Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech

QuadrigaCX: A Review by Staff of the Ontario Securities Commission

OSC | Staff | Jun 11, 2020

QuadricaCX OSC reviewExecutive Summary

The downfall of crypto asset trading platform QuadrigaCX (Quadriga) resulted from a fraud committed by Quadriga’s co-founder and CEO Gerald Cotten (Cotten). Clients entrusted their assets to Quadriga, which provided false assurances that those assets would be safeguarded. In reality, Cotten spent, traded and used those assets at will. Operating without any proper system of oversight or internal controls, Cotten was able to misuse client assets for years, unchecked and undetected, ultimately bringing down the entire platform.

Cotten was able to misuse client assets for years, unchecked and undetected, ultimately bringing down the entire platform.

The collapse of Quadriga caused massive losses for investors from Canada and around the world. On January 14, 2019, Quadriga announced that Cotten had died in India the previous month. By February 5, the Quadriga platform had ceased operations and filed for creditor protection. Over 76,000 clients were owed a combined

in assets. Approximately 40 per cent of these clients were Ontarians. Ernst & Young, the bankruptcy trustee, was able to recover or identify just $46 million in assets to pay out to clients. The people who trusted Quadriga with their money and crypto assets collectively lost at least $169 million.

See:  Unstable coins: cryptoassets, financial regulation and preventing financial crime in the emerging market for digital assets

Staff of the Ontario Securities Commission (OSC) undertook a review of Quadriga’s business operations to determine how the platform was run, what caused its collapse, and where the money went. Over a period of approximately ten months, a multi-disciplinary team of Enforcement Branch Staff analyzed trading and blockchain data, interviewed key witnesses and collaborated with numerous regulatory bodies in Canada and abroad.

It has been widely speculated that the bulk of investor losses resulted from crypto assets becoming lost or inaccessible as a result of Cotten's death. In our assessment, this was not the case. The evidence demonstrates that most of the $169 million asset shortfall resulted from Cotten's fraudulent conduct, which took several forms.

The bulk of the asset shortfall—approximately $115 million—arose from Cotten's fraudulent trading on the Quadriga platform. Cotten opened Quadriga accounts under aliases and credited himself with fictitious currency and crypto asset balances which he traded with unsuspecting Quadriga clients. He sustained real losses when the price of crypto assets changed, thereby creating a shortfall in assets to satisfy client withdrawals. Cotten covered this shortfall with other clients’ deposits. In effect, this meant that Quadriga operated like a Ponzi scheme.

Cotten lost an additional $28 million while trading client assets on three external crypto asset trading platforms without authorization from, or disclosure to, clients. He also misappropriated millions in client assets to fund his lifestyle. In its final months, Quadriga had almost no assets left and was operating like a revolving door—new client deposits were immediately re-routed to fund other clients’ withdrawals.

What happened at Quadriga was an old-fashioned fraud wrapped in modern technology. There is nothing new about Ponzi schemes, unauthorized trading with client funds and misappropriation of assets. Crypto asset trading platforms, however, are novel and the regulatory framework for these platforms is evolving. Quadriga did not consider its business to involve securities trading and it did not register with any securities regulator. This lack of registration facilitated Cotten's ability to commit a large-scale fraud without detection. So did the absence of internal oversight over Cotten. From 2016 onwards, Cotten was in sole control of a company that had hundreds of thousands of clients and transacted over a billion dollars of fiat currency-denominated assets and over five million crypto asset units. He ran the business as he saw fit, with no proper system of internal oversight or controls or proper books and records.

See:  QuadrigaCX Aftermath: The Bigger Picture

Similarly, Quadriga clients could not have known what Cotten was doing. Under the Quadriga business model, clients entrusted their money and crypto assets to Quadriga. Quadriga provided no meaningful insight into how those assets were being stored, moved and spent. To the contrary, Quadriga provided false assurances about asset storage. Clients had no means of verifying these claims or obtaining meaningful information about the handling of their assets. This lack of transparency also facilitated Cotten's fraud.

Under normal circumstances, these findings would likely have led to an enforcement action against Cotten and/or Quadriga. However, this is not practical given that Cotten is deceased and Quadriga is bankrupt, with its assets subject to a court-supervised distribution process. Nevertheless, we believe it is in the public interest to share our findings with the public to help investors understand what happened to Quadriga and hopefully prevent this type of situation from recurring.

