- Education & Events
- Advocacy
- Products & Services
- Membership
- Resources
- SDBANKER Magazine
- SDBA eNews
- SDBA eNews Archives
- Legislative Update/Bill Watch
- South Dakota Bank Directory
- Women in Banking
- Scenes of South Dakota Calendar*
- Holiday Signs
- Regulatory Report
- South Dakota Banking Code
- Record Retention Manual
- Advertising & Sponsorship Guide
- COVID-19 Resources
- Mental Health and Crisis Prevention
- About
|
ABA Banking Journal: Federal court blocks enforcement of beneficial ownership reporting ruleDecember 3, 2024
Less than a month before a Jan. 1 deadline for businesses to report their beneficial owners to the Financial Crimes Enforcement Network, a federal judge in Texas has issued a preliminary injunction blocking enforcement of the requirement. The order states that covered companies nationwide do not need to comply with the Jan. 1 reporting deadline, unless the judge or a higher court reverses the order in the meantime. The lawsuit, brought by the National Federation of Independent Business and several of its members, challenged the constitutionality of the Corporate Transparency Act, the 2021 bill that established a beneficial ownership information, or BOI, registry and the requirement for businesses to report. The plaintiffs argued that the CTA exceeded Congress’s authority to regulate interstate commerce, that it violates the First Amendment by compelling speech and infringing freedom of association and that it violates the Fourth Amendment by forcing the disclosure of private information. By mid-November, as the initial Jan. 1 reporting deadline approached, only about a quarter of the estimated 32.5 million covered businesses had registered. According to newly released poll data from Wolters Kluwer, 37% of firms were waiting until closer to the deadline and 12% said they had insufficient resources to do the filing. Meanwhile, 9% of businesses believed they were not covered by the rule, and 32% were unsure whether the rule applied to them. CISA News: The Insider Threat83% of organizations reported insider attacks in 2024November 26, 2024 | Bill Josh Nadeau
The rising concern of insider attacksAs businesses readily adopt hybrid cloud working models and next-generation technologies, the complexity of insider risk management has risen. Cybersecurity Insiders recently reviewed 413 IT and cybersecurity professionals to better understand where and how insider threats impact their organizations.Surprisingly, the rate of insider threat incidents has grown considerably year-over-year, with 48% of respondents reporting that they’re contending with a much more prevalent problem in just the last 12 months. When reviewing the reasoning behind this escalation, Cybersecurity Insiders was able to narrow down four primary issues that are the culprits:
Breaking down the actual costs associated with insider threatsWhile many security teams understand the security implications of insider threats, the full scope of their financial repercussions isn’t always recognized. Cybersecurity Insider’s report dug deeper into these factors; the results are quite revealing.For 32% of the organizations that dealt with insider threats in the last year, the average cost to fully recover averaged between $100,000 and $499,000. While this was the most common response received, 21% of respondents reported much steeper costs, ranging between $1 million and $2 million.These statistics only represent the quantifiable costs associated with insider threat remediation. They don’t consider the additional losses businesses can experience when factoring in the damage these attacks cause to their reputations and the loss in customer trust that comes with it. Best practices for improving insider threat managementConsidering the negative implications that insider threats pose on organizations, it’s important to implement effective best practices to minimize exposure. These include: Advanced monitoring solutions: Insider threats are often much more difficult to detect than external attacks. Due to this fact, it’s important to invest in more advanced monitoring solutions such as User and Entity Behavior Analytics (UEBA). These tools use machine-learning algorithms and behavioral analytics to monitor user activity while flagging anomalies to assist security teams with early warnings of potential insider threat activity. Non-IT data sources: Incorporating non-IT data sources into your threat management platforms helps broaden the intelligence of enabled security solutions. For example, by adding information such as legal data, HR records and other public data sources, you can get a more complete view of potential insider threats that could emerge. These data sources could comprise employee performance reviews and disciplinary actions or other publicly sourced information on social media. All of this information helps with early detection and can considerably lower risk ratios. Automated threat detection and response: With many organizations quickly scaling their digital reach, manual threat detection and response have become highly inefficient. Automated response tools have become an essential asset to help businesses analyze large streams of data, identify potential threats and accelerate response times. In addition to on-premise security solutions, Threat Detection and Response (TDR) services can significantly improve a business’s cybersecurity hygiene. With immediate access to the latest tools and highly trained teams, TDR services can strengthen security defenses. Zero trust frameworks: Strict access control is essential to limit