The NAFCU Journal May - June 2018 - 22

discovered in another heavily regulated
industry, not everyone complies.

adds. "Having as part of a policy either
a third-party destruction specialist for
hard drive disposal or doing it in-house
is critical."

"We've gone into hospitals and done
network pen tests and been able to log
into digital copiers with no passwords, or
default passwords we could guess. Then
we would go in and see the actual sheets
of paper that were scanned that had
sensitive information on them."

HARDENING YOUR
DATA SECURITY PROGRAM

So where should a credit union devote
more resources, especially if IT security
budgets are slim?

union needs to be responsible for the
cybersecurity program. Someone needs
to maintain that and hold others inside
the organization accountable for things
such as ongoing security awareness
training and keeping employees vigilant
at all times."

The judgment lapses don't stop there.
"When copiers are replaced and recycled,
those hard drives go out the door," he

First and foremost, according to cybersecurity specialist Tollerton, there needs to
be accountability. "Someone at the credit

They also need someone outside the
organization to conduct a third-party
assessment and find where there are
data security gaps to fill. "Having the
hen watch the henhouse is never a good
thing," he says.
Affinity's Rose agrees that you must first
understand your current situation before
you can determine what data resources
to protect first. He suggests starting with
perimeter security - routers, switches
and firewalls - and working inward. "I
realize that goes counter to what you see,"
he says. "But if you work from the inside
out, you leave yourself open to too broad
of a threat area."
In other words, "dig a moat before you
start guarding everything in the castle."
Wilson advises smaller credit unions to
find the budget to hire a good thirdparty partner and for larger credit
unions to expand IT security staff. He
also encourages credit unions to look
into cybersecurity insurance policies
from a reputable firm so they know they
are protected if a cyberattack occurs.
Among other things, they will work with
experts who intricately understand the
arduous process to be undertaken and
to ensure the financial resources are
available to them. This is important to
the credit union and to its members.
"Our reputation is all we have," he says,
"and if that reputation is tarnished in any
way because of data breaches, that business goes away, because people will no
longer have that trust in you. You can't
put a dollar figure on that."
Anne Saita is a San Diego-based writer
focused on the financial and information
technology industries.

THE NAFCU JOURNAL  MAY-JUNE 2018

22
SageNetViolinAD_NAFCUHalfIslandMayJune2018_PUB.indd 1

3/23/18 1:38 PM


http://www.sagenet.com/masterpiece http://www.sagenet.com http://www.sagenet.com/creditunions

