Speakers: Melisa Kallestad, Savannah Richardson, and Isaida Woo

When assessing security risks for your credit union, many factors must be considered, including emerging technology, the human element, geopolitical influence, natural disasters, and the list goes on. In this session, we’ll break down the cybersecurity landscape and focus on trending risks credit unions are facing today. We will explore common and emerging threats for 2024 and cover helpful strategies to safeguard your credit union and members.

Learning objectives:

• Top 10 Security Risks: Explore key security challenges facing credit unions, covering common and emerging threats.
• Impact on the Institution: Understand how these risks can affect credit union operations and reputation, recognizing potential consequences.
• Safeguarding Methods: Learn practical measures to protect the credit union and its members from risks, including best practices and controls.

Speaker: Jim Jenkins

This session, tailored for credit union cybersecurity leaders, is based on 5 years of research for integrating security into the DevOps processes (i.e., DevSecOps). Attendees will dive into strategies for embedding security practices from the outset, leveraging automation and collaborative tools, and establishing governance guardrails to enhance security without sacrificing speed. This session is an essential roadmap for credit unions aiming to adopt a proactive stance on security, transforming potential vulnerabilities into robust, secure applications.

Learning Objectives:

• Understand the fundamentals of DevSecOps for use at your credit union
• Look at the impacts from a people, process, and technology perspective
• Learn some methods to cultivate a culture of building security in, and not bolting it on.

Speaker: Dr. Kenneth Holladay

Our society is being inundated with news and claims related to artificial intelligence (AI). It is simultaneously hailed as both the solution to all the world’s problems and as the technology that will doom mankind. Dr. Holladay will weave together thoughts on tools, intelligence, and ethics as we consider the impact of AI on our society. Based on an easy-to-understand cognitive architecture model, we’ll consider some of the questions that we should be asking about our development and use of AI.

We’ll consider:

• Where AI falls on the spectrum of tools
• The components of intelligence
• Key concepts of trust and intent

Speaker: Steve Koinm

Often overshadowed in a world of remote cyber-attacks, physical security breaches can be just as devastating to an organization as they were before. This session will discuss how “penetration testing” tools such as the Wi-Fi Pineapple and Flipper Zero can be used in combination with proximity to buildings and assets to compromise networks and gain entry to buildings and restricted areas. See demonstrations of hacking in action and learn how to secure your organization’s physical assets.

Speaker: Keeper Sharkey

Quantum (Q) technologies such as Q-Key Distribution (QKD) and Post-Q Cryptography (PQC) can be used to protect information, particularly for the financial sector.  Last year the National Institute of Standards and Technology (NIST) announced four finalists for standardizing methods. The effort put forth aims to protect information through public-key cryptographic algorithms even with the advent and potential threat of quantum computer's (QCs) ability to crack the encryption key. Recently the Q Economic Development Consortium funded by NIST organized a workshop on how Q technologies can be used in financial messaging which includes transactions sent bank-to-bank or between banks, service providers, government agencies; credit card authorizations; wire transfers; account information; and other types of communications often targeted by attackers. We will review the results of this effort and discuss how this might impact credit unions.

Speaker: Brian Pandya

Penetration testing can be technically and legally murky.  Although legal when done properly, penetration testing can still raise a host of legal and ethical issues and place member and business data at risk.  Further adding to the confusion are often overlapping industry standards and best practices.  This module will address the latest developments in this space, with particular focus on legal, privacy, and compliance risks.

Learning objectives:

Survey the latest developments in penetration testing. 
Gain an understanding of the legal regimes governing such tests, as well as the data privacy and governance risks associated with such tests.

Speaker: Jim Jenkins

Member fraud is running rampant and has the potential to break the business models for unprepared credit unions. In this session we take the topic of fraud head on, looking at out-of-the-box ways to ensure Member identity and anomaly detection.

Learning Objectives:

Take a look at new methods to validate Member identity through facial and voice recognition.
See a new method for doing transaction anomaly detection for your organization.

Speaker: Sarah Anderson

Cyber risk insurance is constantly evolving, becoming more expensive, and dwindling benefits. However, tailoring cyber risk insurance coverage to individual business models enhances coverage benefits and minimizes the insurer’s ability to deny coverage. Understanding and requesting essential coverage options, learning the risks posed by increasing the use of artificial intelligence, and maintaining minimum cyber hygiene tools exponentially increase risk protection for insured entities in this dynamic environment. This module will further dissect recent court opinions on abnormal coverage disputes.

Learning Objectives:

• Understand prioritizing coverage options
• Identify coverage gaps
• Learn about interacting with insurers and breach counsel during/after an incident