The misconduct we uncovered in relation to Quadriga is limited to Quadriga and should not be understood as applying to the crypto asset platform industry as a whole. Properly conducted, crypto asset trading is a legitimate and important component of our capital markets. We remain committed to working with this industry to foster innovation. Financial innovation has always been critical to the health of our economy and the competitiveness of our capital markets.

Continue to the full article --> here

Download the 33 page PDF report --> here


The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

20-year-old Dubliner lands €14.6m funding round from top Silicon Valley firms

Independent.ie | Adrian Weckler | May 21, 2020

Shane Curran – EvervaultA 20-year-old former BT Young Scientist winner has landed $16m (€14.6m) in new funding from some of Silicon Valley’s most prestigious US venture capital firms

The famous former data security chief for Yahoo and Facebook, Alex Stamos, has come on as a new investor, as have Eventbrite CEO Kevin Hartz and (French firm) Datadog’s CEO Olivier Pomel.  The heavy-hitting Silicon Valley firms backing the venture are led by Index Ventures with participation from Sequoia Capital and Kleiner Perkins and assistance from Dublin-based venture firm Frontline.

“We’re aiming to distill what GDPR did in 99 Articles down to a line of code,” said Mr Curran.

Seven years ago, Sequioa invested in the payments firm created by another former Young Scientist winner, Patrick Collison and his brother John. Stripe has gone on to become one of the world’s most valuable private companies, valued at $35bn (€31.7bn).

See:   Cyber security world first as unique guide is launched

Evervault hosts a network of hardware-secured data processing ‘enclaves’ which allows developers to deploy their applications in privacy ’cages’.  These cages allow information to be processed securely with strictly controlled access but without changing the way that developers build their software. Developers integrate with the Evervault API through their publicly available developer SDKs for all major architectures and frameworks.

“This is conceptually simple, but operationally complex. We’re building cages alongside specific companies which handle extremely sensitive data. Think location data, banking data, payments data, kids’ data, health data and more. At Evervault, we believe that data privacy isn’t a regulatory problem; it’s a technology problem.”

Continue to the full article --> here

 


The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Remote Working Cybersecurity Checklist

Cyber Management Alliance | Aditi Uberoi | May 21, 2020

CMA Cybersecurity checklist

Established in 2015, Cyber Management Alliance is one of the world’s leading cyber incident & crisis management service providers offering advisory, executive training and bespoke workshops in all aspects of cyber crisis management, incident planning, incident response testing and tabletop exercises. Cyber Management Alliance (CM-Alliance) is the creator of the internationally-acclaimed NCSC-Certified, Cyber Incident Planning and Response (CIPR) course. Previous attendees of the NCSC-Certified CIPR course and tabletop exercises include organisations including the United Nations, UK Ministry of Defence, several UK Police Forces, NHS Trusts, European Central Bank, Swiss National Bank, Microsoft, Ernst and Young, BNP Paribas and many others.

See:

 

Remote Working Cybersecurity Checklist

Some areas of risk - note this is not a comprehensive list but a list to help you prepare for cybersecurity attacks:

  • Cybersecurity
  • Passwords
  • Mobile Equipment
  • Privileged Users
  • Phishing Emails and Scams
  • Policy and Illegal Activity
  • Working remotely, Online Meetings & Calls
  • Exceptions and Change
  • Privacy
  • Cyber Attack and Incident Response
  • Backup Backup Backup
  • HR and Mental and Occupational Health
  • Video and Audio Conferences
  • Helpdesk & Support

Download the Remote Working Cybersecurity Checklist --> Now

 


The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Quantum Computers Challenge Blockchain’s Invincibility: What To Do Now

Forbes | Susan Galer | May 19, 2020

blockchain securityTimelines for the emergence of quantum computers may be fuzzy, but the threat they pose to the vaunted security of blockchain technology is profoundly real. Originally popular as fail-safe security for bitcoin enthusiasts, blockchain is making inroads across numerous industries, most notably as a track and trace tool proving the provenance of goods across vast supply chains. Blockchain-based security may be even more valuable in managing supply and demand shocks during the pandemic and after. However, as blockchain services grow and quantum computers begin to emerge, now is the time to start thinking about quantum-resistant blockchain.

“Once quantum computers can break the cryptography being used today, blockchain loses its immutability,” said Cedric Hebert, senior researcher at SAP Security Research.

“We wouldn’t be able to trust new transactions on a blockchain that wasn’t meant to resist quantum-fueled attacks. Companies will need to adopt new protocols to resist quantum attacks.”

See:  The research frontier: where next for AI and collective intelligence?

