logo

Select Sidearea

Populate the sidearea with useful widgets. It’s simple to add images, categories, latest post, social media icon links, tag clouds, and more.
side-area-image-1
side-area-image-2
side-area-image-3
side-area-image-4
side-area-image-5
side-area-image-6
hello@youremail.com
+1234567890
mobile-logo

Author: John Moeller

12 Aug

AI Examination Readiness – What the Regulatory Signals Are Telling Us

by John Moeller
in Compliance & Regulation
Comments

Clients regularly ask me what types of questions regulators are asking or are likely to begin asking about artificial intelligence during examinations. Because there is still relatively little prescriptive examination guidance specific to AI, I find it more useful to focus on the regulatory signals emerging from recent agency documents, supervisory guidance, and public comments rather than trying to predict an exact examiner questionnaire.   Taken together,...

Read More
29 Jul

Ransomware Is a Credential Problem. Is Your Financial Institution Testing for It?

by John Moeller
in Compliance & Regulation, Cybersecurity, Penetration Testing
Comments

Ransomware remains one of the most serious cybersecurity threats facing financial institutions. The attack paths are well-documented: stolen credentials, phishing, exposed remote access, weak internal controls — but that familiarity hasn't made organizations less vulnerable. A ransomware event can disrupt operations, limit access to critical systems, trigger customer notification obligations, invite regulatory scrutiny, and force difficult decisions under pressure. The institutions that manage these events best...

Read More
09 Jun

No More CAT Naps: It’s Time to Upgrade Your Cyber Strategy?

by John Moeller
in Compliance & Regulation
Comments

Why industry-specific cybersecurity expertise matters. Not all cybersecurity threats are created equal. Different industries face distinct cybersecurity challenges shaped by regulations, cybersecurity compliance requirements, and evolving cybersecurity threats. Generic cybersecurity vendors often take a one-size-fits-all approach which simply does not work. Failing to account for the unique cybersecurity threats and regulatory complexities that financial institutions and healthcare organizations must navigate can leave these organizations at...

Read More
17 Mar

Part Six: Industry-Specific Cybersecurity Expertise

by John Moeller
in Uncategorized
Comments

Why industry-specific cybersecurity expertise matters. Not all cybersecurity threats are created equal. Different industries face distinct cybersecurity challenges shaped by regulations, cybersecurity compliance requirements, and evolving cybersecurity threats. Generic cybersecurity vendors often take a one-size-fits-all approach which simply does not work. Failing to account for the unique cybersecurity threats and regulatory complexities that financial institutions and healthcare organizations must navigate can leave these organizations at...

Read More
10 Mar

Part Five: Cost-effective Value Without Sacrificing Quality

by John Moeller
in Uncategorized
Comments

Cost-effective cybersecurity services do not need to come with a high price tag. For years, I have said that in cybersecurity consulting, you get what you pay for. Many traditional cybersecurity vendors offer services at a low cost, but their service quality is often lacking which can put your organization at risk. On the other hand, legacy accounting firms typically provide high-quality services—at a steep...

Read More
20 Feb

Part Three: Tailored, Not Template-Based Solutions

by John Moeller
in Cybersecurity
Comments

Cybersecurity should never be a check-the-box exercise. Yet, too often, organizations find themselves stuck with auditors using generic IT audit work programs that fail to address the organization’s specific risks, industry requirements, and business operations. Many legacy accounting firms and traditional cybersecurity vendors often rely on standardized checklists and generic work programs. While this approach might be efficient for them, it often fails to provide...

Read More
17 Feb

Part Two: Direct Access to Experts: Why Experience Matters in Cybersecurity

by John Moeller
in Cybersecurity
Comments

Cyber threats are becoming more sophisticated every day, targeting organizations of all sizes with ransomware, phishing attacks, cybersecurity supply chain compromises, and regulatory penalties for non-compliance. With so much at stake, you need a cybersecurity partner that brings real expertise—not just a name-brand firm that pushes critical work to junior staff. One of the most frustrating aspects of working with legacy accounting firms and traditional...

Read More