JHA_HeaderImage_Blog_v6

Karen Crumbley

Celebrated 14 years with JHA in 2015 and has 10 years of community banking experience. She has been hosting Educational Risk Mitigation Seminars for FI’s from coast to coast encouraging community bankers to engage in conversations with their peer banks and vendors about how best to mitigate risks within their own institutions.

Recent Posts

Top Spear Phishing Attacks & How to Reduce the Risk of Your Employees Taking the Bait

Posted by Karen Crumbley

Wed, Feb 26, 2020 @ 10:37 AM

This post was co-written by Karen Crumbley, Gladiator®, ProfitStars, and Keith Haskett, Rebyc Security. Karen has been providing Educational Risk Mitigation online training courses and encouraging community bankers to engage in conversations with their peer banks and vendors about how best to mitigate risks within their own institutions. She has also been a valued member of Jack Henry & Associates for thirteen years. Keith led the Risk and Information Security Consulting Services practice at CSI for several years, then co-founded Rebyc to deliver offensive security solutions customized to meet the needs of the highly-regulated, financial services industry.

Despite all of the strides made in the security industry to mitigate phishing scams, they continue to be one of the most successful forms of fraud. One of the primary reasons is due to the extensive efforts bad actors are making to research and observe their targets’ behavior. They monitor and research the users’ activity in order to craft sophisticated and convincing emails that even computer-savvy users struggle to identify, known as spear phishing attacks. Financial institutions (FIs) are faced with combatting phishing fraud through Information Security Awareness and Social Engineering Testing to keep employees up to date on the latest scams. The following list includes common types of spear phishing fraud targeting FI employees. You can share this information across your organization to boost ongoing education efforts.

Read More

Topics: Cybersecurity, Risk/Fraud

Become More #CyberAware about Current Threat Trends

Posted by Karen Crumbley

Mon, Oct 22, 2018 @ 11:00 AM

Cybersecurity attacks have become increasingly sophisticated and harder to detect. Cyber criminals are getting more creative in their methods to commit fraud by using a combination of technology along with social engineering to yield results. End users need to defend themselves by becoming knowledgeable on how these crimes are executed. Keeping up-to-date on current threats is an important step in safeguarding your information. Additionally, you can create awareness and educate other stakeholders by passing information along to increase your security and asset protection. Below is a list of trends that are occurring in the threat landscape.

Read More

Topics: Credit Unions, Cybersecurity, Community Banks

Top Employee Cybersecurity Training Pitfalls to Avoid

Posted by Karen Crumbley

Mon, Oct 15, 2018 @ 11:00 AM

A common approach for planning your employee cybersecurity awareness training is to forge ahead, complete it, and remove it from the checklist of “to do” items. Yet any Information Security Officer (ISO) will tell you that their goal for employee cybersecurity awareness training is to have a well-informed staff that is equipped to mitigate fraud.

Read More

Topics: Credit Unions, Cybersecurity, Community Banks, FI Operations

Get a Head Start with Education on Pending Social Media Guidance

Posted by Karen Crumbley

Thu, Sep 19, 2013 @ 08:58 AM

Author: Karen Crumbley, karenc@gladtech.net

Read More

Topics: Archive

Subscribe to Email Updates

Recent Posts