Right now, it’s difficult to go backwards on a blockchain’s immutable ledger and change original information in each block of the chain. This is especially the case as blocks are added with more data. People can’t easily rewrite history on its immutable ledger because other nodes on the chain would automatically reject any changes. Also, traditional blockchains are based on asymmetric cryptography, which prevents fraudulent signing. Unfortunately quantum computers could theoretically break the immutability of any block in the chain and falsify historical transactions.

“Companies can use blockchain technology if they incorporate quantum-resistant encryption protocols,” said Hebert. “You would need to freeze the blockchain at some point and migrate transactions to the new protocol. ”

Prepare now for post-quantum security

Even if a fraction of the predictions about blockchain come true, the security stakes are high for consumers and businesses. Blockchain made Gartner IT’s list of top 10 strategic technology trends for 2020, predicted to infiltrate everything from processing insurance claims, loans, and recalls, to identity management for students, patients, and citizens. By 2022, IDC analysts said 10 percent of the world's adult population will register for a blockchain-based self-sovereign ID, creating an expanding market of 485 million people who want to own and control their digital identity. Whether it’s verifying transactions for bitcoin mining or tracking food from farm to table, blockchain’s security horizon depends on the unique situation.

“Companies need to factor in the lifespan of their blockchains,” said Andrey Hoursanov, lead of quantum security at SAP. “If you’re using it to trace shipments from raw materials sourcing to delivery, maybe you’re looking at months, not years. In contrast, bitcoin investments typically take longer. That’s where you need to seriously consider how to protect the blockchain against quantum attacks likelier to happen further in the future.”

Re-securing cryptocurrency

Cryptocurrency isn’t necessarily just for consumers trading bitcoins. IDC analysts predicted that over 12 countries, mostly emerging economies, will begin issuing a digital currency using blockchain technologies to promote economic stability and encourage electronic commerce by 2023. As some governments begin using cryptocurrencies, Hoursanov said companies will need to begin looking at post-quantum blockchain technology for business-to-business (B2B) transactions such as procurement that involves collaboration between buyers and suppliers.

See:  Accenture: Fintech, Cybersecurity and Methods to Handle Threat

Cross-border payments are another potential security risk. For example, IDC researchers predicted that 85 percent of global container shipping will be tracked by blockchain, with half of this volume using blockchain-enabled cross-border payments in just three years. They said that 40 percent of tier one financial institutions will use blockchain networks to process point-to-point cross-border payments, bypassing SWIFT and the correspondent or central banking infrastructure by 2024.

Continue to the full article --> here

 


The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

RegTech: The Financial Industry Disruptor

Guest Post | May 13, 2020

Regtech sectorSince the global financial crisis of 07/08, firms have had more and more stringent rules enforced upon them to ensure that such a catastrophe isn’t allowed to happen again. This increase in regulatory burden has gone a long way in keeping disasters at bay, but at the same time it has put a lot of pressure on people working in the financial industry.

Observing an ever-changing onslaught of compliancy rules is no mean feat, that much is for certain. Professionals in the field of finance could have the rug pulled out from underneath them at any moment, which is why they’ve long called for a bit more support. Fortunately, thanks to the emergence of RegTech, they now have the exact level of assistance that they require.

See:  TC Webinar (May 21, 2020): FinTech, RegTech, and SupTech Community of Practice with Simone di Castri

RegTech has well and truly changed the face of the financial industry… and many will say for the better. To find out what kind of an impact it has had, be sure to read on.

The impact of RegTech

The Institute of International Finance has recently pinpointed seven key areas of compliance and regulatory reporting that RegTech has had a distinct impact on:

Risk-data aggregation

This makes it easier for finance professionals to draw up capital and liquidity reports.

Modelling and forecasting

Finance professionals now have the capacity to better manage their risk because of the fact that it is now easier for them to analyse future trends.

Payment transaction monitoring

This gives finance professionals a tighter grip whenever they enter into an agreement with a new client/partner.

Market trading

Finance professionals can now calculate interest margins and study the choice of trading venue, which in turn allows them to make much sounder investments.

New regulations

RegTech automates the interpretation of new compliancy regulations, which ultimately allows finance professionals a better chance of being able to observe the rules that are enforced upon them.

 

The different types of RegTech

To ensure that it is capable of optimizing the daily workflow of a wide range of finance professionals, RegTech comes in a plethora of shapes and size. Here are the three different types of Regulator Technology that you should be aware of:

Tracking

Finance professionals can automate the process of tracking their compliancy laws by investing in CUBE DRP regulatory compliance software.

