The Department of Homeland Security recently issued data security guidance to owners and operators of critical infrastructure. It applies to organizations whose networks have been compromised by a cyber-attack as well as to those who want to improve their network security preparedness; banks fit nicely into both categories.
The Department of Homeland Security is obviously not an enforcement agency, so it can't make companies follow its guidelines. Yet banks should pay close attention to the advice and take it to heart, according to Bill Stewart, a senior vice president who leads the Cyber Technologies Center of Excellence at Booz Allen. We asked Stewart what the guidelines mean for bank IT departments from a practical standpoint.
"The overall guidance is ...