The Tech Revolution and Cybersecurity: A tumultuous relationship? With evolving applications of technology within the asset management industry, data protection remains top of mind. While many large and tech-savvy asset managers are employing advanced cybersecurity protections, many smaller firms are also adopting a new norm, hoping to demonstrate a true commitment to data protection. Do you have an end-to-end view of your total IT and data flow environment? Hear from information security experts on how asset managers can keep risk assessments current and follow best practices to help safeguard the industry from cyber threats. Fund companies and professional service firms will benefit from this informative webinar, addressing issues such as: - The evolving public policy landscape - Shifts in IT security priorities - Roadmap for remaining cyber-ready

1. SPONSORED BY:
Cyber Risk: The New Norm
Wednesday, May 10, 2017

2. SPONSORED BY:
MODERATOR:
PANELISTS:
David Jordan
Chief Information Security Officer
Invesco
Keith Hale
CEO, Multifonds
Michael Anaya
Supervisory Special Agent and Cyber PCOR
FBI Atlanta

3. The Current
Cyber Landscape
Increased Risk
 Social engineering
 Infrastructure weakness
 Increasing interconnectivity of financial ecosystem
 Lack of industry collaboration
 Rapid pace of technological advancements
 Increasing digitalization
Evolving Public Policy
 NY DFS
 FRB, OCC, FDIC
 CFTC
 FinCEN
 FINRA
 GDPR
 PSD II

4. Evolving Roles:
CISO, FBI
Expanding Roles:
Protect: shield and defend
Monitor: hunt and detect
Govern: comply and educate
Respond: recover and sustain
Advise: manage risk and report
TECHNOLOGY EXPERTS | RISK ADVISORS
Three Tenets:
C:“Confidentiality”;
Who has access to what?
I: “Integrity”;
Is the data correct?
A: “Availability”’
Is access enabled when it’s needed?

5. Risk Assessment:
A Shift in IT Security Priorities
Networks
Hardware
Software
mobile applications | artificial intelligence | robotics | blockchain | cloud solutions

6. Anatomy of a Breach
Intrusion Lifecycle
 Initial recon
 Initial compromise
 Establish foothold
 Escalate privileges
 Internal recon
 Move laterally
 Maintain presence
 Complete mission
Investigative Actions
 Financial loss
 Logs
 Evidence
 Subject matter expertise
Inquiries
 US Court Systems & the FBI

7. Polling Question
Do You Feel “CYBER-READY?”
a) Yes
b) No

8. SPONSORED BY:
CLARITY
 Identify roles from top down
 Define responsibilities from C-level to junior employees
FITNESS
 Constantly reassess internal and third-party security capabilities
 Upgrade/transform existing systems
READINESS
 Achieve situational awareness
 Know the current landscape (traditional v. new threats)
 Create response team
 Take a proactive stance
Firm Preparedness:
What Should My Firm be Doing?

9. SPONSORED BY:
Questions

10. SPONSORED BY:
Thank you!
#WebinarWednesdays