Reporting

This allows finance professionals the opportunity to submit reporting data with ease, which in turn allows them to draw up important reports at a much quicker pace.

Training

The training feature that is installed into most RegTech solutions makes it possible for whole workforces to learn about this type of technology while on the job.

Ask all of your friends in the finance industry what they think about RegTech, and they’ll no doubt all say the same thing — it has made life a whole lot easier. Without this tech at hand, finance professionals would be forced to study a countless amount of compliancy documents each day. This would inevitably lead to errors being made, and it would drain the workforce of any enthusiasm they once had for regulator reporting.

 


The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Cybercrime and Covid-19: Preying on Fear

Guest Post | May 2, 2020

Cybersecurity checklist

For months the coronavirus pandemic has been affecting the world, the economy, and our daily lives. With this has come an uptick in some unexpected and negative situations including cybercrime.

Cybercrime certainly isn’t a new concept for businesses, but increasingly organizations, including the World Health Organization, are the target of hackers, and all businesses are trying to prevent a data breach in trying and unprecedented times.

There was a recent report from Europol that indicated cybercriminals are using coronavirus to their advantage in different ways, including the carrying out of DNS hijacking attacks that target not only businesses but home wireless routers.

The following are some things to know about cybercrime in the era of covid-19.

Remote Work

One of the biggest issues in terms of cybersecurity right now is the fact that much of the world’s employees are working remotely.

Employees don’t have the same cybersecurity resources as are available when they’re working onsite, and they might not be well-versed on best practices when working from home either.

DNS Attacks

Specifically at issue right now, among other cybersecurity threats are DNS attacks, which were touched on above.

According to current research, cybercriminals are using personal Wi-Fi routers as their point of attack.

Attackers change the Domain Name System settings in Linksys routers, and then users are directed to what appears to them to be a legitimate website. The website will also have information about the pandemic.

Then, once someone clicks through these illegitimate sites, they might have a fake app downloaded that has malware.

When people are working from and their DNS router is compromised, then it could be especially problematic. Employees could unknowingly give away their business login credentials and files. They could also without realizing it let attackers dial into their company’s infrastructure from remotely.

Beginning from March 18, there were attacks launched that redirected visitors from websites, including Disney, Reddit, and Amazon Web Services.

See:  58 Must-Read Remote Work Resources | 50 Great Remote Working Resources

It was an issue around the world, but primarily in the United States and Germany.

DNS hijacking is tough to spot because when you’re the victim of these kinds of attacks, you think you’ve landed on the page you meant to visit.

The difference is that the site is being served by a different IP address.

Similarly, there have been reports of cybercriminals who pretend they are the World Health Organization and that they have a Covid-19 app for people to install.

From February to March of this year, reports of malicious cyber activity involve coronavirus went up five-fold.

Other Covid-Related Threats

These DNS attacks aren’t the only issue.

For example, spam is becoming a growing problem. As more people are working online and from home, there are problems with spam because of the use of sharing software, file attachments, and online tools used to facilitate remote work.

There are also issues where scammers are using coronavirus as a way to hook their victims.

They’ll make people think they need money for some reason dealing with the pandemic.

Also, there are reported issues where scammers are pretending to be health organizations or are saying they are relief groups, and they ask for financial donations in bitcoin.

See:  CSA Warns Public of Coronavirus-related Investment Scams

When people order things online, they may see lately they take longer than they would typically and this is another area being exploited by cybercriminals.

They are sending spam emails that people believe are legitimately related to their online orders. The attachments in these emails will include shipping updates or notices about shipping postponement, but the attachment has malware.

Ransomware issues have been found in which the variant is actually called CoronaVirus.

There has been a lot of talk by politicians and health officials about the potential to track coronavirus cases using mobile technology, and since then there have been mobile ransomware attacks.

There are malicious apps that are supposed to be used to track cases of covid-19. When someone falls prey to this attack their phone may be locked by the ransomware and they may have to pay money in bitcoin to unlock it again.

All of this may mean that cybercrime will cost the world $6 trillion by 2021. This is up from $3 trillion in 2015.

According to CISO Magazine, cybercrime will be more profitable than the entirety of all major illegal drug trade in the world.

Organizations are being encouraged to prioritize cybersecurity right now, and this includes training employees and making them aware of key threats and how to avoid them, particularly as it relates to phishing scams. Many organizations may have to increase their spending on cybersecurity in the coming months.

