student affairs at USC Rossier School of Education.“It came down to University of Michigan and USC,” Wang said. “Both are top schools, but I’ve only ever lived in California, so I realized that I wanted my network to be in California.”It was while pursuing his degree that Wang first became involved with USC APASS. He started a graduate assistantship at APASS, working with the the assistant director and director of the program at the time.Just as Wang was graduating from his master’s program, both the assistant director and director of APASS found new jobs, which allowed Wang to apply for, and later become, the assistant director of the program. After a few years as the assistant director, the director position opened up again, which led Wang to where he is today.He says that helping students from similar and different backgrounds truly demonstrates the importance of cultural centers like APASS at a school like USC.“There are going to be students that experience college in different ways, they might be the first in their family to go to college, or they might be struggling through something, or they just need someone to talk to, and I hope that as … director now, that I’m allowing for the building of that community for them,” he said.As APASS director, Wang has made many programs and opportunities possible for Asian American USC students. One of these is the CIRCLE program, which stands for “Critical Issues in Race, Class and Leadership Education.” It is a weekly leadership program that explores the experiences of Asians in America. The program has been at USC since 1998. Wang says that every year he learns more about himself and his students, and he sees the program as an experience that connects the community in a meaningful way.Assistant APASS Director Queena Hoang, who has been working with Wang for the past year, said that Wang is known for mentoring his students.“Jonathan does a really great job in helping students learn more about their identities and get them to go more in depth in their identity and work as an Asian American student,” Hoang said.Another program, the Asian Pacific Islander Desi American Leaders special interest floor, is one that Wang and APASS are starting this year.“We’re partnering with the Office of Residential Education and faculty members to have a floor dedicated for Asian American students,” Wang said. “We want to get students involved in really making the most out of their first year.”“Jonathan has … [made] this a unique experience for first-year students in having a smoother transition into college and into USC, and creating a community where students will feel welcomed,” Hoang said.Although Wang has worked on many programs for APASS, Hoang says Wang’s selflessness with his students is evident in the bonds he has with them. “He is really great at building relationships with students, and I think students really trust him as somebody who can offer great advice on a personal level … the students really appreciate and value the work that he does for them, and he’s very selfless in that work,” said Hoang. “The students can totally see that he does work for them, and not for himself.”But the work he does for APASS isn’t all Wang is doing at the moment — he’s also pursuing a Doctor of Education from Rossier. “I love doing research, I really love the opportunity to learn about special populations in higher education and USC has been a great place for me,” Wang said.“I just found that the doctoral program was everything that I needed and everything I was looking for.”Ultimately, Wang hopes that his work in student services and APASS specifically serve to push USC forward and uphold the values of the Trojan Family.“At this point in our society at USC, [we’re lucky] to have all of these resources and support available for our students,” Wang said. “In the interactions that I have with students and faculty … and especially when it comes to campus issues and campus climate … we’ve been struggling through it, but I do see that there is more being done.”last_img read more