Western Alliance Bancorporation · NYSE:WAL

Western Alliance Bancorporation — Conference Presentation (September 2025)

29 slides from Western Alliance Bancorporation's conference presentation, September 2025

  1. Slide 1: How to Protect Your Business & iPhone from Cybersecurity Threats

    HOW TO PROTECT YOUR BUSINESS & IPHONE FROM CYBERSECURITY THREATS Cybercriminals are constantly evolving their tactics and developing new strategies for gaining access to sensitive data stored in companies’ servers. To combat this, a robust cybersecurity policy must go beyond simply identifying your

  2. Slide 2: Turning your cybersecurity policy into an ongoing process

    Turning your cybersecurity policy into an ongoing process with committed executive oversight, instead of a one-time project within your IT team, can help ensure you are protected from the latest threats in the digital world. While there is no one-size-fits-all cybersecurity solution, there are a few

  3. Slide 3: Services That Help Identify Fraud

    SERVICES THAT HELP IDENTIFY FRAUD Check Fraud Services ACH Positive Pay Services - Positive Pay - ACH Debit Block - Payee Positive Pay - ACH Filtering - Reverse Positive Pay Requires enrollment in Business Online Banking. Refer to disclosures provided at account opening, the Business Schedule of Fee

  4. Slide 4: Business Email Compromises Are a Massive Threat to Businesses

    BUSINESS EMAIL COMPROMISES ARE A MASSIVE THREAT TO BUSINESSES. Use the fewest number of dedicated computers for critical online banking functions to avoid corruption introduced through emails or other unsecure sources.

  5. Slide 5: Business Email Compromise (BEC) Scams

    BUSINESS EMAIL COMPROMISE (BEC) SCAMS • Use email to solicit wire transfers or ACH • Many impersonate executives or financial officers • Exploits authority • Subvert policy / sense of urgency • Inconvenient timing • May or may not be initiated by a “Phishing” email Phishers have stolen billions of d

  6. Slide 6: Compromise System Using Phishing

    COMPROMISE SYSTEM USING PHISHING

  7. Slide 7: Tips for Bank Customers

    TIPS FOR BANK CUSTOMERS Be mindful of: • Grammar, spelling and punctuation • The use of the word “kindly” • A sense of urgency • Email addresses that do not match the sender’s name or organization WHEN IN DOUBT, CALL THE SENDER TO SEE IF IT’S REAL.

  8. Slide 8: Tips for Bank Customers

    TIPS FOR BANK CUSTOMERS • Always check the sender and verify it is legitimate • Check reply-to addresses as well • Just because the sender address looks legitimate doesn’t mean it is • Speed of notification matters: • Wire recoveries attempted after 72 hours have a low recovery rate

  9. Slide 9: Learn Customer Behavior

    LEARN CUSTOMER BEHAVIOR • Now that they are into the systems… • Fraudsters look for administrative access. – Make changes to gain access and hide there activity • Learn the organizations behavior • Review stored e-mail communication • Fraudster determines the best way to move funds • Looks for any c

  10. Slide 10: Who Is Targeted for the BEC Transaction?

    WHO IS TARGETED FOR THE BEC TRANSACTION? • Once the hackers reconnaissance is complete and they know the operations of the organization… • They target and send a BEC e-mail to one of the following targets: • Financial officers • Employees who can initiate a wire transfer

  11. Slide 11: Backup Critical Data Regularly

    BACKUP CRITICAL DATA REGULARLY and make this task someone's responsibility. This should be done once a week at a minimum - or as often as makes sense for your operations - with two copies maintained in two different physical locations.

  12. Slide 12: Maintain Tools to Protect Your Computers and Servers

    4. MAINTAIN TOOLS TO PROTECT YOUR COMPUTERS AND SERVERS FROM VIRUSES AND MALWARE. Most importantly, update these tools and systems regularly with updates and patches.

  13. Slide 13: Periodically Review Your Cybersecurity Processes

    J. PERIODICALLY REVIEW YOUR di | CYBERSECURITY PROCESSES with all stakeholders to ensure <P itis still relevant to your business and industry best practices. Also review the number of cyber incidents detected to see how frequently they arise.