the potential for insider threats to persist. Adopting a zero trust security model reduces organization exposure by assuming all users and devices in or outside a company network are potential threats. This ensures that every access attempt is thoroughly vetted and restricts the ability of malicious insiders to maintain unauthorized access to sensitive systems and networks. Employee training and awareness: A common area of concern for the companies listed in Cybersecurity Insiders’ recent report is employee training, with 32% of respondents admitting that lack of awareness was a major contributor to an attack. It’s important to continuously educate staff on the dangers of insider threats and teach them how to identify and report suspicious activities. Creating a security-conscious culture: It’s important to set the right tone for the entire organization when it comes to cybersecurity planning. To achieve this, company leadership should be actively involved in helping to prioritize threat management across all departments while leading by example. This ensures that everyone has shared accountability when it comes to avoiding internal and external threats. Regular security audits and assessments: In order to ensure the solutions and practices you’re putting into place are effective, regular security audits and assessments are critical. These comprehensive evaluations should review everything from security policies and access controls to the effectiveness of any incident response plans actively in place. Incident response planning: Organizations should always be prepared for the worst-case scenario and have a well-defined incident response plan in place. Considering that a significant amount of organizations in the last report by Cybersecurity Insiders shows most impacted businesses are still unsure about their recovery times, it’s more important than ever to have clearly outlined procedures for remediating attacks. Stay ahead of the insider threatsAs insider threats continue to escalate each year, it’s critical for organizations to take active steps in their prevention. By following the best practices outlined and building more internal awareness regarding these ongoing threats, businesses can ensure they maintain a resilient cybersecurity posture. ABA Banking Journal: CFPB proposes new requirements for data brokersDecember 3, 2024
The Consumer Financial Protection Bureau today proposed a new rule to expand existing federal protections for consumer data to certain activities by data brokers. The proposed rule would define data brokers as “consumer reporting agencies” under the Fair Credit Reporting Act when they sell certain sensitive information about consumers, such as Social Security numbers and phone numbers, according to the CFPB. As a result, data brokers would be required to comply with FCRA requirements on ensuring the accuracy of the data they sell, providing consumers access to their information and maintaining safeguards against unauthorized access to the data. Earlier this year, CFPB Director Rohit Chopra announced his intention to draft the proposed rule after President Biden issued an executive order “encouraging” the CFPB “to protect Americans from data brokers that are illegally assembling and selling extremely sensitive data, including that of U.S. military personnel.” The rule will not be finalized before President-elect Trump takes office, and it is unclear whether his administration will prioritize the issue. In a statement accompanying the proposed rule, the CFPB alleged that countries such as China and Russia currently can purchase detailed information about military service members and government employees “for pennies per person,” and that the data could be used to perpetuate scams or collect detailed information about domestic violence survivors. The proposed rule would ensure that data brokers are treated like credit bureaus and background check companies that already must comply with the FCRA, the agency said. Comments on the proposed rule must be received by March 3, 2025.   Extra copies of our 2025 Scenes of South Dakota Calendar are available to purchase. This newly designed calendar features photo submissions by South Dakota bankers, their family members, and friends.Order your copy (or copies!) TODAY!
National School for Experienced Ag BankersJune 23-26, 2025 | Spearfish
SDBA IRA BasicsJanuary 9, 2025 | VirtualThis course is designed as a “very basic” IRA seminar as it is designed to build a solid IRA foundation. The seminar will start with the differences between a Traditional and a Roth IRA, and then discuss how to set up a new IRA and the eligibility rules to contribute to an IRA. The biggest topic for people new to IRAs to discuss is the moving of money from one financial institution to another. This involves IRA transfers and rollovers, plus the direct rollovers from a qualified plan. Discussion will go thru the 13 exceptions to taking money out of an IRA before age 59.5 to avoid the penalty tax, and how RMD is calculated in a traditional IRA. There will be an introduction into death distributions. Finally, we will cover how to take money out of a Roth IRA. 2025 Midwest Economic Forecast Forum
|
According to Cybersecurity Insiders’ recent 
Prepare for 2025 by joining an economic discussion with Federal Reserve Bank President Austan Goolsbee. Time will be allowed for open Q&A during this virtual event. Bankers are encouraged to invite their business clients and local community leaders to tune in to these economic insights together. Individuals or group registration rates are available.