Table of Contents for the Digital Edition of The NAFCU Journal May - June 2018

Conferences
From the Chair
Washington and Industry Briefs
Trump, Credit Union CEOs Discuss Issues at White House
Growth Strategies
In Cybersecurity We Trust?
The New Landscape of Mobile Banking
2018 Annual Conference Exhibitor Directory
Executive Spotlight
Management Insight
Compliance Central
Inside NAFCU Services
The NAFCU Journal May - June 2018 - Cover1
The NAFCU Journal May - June 2018 - Cover2
The NAFCU Journal May - June 2018 - 1
The NAFCU Journal May - June 2018 - 2
The NAFCU Journal May - June 2018 - Conferences
The NAFCU Journal May - June 2018 - From the Chair
The NAFCU Journal May - June 2018 - 5
The NAFCU Journal May - June 2018 - Washington and Industry Briefs
The NAFCU Journal May - June 2018 - 7
The NAFCU Journal May - June 2018 - 8
The NAFCU Journal May - June 2018 - 9
The NAFCU Journal May - June 2018 - Trump, Credit Union CEOs Discuss Issues at White House
The NAFCU Journal May - June 2018 - 11
The NAFCU Journal May - June 2018 - 12
The NAFCU Journal May - June 2018 - 13
The NAFCU Journal May - June 2018 - 14
The NAFCU Journal May - June 2018 - 15
The NAFCU Journal May - June 2018 - Growth Strategies
The NAFCU Journal May - June 2018 - 17
The NAFCU Journal May - June 2018 - In Cybersecurity We Trust?
The NAFCU Journal May - June 2018 - 19
The NAFCU Journal May - June 2018 - 20
The NAFCU Journal May - June 2018 - 21
The NAFCU Journal May - June 2018 - 22
The NAFCU Journal May - June 2018 - 23
The NAFCU Journal May - June 2018 - The New Landscape of Mobile Banking
The NAFCU Journal May - June 2018 - 25
The NAFCU Journal May - June 2018 - 26
The NAFCU Journal May - June 2018 - 27
The NAFCU Journal May - June 2018 - 28
The NAFCU Journal May - June 2018 - 29
The NAFCU Journal May - June 2018 - 30
The NAFCU Journal May - June 2018 - 2018 Annual Conference Exhibitor Directory
The NAFCU Journal May - June 2018 - 32
The NAFCU Journal May - June 2018 - 33
The NAFCU Journal May - June 2018 - 34
The NAFCU Journal May - June 2018 - 35
The NAFCU Journal May - June 2018 - 36
The NAFCU Journal May - June 2018 - 37
The NAFCU Journal May - June 2018 - 38
The NAFCU Journal May - June 2018 - 39
The NAFCU Journal May - June 2018 - 40
The NAFCU Journal May - June 2018 - 41
The NAFCU Journal May - June 2018 - 42
The NAFCU Journal May - June 2018 - 43
The NAFCU Journal May - June 2018 - 44
The NAFCU Journal May - June 2018 - 45
The NAFCU Journal May - June 2018 - 46
The NAFCU Journal May - June 2018 - 47
The NAFCU Journal May - June 2018 - Executive Spotlight
The NAFCU Journal May - June 2018 - 49
The NAFCU Journal May - June 2018 - Management Insight
The NAFCU Journal May - June 2018 - 51
The NAFCU Journal May - June 2018 - Compliance Central
The NAFCU Journal May - June 2018 - 53
The NAFCU Journal May - June 2018 - Inside NAFCU Services
The NAFCU Journal May - June 2018 - 55
The NAFCU Journal May - June 2018 - 56
The NAFCU Journal May - June 2018 - Cover3
The NAFCU Journal May - June 2018 - Cover4
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_NovemberDecember2020
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_SeptOct2020
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_JulAug2020
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_MayJun2020
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_MarApr2020
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_JanFeb2020
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_NovDec2019
https://www.nxtbook.com/ygsreprints/NAFCU/G109023_nafcu_septoct2019
https://www.nxtbook.com/ygsreprints/NAFCU/G106941_nafcu_julaug2019
https://www.nxtbook.com/ygsreprints/NAFCU/G105388_nafcu_mayjun2019
https://www.nxtbook.com/ygsreprints/NAFCU/G103030_nafcu_marapr2019
https://www.nxtbook.com/ygsreprints/NAFCU/G88665_nafcu_janfeb2019
https://www.nxtbook.com/ygsreprints/NAFCU/G100235_nafcu_novdec2018
https://www.nxtbook.com/ygsreprints/NAFCU/G98517_nafcu_septoct2018
https://www.nxtbook.com/ygsreprints/NAFCU/G96479_nafcu_julaug2018
https://www.nxtbook.com/ygsreprints/NAFCU/G93390_nafcu_mayjune2018
https://www.nxtbook.com/ygsreprints/NAFCU/G90161_nafcu_marapr2018
https://www.nxtbook.com/ygsreprints/NAFCU/G88665_nafcu_janfeb2018
https://www.nxtbook.com/ygsreprints/NAFCU/G83806_nafcu_novdec2017
https://www.nxtbook.com/ygsreprints/NAFCU/G80296_nafcu_septoct2017
https://www.nxtbook.com/ygsreprints/NAFCU/G79086_nafcu_julyaugust2017
https://www.nxtbook.com/ygsreprints/NAFCU/G75911_nafcu_mayjune2017
https://www.nxtbook.com/ygsreprints/NAFCU/G73247_nafcu_marapr2017
https://www.nxtbook.com/ygsreprints/NAFCU/G71923_nafcu_janfeb2017
https://www.nxtbook.com/ygsreprints/NAFCU/G69249_nafcu_novdec2016
https://www.nxtbook.com/ygsreprints/NAFCU/nafcu_septoct2016
https://www.nxtbook.com/ygsreprints/NAFCU/g63853_nafcu_julaug2016
https://www.nxtbook.com/ygsreprints/NAFCU/g61005_nafcu_mayjun2016
https://www.nxtbook.com/ygsreprints/NAFCU/g58935_nafcu_marapr2016
https://www.nxtbook.com/ygsreprints/NAFCU/g56716_nafcu_janfeb2016
https://www.nxtbook.com/ygsreprints/NAFCU/g55605_nafcu_novdec2015
https://www.nxtbook.com/ygsreprints/NAFCU/g53582_nafcu_sepoct2015
https://www.nxtbook.com/ygsreprints/NAFCU/g52154_nafcu_july2015
https://www.nxtbook.com/ygsreprints/NAFCU/g50302_nafcu_mayjune2015
https://www.nxtbook.com/ygsreprints/NAFCU/g48554_nafcu_marapr2015
https://www.nxtbook.com/ygsreprints/NAFCU/g47118_nafcu_janfeb15
https://www.nxtbook.com/ygsreprints/NAFCU/g45886_nafcu_novdec2014
https://www.nxtbook.com/ygsreprints/NAFCU/g44155_nafcu_sepoct2014
https://www.nxtbook.com/ygsreprints/NAFCU/g42892_nafcu_julyaug2014
https://www.nxtbook.com/ygsreprints/NAFCU/g41296_nafcu_mayjun2014
https://www.nxtbook.com/ygsreprints/NAFCU/g39799_nafcu_marapr2014
https://www.nxtbook.com/ygsreprints/NAFCU/g38961_nafcu_janfeb2014
https://www.nxtbook.com/ygsreprints/NAFCU/g38041_nafcu_novdec2013
https://www.nxtbook.com/ygsreprints/NAFCU/g36539_nafcu_sepoct2013
https://www.nxtbook.com/ygsreprints/NAFCU/g34910_nafcu_julaug2013
https://www.nxtbookmedia.com