Ion Group
First line of defence dominates third-party risk management
1LoD survey finds 86% of control functions think they have sole responsibility for vendors
Should banks risk lightning hitting twice for CrowdStrike?
Bank tech teams divided on whether to give security vendor a second chance after update crash
Bank of America’s Kris Fador elected FS-ISAC board chair
Industry consortium for cyber security also adds new board directors from Swift, PNC, Truist and CME
Top 10 op risks: third parties stoke cyber risk
High-profile hacks on market infrastructures and vendors expose linkage between top three risks
Top 10 op risks: AI fears drive cyber risk to record high
External fraud re-enters top 10; change management now a top five concern
Too soon to say good riddance to banks’ public enemy number one
As LockBit plans its comeback, experts say banks need a clear ransomware negotiating playbook
Why cyber hack leaves EquiLend down but not out
Users turned to alternative securities lending platforms, but that may not mean lost market share
Achieving net zero with carbon offsets: best practices and what to avoid
A survey by Risk.net and ION Commodities found that firms are wary of using carbon offsets in their net-zero strategies. While this is understandable, given the reputational risk of many offset projects, it is likely to be extremely difficult and more…
Regulator warns against ‘happy endings’ for op risk wargames
Risk Live: Bankers say third parties should also be at the table when simulating crisis scenarios
Vendors under new scrutiny in CFTC due diligence push
Planned cyber resilience regime will force dealers to subject “critical” tech vendors to stricter audit
Citi cyber chief says AI providing new weapons in hacking wars
Barron-DiCamillo also urges regulators to work with industry best practice, not against it
Dora ‘critical tech vendor’ designation could cast a wide net
Experts think cloud services, data providers and software firms are all in regulators’ sights
After a hack, loose lips won’t sink chips
Ion Group is the latest ransomware victim to stay mum about how it was compromised. No-one benefits from this code of silence
SEC cyber rules risk creating web of confusion and costs
Proposals would require breach notifications, public disclosures and annual cyber assessments
Ion wasn’t deemed a ‘critical’ vendor by most clients
Software firm escaped heavy scrutiny ahead of cyber attack, says US Treasury official
Hacked off: banks demand answers after Ion cyber attack
Clients left in the dark about ransomware attack that disrupted futures trading last month