Bank mergers and failures. Market fluctuations. The new administration and the changes it will bring to financial services regulation. There is much in the news these days for financial institutions - and their customers - to consider.

Cybersecurity is everywhere in the news, you hear about hacks, ransomware, data theft, the list goes on and on. One Way Logic’s security experts can assist with the compliance and risk in order to reduce your attack surface.

Here are four points that One Way Logic can help ensure security and reassure shareholders and customers of your institution's safety and soundness.

• Regulatory Compliance

  All public companies now must comply with SOX, both on the financial side and on the IT side. The way in which IT departments store corporate electronic records changed as a result of SOX. While the act does not specify how a business should store records or establish a set of business practices, it does define which records should be stored and the length of time for the storage.

  The best plan of action for SOX compliance is to have the correct security controls in place to ensure that financial data is accurate and protected against loss. Developing best practices and relying on the appropriate tools helps businesses automate SOX compliance and reduce SOX management costs. One Way Logic has the expertise and experience to get your institution SOX compliant.

• Risk Management

  Banks are obliged to establish a comprehensive and reliable risk management system, integrated in all business activities and providing for the bank risk profile to be always in line with the established risk propensity.

  Risk management system comprises:

  · Risk management strategy and policies, as well as procedures for risk identification and measurement

  · Appropriate internal organization

  · Effective and efficient risk management process covering all risks the bank is exposed to or may potentially be exposed to in its operations

  One Way Logic will follow industry Risk Management Frameworks (RMF) in order to properly identify gaps and create a playbook in order to remediate them.

• The Insider Threat

  One Way Logic can perform a compromise assessment to look for signs of malware and other behaviors that can indicate an undetected breach.

  Why worry about an attack until you have to? Many of the largest breaches reported went undetected for months. The longer the hackers have access, the more damage they can do.

  During the Assessment, the Cybersecurity team will:

  · Examine network traffic for suspicious/malicious communications

  · Utilize industry standard solutions for endpoint and server collection and examination for:

  1. Known malicious files

  2. Connections to known malicious IP addresses

  3. Executables in memory

  4. Unknown files

  · Provide reports on findings with actionable intelligence for threats detected and vendor-agnostic recommendations for improving overall cybersecurity where appropriate

• Red Team Services

  One Way Logic’s Red Team assessments are performed to mimic actions of an actual attacker. One Way Logic performs activities, as required, from all security services to reach an end-goal (typically a domain control or sensitive data access) as defined during the initiation of the engagement. Utilizing information identified from the Internet, Dark Web, and physical review, One Way Logic identifies and attempts to compromise the organization using multiple vectors.

  Red Team Services include:

  · Internal/External Network Penetration Testing

  · Web Application Penetration Testing

  · Wireless Penetration Testing

  · Physical Location Penetration Testing

  · Email Phishing

  · Phone Social Engineering