Organizations in the financial services industry not only face attacks directed at individual institutions; they are also up against the threat of systemic financial cyberattacks. In a systemic breach scenario, the entire banking and payment system could be shut down, throwing the financial services industry into complete chaos.

In an interview published on Sept. 20, JPMorgan Chase CEO Jamie Dimon told CNBC that the greatest vulnerability for the financial system is the threat of cyberattacks. Just this week at the Sibos 2018 conference, a panel discussion focused on the varying levels of cybersecurity preparedness across the industry, and the risk that variance poses when it comes to preventing and responding to attacks. How can financial institutions get on the same page?

Is the Payment Industry Prepared for Systemic Financial Cyberattacks?

Some of the premier payment companies recently decided to take action against the threat of a systemic breach. These companies came together to prepare for the worst-case scenario with an intense, immersive cyberattack simulation at IBM Security’s X-Force Command Center.

Multicompany events such as this help payment companies address critical concerns, such as the potential for a systemic attack. Cyber range exercises security leaders to gauge the organization’s level of preparedness and identify challenges that the industry might face when striving to respond in a collaborative manner. It also helps them develop and hone a contingency plan that could be implemented in the event of a total loss of payment infrastructure and systems.

This multicompany event was not unique; rather, it illustrates a growing trend. More and more, we see financial services companies sharing cyberthreat intelligence. We also see financial institutions banding together to participate in simulated cybersecurity exercises to assess their state of readiness and formulate effective incident response (IR).

Why You Should Invest Equally on Both Sides of the Boom

When financial services companies consider the ramifications of a cybersecurity attack on the stability of the industry, they must focus on two key aspects: “left of boom,” which refers to what an organization does to secure and protect itself from a cyberattack, and “right of boom,” which is what a company must do to respond to and manage a cyberattack after it occurs. Until recently, most companies have focused investments on left of boom, with few companies investing equally on right of boom. As a result, many security leaders are uncertain of their ability to effectively react once a breach takes place.

Financial institution executives who dedicate more attention to right of boom and their IR plans will also be better positioned to address compliance requirements. Industry regulatory requirements, such as the 23 NYCRR Part 500 cybersecurity standard, provide specific levels of accountability, including the requirement to have a fully developed IR plan in place. Despite these mandates, many organizations are inadequately prepared to respond to major financial cyberattacks.

IBM Security has hosted countless financial services companies at the X-Force Command Center, either independently or with peer companies. Not only do these companies go through incident management exercises, but they also have the opportunity to work with law enforcement, law firms that specialize in legal response and regulators that enforce the accountability that companies must demonstrate.

What security challenges does your organization face?

More from Banking & Finance

How to Spot a Nefarious Cryptocurrency Platform

Do you ever wonder if your cryptocurrency platform cashes in ransomware payments? Maybe not, but it might be worth investigating. Bitcoin-associated ransomware continues to plague companies, government agencies and individuals with no signs of letting up. And if your platform gets sanctioned, you may instantly lose access to all your funds. What exchanges or platforms do criminals use to cash out or launder ransomware payments? And what implications does this have for people who use exchanges legitimately? Blacklisted Exchanges and Mixers…

Kronos Malware Reemerges with Increased Functionality

The Evolution of Kronos Malware The Kronos malware is believed to have originated from the leaked source code of the Zeus malware, which was sold on the Russian underground in 2011. Kronos continued to evolve and a new variant of Kronos emerged in 2014 and was reportedly sold on the darknet for approximately $7,000. Kronos is typically used to download other malware and has historically been used by threat actors to deliver different types of malware to victims. After remaining…

Why Cybersecurity Risk Assessment Matters in the Banking Industry

When customers put money in a bank, they need to trust it will stay there. Because of the high stakes involved for the customer, such as financial loss, and how long it takes to resolve fraud and potential identity theft, customers are sensitive to the security of the bank as well as fraud prevention measures. Banks that experience high volumes of fraud are likely to lose customers and revenue. The key is to protect customers and their accounts before problems…

Cost of a Data Breach: Banking and Finance

The importance of cybersecurity has touched almost every industry. Beyond that, robust cybersecurity is table stakes for several sectors, particularly health care and the banking and finance industry. Not only is financial data at risk, but so is customer trust. In banking and finance, trust means everything. Yet, consumers are hesitant to share their confidential data. A recent McKinsey survey revealed that no industry achieved a trust rating of 50% for data protection. Here’s the most sobering stat: 87% of…