  14. Slide 14: Run Tests on Your Own Cybersecurity

    6. RUN TESTS ON YOUR OWN CYBERSECURITY to ensure it holds up to strict scrutiny.

  15. Slide 15: Questions?

    o oO c i <q sae le wee BY & oh $ Che Ny, en o Fs , SG tii a o~ . "ee . tan, _ eae « * Ting . Osea 20's ® e Ng ee Vigan ve ww e * % *e ‘ ‘te 4 *. *ee Questions? e ' te e@°@ Pi, ‘ » * , & b Me, oe

  16. Slide 16: Protecting Your iPhone

    Protecting Your iPhone • The typical smartphone contains a lot of personal information, like your credit card numbers, passwords, addresses and other privacy related information. • To protect that information there are features within your phone that are available to increase your device’s security

  17. Slide 17: Protecting Your iPhone – Terminology

    Protecting Your iPhone – Terminology • iOS: This is the Apple operating system of your iPhone. You can find your phone iOS version at Settings> General > About • Authentication: The is the process or action of verifying the identity of a user. Multi factor authentication. (MFA) Is an electronic auth

  18. Slide 18: Password Basics

    Password Basics Use passphrases or a password manager • Create long unique passphrases as a best practice • Include combo of upper/lower case, special characters, numbers • Use a long phrase that is unique to you • Example: Apple • Use a password manager with two-factor authentication as an alternat

  19. Slide 19: PIN and Biometrics

    PIN and Biometrics Go truly random with your PIN / Passcode • Easily make your iPhone more secure by creating a random PIN/Passcode • Do not use your date of birth, phone number, bank ATM PIN, garage door code, etc. • Find the Passcode in Settings > FaceID and Passcode Use biometric authentication o

  20. Slide 20: MFA and Wi-Fi

    MFA and Wi-Fi Use multi-factor authentication (MFA) whenever possible • Reduces the risk of someone maliciously accessing your device or accounts • Use MFA on other accounts as well, including email and other apps when available • For iPhones, iOS 14 navigate to Settings > <Your Name> Password and S

  21. Slide 21: SIM Card

    SIM Card Protect your SIM • Create a PIN on your iPhone SIM to reduce hacking if your phone is stolen • A stolen SIM can result in a hacker resetting and accessing your other accounts • For iPhone, iOS 14 you can enable your SIM PIN under Settings > Cellular > SIM PIN

  22. Slide 22: Juice Jacking

    Juice Jacking What is juice jacking? • USB charging outlets at airports and coffee shops are convenient but can hide a hacking device that installs malware or copies data from your phone as soon as you plug it in. This is known as juice jacking. Protect yourself from juice jacking with a data blocke

  23. Slide 23: Backup and Removal of Data

    Backup and Removal of Data Steps before selling or trading in your iPhone • Back up your device • Sign out of iCloud, iTunes & App Store • Erase Content and Settings • Contact your carrier to transfer service to new owner if you are not using a SIM card • Remove your old device from your list of tru

  24. Slide 24: Backup and Removal of Data

    Backup and Removal of Data iPhone step by step for backup and data removal • To back up your device • Go to Settings > [your name] > iCloud > iCloud Backup • Sign out of iCloud, iTunes & App Store • iOS 10.3 or later, tap Settings > [your name] > Sign Out. Enter your Apple ID password and tap Turn O

  25. Slide 25: Jailbreaking and Applications

    Jailbreaking and Applications Do not use a jailbroken iPhone or sideload apps • Jailbreaking: allows a user to run non-iPhone approved applications by sideloading those applications • Sideloading: downloading apps from outside the Apple App Store • Users go through a complex process to jailbreak the

  26. Slide 26: Notifications and MAMS

    Notifications and MAMS Be aware of notifications containing private information • Update the notification settings on your phone to show notification previews ONLY when your phone is unlocked • Example ~ if you’re trying to reset a password on a website, a code may arrive as a notification on your p

  27. Slide 27: Applications and Permissions

    Applications and Permissions Beware of fake mobile applications • Mobile apps allow a pathway into your device that is not necessarily developed or easily controlled by the phone manufacturer • Malicious apps can access your personal information or trick you into entering personal data • Double-chec

  28. Slide 28: Protecting Your iPhone

    Protecting Your iPhone Allow automatic iOS updates • Allow “Automatic Updates” and “Install iOS Updates” to your iPhone to ensure more up to date security updates are installed • iPhone > Settings > General > Software Update • Applications updates also can include security enhancements, so accept th

  29. Slide 29: Protecting Your iPhone Summary

    Protecting Your iPhone Summary Most important ways to protect your iPhone and your privacy  Use passphrases and don’t reuse your passphrases on different accounts  Create a unique PIN/Passcode in Settings > FaceID and Passcode  Allow “Automatic Updates” and “Install iOS Updates” to your iPhone 

Western Alliance Bancorporation — Conference Presentation (September 2025) on 6ix