Cybersecurity threats and mitigation strategies for Mistral Bank

Cybersecurity for Mistral Bank

Mistral Bank is one of the global financial services company headquartered in the United States where it is the third-largest bank holding firm and fourth-largest in assets held by deposit and market capitalization respectively. Since its inception, the company has experienced tremendous growth and profitability to an extent that it currently serves customers in over 40 countries and has significant relationships with U.S. Fortune 500 and Fortune Global 500 companies. The other factor that has contributed to the growth of Mistral Bank is mergers and acquisitions such as the acquisition of a major regional bank 6 years ago. However, the successful operations of this financial institution is threatened by cybersecurity threats, which have become common in the modern business environment. As a result, this financial institution faces the need to create a comprehensive cybersecurity plan to support its business mission by addressing cybersecurity threats. This paper focuses on discussing cybersecurity technology issues/threats in the banking and financial services sector as part of developing a cybersecurity profile to support the business mission of Mistral Bank.

Cybersecurity Technologies Used to Attack Banks and Financial Institutions

Banks and financial institutions have undertaken several measures to enhance their cybersecurity efforts in recent past given the proliferation of cybersecurity threats and issues. However, these efforts to bolster cybersecurity have not completely eliminated these threats and issues. This is primarily because criminals use different classes of cybersecurity technologies to attack banks and financial institutions. One of the major classes of cybersecurity technologies used to attack banks and financial services is computer networks. According to Snow (2011), cyber criminals are increasingly targeting computer networks of large payment processors. Through this process, the cyber criminals compromise the personal information of millions of people, which they utilize for the criminal activities. For example, in November 2008, hackers breached a company's computer system and compromised the personal information of more than 1.5 million customers, which they utilize to create fake debit cards. In the financial services sector, cyber criminals target computer networks since they store personal identifiable and financial information of millions of customers. In 2010, financial regulators and police agencies discovered that cyber criminals targeted computer networks through which they compromised bank or brokerage accounts and introduced unauthorized financial transactions.

The second class of cyber attack technologies used to attack banks and financial institutions is the distributed denial of service (DDoS) attacks (Soto, 2016). DDoS attacks are initiated from smart devices, which release a code that can be utilized to spam some activities of a company. DDoS attacks are used by cyber criminals on high-profile financial sector companies to search for and attack devices that are safeguarded using default usernames and passwords. During this process, cyber criminals disrupt customer services provided by a bank or financial institution. The third cyber attack technology used to attack banks and financial institutions is insider attack. Cyber criminals attempt to reach out to insiders in these companies through attacks from the dark web. This process sometimes involves attempting to buy login credentials from insiders in the bank or financial institution. Fourth, cyber criminals use phishing scams to attack the personal computers of banks and financial institutions' customers. These phishing scams include viruses, fake pop-up windows, and fake emails that purport to be from the bank or financial institution trying to lure customers into providing their personal information (Price Waterhouse Coopers, 2014). Apart from luring customers into providing their personal information, phishing scams are also utilized to steal the personal information of customers of banks and financial institutions.

Cybersecurity Vulnerabilities in the Banking/Financial Services Sector

Despite the numerous cybersecurity measures undertaken by companies in the banking and financial services sector, the industry is still characterized by some critical cybersecurity vulnerabilities that threaten the effective operations of these businesses. One of these critical cybersecurity vulnerabilities in the banking/financial services sector is network security issues. Network security issues emanate from the fact that organizations in this sector utilize legacy systems that are not only expensive to maintain but also provide numerous challenges to cybersecurity. Additionally, these issues are enhanced by the need for these institutions to ensure their networks are reviewed, secured, and updated, which is a complex and tedious process for banks or other financial institutions.

The second cybersecurity vulnerability is the increased technological change, which contributes to the need for a new level of vigilance in dealing with cyber attacks. Given that banks and financial institutions handle and need to protect financial assets and client data, the high speed of technological change generates numerous challenges and increases cybersecurity vulnerabilities. The third vulnerability is the ever-growing sophisticated nature of cyber threats due to rapid technological changes. Cyber criminals are increasingly taking advantage of rapid technological changes to develop sophisticated means of carrying out their activities. For instance, rapid technological change enables cyber criminals to initiate DDoS attacks using smart devices like mobile phones (Soto, 2016). The other cybersecurity vulnerability in this sector is the lack of a sophisticated threat intelligence system, which makes it difficult for banks and financial institutions to develop real-time alert database (KPMG, 2016). The lack of such a system makes it difficult for these organizations to detect and prevent an eminent cyber attack. Additionally, banking and financial institutions face vulnerabilities relating to the increased use of internet banking and mobile banking services. While internet and mobile banking offers numerous advantages to clients, they are associated with numerous cybersecurity risks because of the likelihood of attacks from cyber criminals.

Cyber Defense Technologies for Protecting Classes of Critical Data in the Sector

The protection of classes of critical data in the banking and financial services sector is critical for organizations in this sector because they handle and are required to protect financial assets and client data. The first cyber defense technology utilized in safeguarding classes of critical data in the banking and financial services sector is the implementation of preventative controls. According to Symantec Corporation (2015), many companies in this industry have focused on establishing preventative controls like perimeter security, intrusion prevention, firewalls, and vulnerability testing. The preventative controls are implemented to help detect, monitor, and deal with cyber attacks. In addition, these controls help in monitoring and managing confidential and classes of critical data.

Secondly, banks and financial institutions utilize encrypted solutions as cyber defense technologies to safeguard data on mobile endpoints. Encrypted solutions help improve cyber defense through controlling access to critical data and dealing with potential attacks. Third, banks and financial institutions utilize secure applications on mobile devices, which utilizes randomly-generated codes to grant/deny access. These applications enable clients to access mobile banking services, but prevent unauthorized access or attacks through specific codes.

In conclusion, cybersecurity is an important issue in the banking and financial sector given the proliferation of cyber attacks in the recent past. Cyber attacks have grown and become a major risk factor in this industry because of the increased adoption and utilization of technology in banking and financial services. However, this industry faces several cybersecurity attacks including phishing scams, attacks on computer networks, and DDoS. While companies in this sector have adopted several measures to enhance cybersecurity, there are some vulnerabilities that enhances their risk to cyber attacks.