Jack Henry & Associates, Inc. · NASDAQ:JKHY
Jack Henry & Associates — Jack Henry Cybersecurity Webinar 5 (March 2023)
31 slides from Jack Henry & Associates's conference presentation, Mar 29, 2023
Slide 1: Avoid Landmines with your Backup and Recovery Strategy
Avoid Landmines with your Backup and Recovery Strategy Nick Shirk, National Sales Director Information Security & Technology
Slide 2: Nick Shirk
Nick Shirk • BS, Industrial Mgmt – MIS and Finance – Purdue University • MBA, Finance & Strategy – The University of Notre Dame • Graduate School of Banking (GSB) – UW Madison • 20+ years – IT, Dev Ops, Security, Consulting • 13+ years working with financial institutions • 6 Years JHA • Led IT/Opera
Slide 3: Slide 3
Slide 4: Slide 4
Slide 5: Airborne Demining in 3 Steps
Airborne Demining in 3 Steps
Slide 6: Airborne Demining in 3 Steps
Airborne Demining in 3 Steps Mapping
Slide 7: Airborne Demining in 3 Steps
Airborne Demining in 3 Steps Mapping Detecting
Slide 8: Airborne Demining in 3 Steps
Airborne Demining in 3 Steps i el Mapping Detecting Detonating
Slide 9: Impact of Disruption
Impact of Disruption FFIEC Information Technology Examination Handbook: Business Continuity Management, November 2019
Slide 10: Return Time Objective (RTO)
Return Time Objective (RTO) “Whether driven by customer expectations or technological advancement, previously established RTOs that were a few hours in duration may now require near real-time recovery. Therefore, it may be appropriate for management to reevaluate currently acceptable RTOs.” What was
Slide 11: Resilience
Resilience “The ability to prepare for and adapt to changing conditions and withstand and recover rapidly from disruptions. Resilience includes the ability to withstand and recover from deliberate attacks, accidents, or naturally occurring threats or incidents.” FFIEC Information Technology Examinat
Slide 12: Business Continuity Management (BCM)
Business Continuity Management (BCM) • Compare inherent risk and effectiveness of risk mitigation against the entity’s risk appetite • Verify whether test plans achieve stated objectives • Monitor BCM testing to verify that issues (e.g. deviation from test plans and failed objectives) are appropriat
Slide 13: Strategic Alignment, Business Impact Analysis, Risk Assessment
Strategic Alignment Business Impact Analysis (BIA) Risk Assessment FFIEC Information Technology Examination Handbook: Business Continuity Management, November 2019
Slide 14: Business Impact Analysis (BIA)
Business Impact Analysis (BIA) • Identify critical business functions • Identify interdependencies across business units • Identify and analyze disruptive events FFIEC Information Technology Examination Handbook: Business Continuity Management, November 2019
Slide 15: What Are Your "Crown Jewels"?
What Are Your “Crown Jewels”? • Consider customer impact and regulatory expectations • Ensure you can continue to serve your customers • Consider customer impact and determine whether BCM solutions meet or exceed recovery objectives FFIEC Information Technology Examination Handbook: Business Continu
Slide 16: BIA – Avoid "A Few Good Men" Management
BIA – Avoid “A Few Good Men” Management • Candid conversations – focus on the current state • Would you be able to achieve your recovery objectives? • Allows management to identify and analyze gaps in critical processes that would prevent the entity from meeting its business requirements
Slide 17: BIA – Interdependency Analysis
BIA – Interdependency Analysis • Identify single points of failure • Telecommunications or power • Network connections between branches • Data centers in close geographic proximity • Backups corrupted • Personnel • Internal and Third-Party Services FFIEC Information Technology Examination Handbook:
Slide 18: Do You Know Your Cost of Downtime?
Do You Know Your Cost of Downtime? Other Expenses Temporary Employees, Equipment rental, overtime costs, extra shipping costs, travel expenses, legal obligations Productivity Revenue • Number of employees • Direct Loss affected X hours out times • Compensatory X burdened hourly rate Payments • Lost
Slide 19: Landmines - Data
Landmines - Data • Understand where data resides • Complex Environment • Cloud exposure • Data Protection • Encrypted in transit and at rest • Data Backup Strategy • Backup Frequency • Retention • Recovery Time and Costs • Testing Frequency
Slide 20: Landmines
Landmines • Integration • Understand limitations with “backup in a box” • Understand how will communicate • Lack of Testing and Validation • Inadequate backups • Inadequate security controls • Failure to prioritize data • Business need should drive strategy not technology • DR is a business issue, n
Slide 21: Landmines
Landmines • Throughput • Backups usually are incremental • Restores may be small amount of data localized to a single user or large amount for the full enterprise • Insufficient Retention Periods • SaaS applications
Slide 22: O365: Shared Responsibility Model
O365 Most SaaS providers follow a Shared Responsibility Model Cloud Service O365 does not include Customer Role Provider backup and recovery Responsible for Only 13% of businesses Responsible for data understand that data protection, including infrastructure and data entering, living in, underlying
Slide 23: Joint Statement on Risk Mgmt. for Cloud Computing Services
“Security breaches involving cloud computing services highlight the importance of sound security controls and management’s understanding of the shared responsibilities between cloud service providers and their financial institution clients.” Joint Statement on Risk Mgmt. for Cloud Computing Services
Slide 24: Think Holistically
Think Holistically Perimeter Core Infrastructure Systems People Cloud Data Governance, Risk, and Compliance
Slide 25: More Than Technology
More Than Technology
Slide 26: Gladiator Total Protect
Gladiator Total ProtectTM Comprehensive Information Security built for Financial Institutions
Slide 27: Broad Expertise and Visibility
Infrastructure Broad Expertise and Visibility Management FFIEC Expertise Jack Henry’s expertise and visibility is unmatched Server and Endpoint Financial Crimes & Management Fraud Monitoring Public Cloud Critical for accuracy and Large Core Private Cloud Environment incident response support
Slide 28: Our Resume
Our Resume • 25 Years of IT & InfoSec Services for FIs • 250+ Certified Professionals • Over 1,200 Clients • Core Processor Agnostic • Host/Maintain over 5,000 Servers • Host/Maintain over 23,000 Endpoints
Slide 29: Register Now
Register Now Already Registered? jack henry cybersecurity forum Today's Cyber Warfare: Strategically Prepare for a Surprise Attack Join cybersecurity experts from Jack Henr and trends impacting you and your v participate in a highly interactive, re to respond to cyberattacks with a and Rebyc urity a
Slide 30: Jack Henry Cybersecurity Forums
Jack Henry Cybersecurity Forums Thursday, April 13 Kansas City Airport Marriott Sheraton Music City Nashville Thursday, May 4 Airport Renaissance Chicago O’Hare Thursday, May 25 Suites https://discover.jackhenry.com/cybersecurity-forums
Slide 31: © 2022 Jack Henry & Associates, Inc. ®
© 2022 Jack Henry & Associates, Inc.®
Jack Henry & Associates — Jack Henry Cybersecurity Webinar 5 (March 2023) on 6ix