 


The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Accenture: Fintech, Cybersecurity and Methods to Handle Threat

FintechZoom | Jung Min-seo | April 1, 2020

cybersecurityWhat’s the cybersecurity risk panorama for fintechs in 2020? Accenture’s perception offers some readability

The tempo of digital transformation throughout the monetary panorama continues to quicken.

In such an atmosphere the digital or cyber risk proposition evolves quickly, making it important to take care of the best requirements of know-how and preparedness, and hold updated with the impression of cyber tendencies.

In response to Accenture’s 2019 Ninth Annual Price of Cybercrime report, monetary providers incurred the best cybercrime prices amongst all industries studied in 2018.

See:

On this analysis, Accenture explains: “As industries evolve and disrupt the present atmosphere, threats are dramatically increasing whereas turning into extra advanced. This requires extra safety innovation to guard firm ecosystems. The following value to our organisations and economies is substantial – and rising.”

See:  Smart Cities Offer Promises and Concerns Over Privacy

Throughout all industries, Accenture discovered that data theft is the most costly and quickest rising consequence of cybercrime. Nonetheless, it famous that there are a number of drivers behind the evolving world cybersecurity risk for all sectors:

  • Evolving targets: knowledge is now not the one goal in response to Accenture. Moderately, corporations worldwide are seeing their core programs  – controls programs and infrastructure – being hacked, which may result in better disruption.
  • Evolving impression: it’s now not nearly theft. For instance, cyberattacks are altering strategy from merely stealing knowledge to destroying or altering it to create mistrust. At present, knowledge integrity itself is weak.
  • Evolving strategies: assault strategies are adapting shortly. Accenture discovered a deal with “the human layer” that targets the weakest hyperlink – individuals – by means of phishing and malicious insiders.

Fintechs and banking: cybersecurity risk

The biggest monetary providers business knowledge breach occurred in September 2017 when Equifax, one of many three largest shopper credit score reporting businesses, uncovered the private data of 147 million individuals.

The breach was brought on by an unpatched Apache Struts vulnerability – Apache Struts being a framework on one of many firm’s US-based internet purposes. It noticed the names, social safety numbers, dates of beginning and different data being disclosed and resulted in a number of members of Equifax’s C-suite stepping down.

Comprehensive:  Cyber security world first as unique guide is launched

This was not at all an remoted incident. After Equifax, different vital monetary providers knowledge breaches have seen as many as 130 million, 90 million and 76 million individuals and households affected.

In a 10 December weblog, Be Secure: Cybercrime within the Monetary Providers Trade, Accenture outlined a cyberattack as “malicious exercise carried out in opposition to an organisation by means of the IT infrastructure by way of the inner or exterior networks or the web. Cyberattacks additionally embrace assaults in opposition to industrial management programs.”

Malicious insider assault, or threats from inside an organization’s firewall are probably the most harmful, it says, costing a mean of $243,000 per incident and taking greater than 50 days to resolve.

As to why that is regarding for banks and monetary providers establishments, Accenture present in its analysis that, within the banking and capital markets, solely 18% of Chief Data Safety Officers (CISOs) believed their staff to be held liable for cybersecurity.

Traditionally, banks and different organisations had one mission: to maintain cash and data protected from all. Past that, says Accenture, extra funding in stopping insiders from accessing knowledge or different data was by no means prioritised.

Know-how vs cyberattack

Modern and superior applied sciences will not be getting used to their full potential in cybersecurity purposes, Accenture finds.

For instance, it reviews that solely one-third of corporations are deploying applied sciences reminiscent of machine studying or AI, whereas solely 24% mentioned they have been utilizing cyber analytics and person behaviour evaluation to their benefit. The latter determine had truly decreased from 31% a 12 months beforehand.

See:  The Clearing House Releases Model Agreement For Sharing Financial Data

Accenture calls this development discouraging, noting that it “suggests monetary providers corporations are struggling to maintain up with the speedy tempo of latest applied sciences and, because of this, do not make the suitable investments to extend operations effectivity and cut back threat”.

As a result of the cyber risk panorama continues to diversify, extra targeted funding in the proper know-how will pay dividends.

Accordingly, it set out 5 key steps for monetary providers corporations to take to start corrective motion:

  1. Improve defenses in opposition to web-based assaults

  2. Give attention to lowering ransomware occurrences

  3. Make investments to forestall disruption to enterprise

  4. Improve the deployment of applied sciences which have a excessive return on funding, reminiscent of automation, machine studying and AI

  5. Handle the usage of ‘much less efficient’ applied sciences liek enterprise governance, superior perimeter management and the in depth use of knowledge loss prevention.

Continue to the full article --> here

 


The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter