How Can I Sign Kentucky Banking Form

How can i industry sign banking kentucky form secure

[Music] [Applause] everyone um hey first of all thank you for attending our uh first what we uh really feel will be a number of valuable workshops this year and i'm really excited about today's workshop because it is really uh going to cover an area that's uh really a concern in today's day and age which is cyber security now we get to the fun part which is an introduction to a dear and close friend of mine brian mccann uh brian and i have known each other for over 35 years now uh despite the fact that he looks much younger than than i do um he is three months older than i so um it's it's the lighting i'm sure um but uh in all seriousness um uh really um i i trust you people in this world more than brian mccann i think of um as a very high class individual not only is he a business leader in the technology and business world and cyber security world he's really just a first class individual a great husband a great dad to two wonderful sons and not only that but brian and rosie are both you know very strongly committed to um their communities through charity charitable work and it's just fantastic what they've done over the years in their various communities where they've lived really just a treasure to to know and and be a part of his his family so um you know what brian's gonna cover today is really um on a broad basis some of the cyber security threats that we're facing globally but then he's going to break it down into some more concrete and personalized and common sense approaches that you can take to protect your own safety and that of your family so i think he's going to do a great job in doing that if you own a small business a medium-sized business or even a large-sized business um you well know that a cyber security threat can completely ripple your operations and that's really what brian's company does is try to save companies from that type of environment and threat so without further delay uh brian mccann wow thank you bob so so a little background on me um so i run a cyber security company it's about 150 million dollar business we protect network and applications for essentially a large enterprise we have thousands of enterprise customers it's companies like at t and amazon and citibank and disney uh and walmart our example so really big companies and we make sure that their websites continue to run when they're being attacked uh we make sure that traffic to the website is secure that their customer transactions are secure so i'm in the world of kind of big enterprise security uh and so you know our worries are you know countries like north korea and china and russia and what they're attacking and how to protect our customers that's less of an issue for what we're going to cover today and instead what bob and i felt would be interesting for you is to talk about threats and trends across the industry but really tips you could use and that i use with my own family right because i wanted to give you and you'll see we finished with five practical tips to protect your cyber security for yourself your family and what you can recommend to your friends so that's the intention for today let me start with the internet so you know about the same time bob and i met in 1985 just before that arpanet was founded which was the beginning of the internet and this little protocol they called tcpip um and so the internet was born in the 80s we didn't really know about it until the 90s and you know at night and if you look at 1992 was one of the first internet trades of a stock interestingly it was done by e-trade and that was one of the first internet commerce type applications back when speeds were very very slow so i'm going to walk you back because i don't know how many of you remember like what it was like in the very beginning but if you think about 20 years ago in 2000 we were dialing into the internet with this little squeaky modem that you may remember it was 64 kilobits per second that's 0.06 megabits per second that was just 20 years ago right and that's how you got your aol messages that's how you did you know very early online connection to get chat and that kind of stuff well that was 2000 by 2010 the speeds were up to four megabits per second right so a hundred fold faster in terms of what they were doing and then by uh 2020 you can now see speeds of over 40 to 200 megabits per second to the home your mobile phone is now delivering tens of megabits per second you know multiples to what we were able to get off your connected cable into your house and what that's done is that's driven a ton of innovation right it's more than just email now it's more than if you remember those really cryptic screens that we used to look at because graphics required more bandwidth they were really cryptic so if you look at things like um in 1995 ebay and amazon started their first online auctions that's 1995 right kind of crazy google was founded in 1998 right and so the internet as the internet speeds went up new applications came to uh came and were born and became more practical because the speeds were there zoom the very platformer on right now was founded in 2013 right and now has become kind of a mainstay of how we're staying connected video conferencing is fundamental to what we do in the pandemic and then the first 4k live stream which is kind of very high definition video came in 2018 netflix you know if you remember they used to download the movie you couldn't even get full-time streaming 15 years ago so we've come a long way and and really the main point here is that the internet what we're using to connect on this call is changing the game and how we live our lives the productivity improvements the applications the entertainment it's massive and these tenfold increases in bandwidth are continuing another 10 years from now we'll be having two gigabits to our home and just think about what that means in terms of gaming applications or video how this is changing telemedicine right so our son is studying uh basically robotic surgery which to today he has to actually operate in the same room as the patient eventually the network is going to allow him to operate remotely with the robot and him being in a different location we'll be having thanksgiving dinner with virtual reality headsets being able to connect bob in your case right you got ryan and the family out in california you can't get there all the time so whoever can't make it they get the vr headset and they join you right and so that's the future of where we're going and so that's the great opportunity all sounds wonderful but there is risk right and so and again i don't want to scare people i want people to be thoughtful right so um i see my mother-in-law's on there my parents are on there like i want them to know that there is safety in the internet but i also want everybody to know you have to take the right precautions right and so as i give you the tips in the next slide i want to just kind of alert you to some of the things you need to be thinking about because it's just it's so easy so one statistic here 2.3 trillion attempts to hack a personal or a small business account this is from one of my customers sonicwall it's one vendor that tracked 2.3 trillion hacks last year and what are they trying to do they're trying to steal your personal information they're trying to be able to disrupt and maybe move things around they're trying to be able to get access to your accounts you need those services to be protected you need to be thoughtful when you're doing and working on those systems on the upper right you see 22 billion is the number of iot that is internet of things iot and iot devices are things like those nest thermostats it's the ring doorbells uh it's now your refrigerator it's your your new um hot water heater uh rosie my wife's got a uh a scent a aroma system that is connected to the cloud into the internet all of these devices are just booming right we're getting to there to the point where it's gonna be over 35 billion iot devices next year and many of those devices aren't safe they're not well protected and so if you have them in your home you need to be thinking about keeping their software updated next point here is 44 million microsoft accounts that are using passwords that are already compromised elsewhere now there's two problems that this is pointing out first of all um a lot of times passwords are compromised and and they're being used in the dark web without actually others being aware of it and the second is that a lot of people use the same password for many different things and that is very unsafe right and that's just what microsoft is reporting and then the bottom right is a hundred three thirty three thousand dollars is the average cost of a ransomware attack so ransomware essentially is a malware a malicious software that gets into your computer and freezes it and basically locks you out until you pay ransom usually in the form of bitcoin now uh you don't hear this too much at the personal level although it's growing um and the most famous ransomware attack was in 2017. they named these these uh malware ransomware viruses pretty creatively this one was called wannacry because if you get to get it you're gonna wanna cry and the target the biggest target that was successfully landed by the north koreans that attacked fedex for the to the tune of about four billion dollars of lost revenue and over 500 million dollars of new i.t infrastructure because fedex made an acquisition in europe that wasn't secure and they didn't integrate it correctly and so these ransomware attacks can be incredibly expensive um the country's state attack on iraq brought down the city of atlanta for i think about four or five days and that was also 2018 or so so these ransomware attacks can be big and the way ransomware gets to you or employees is through a technique called phishing which i'll cover and it's something really important to avoid all right so now let me give you some helpful tips and so so i want to again preface this with remember i'm a business enterprise security guy this is what i'm suggesting to my family right so these are not uh something that has to be done immediately and there's a variety of different ways of being able to prioritize this but i'd like you to think about your exposure and how prominent you are for my parents and my mother-in-law their exposure's not very high they're not in the news they're not flashing their money around in the streets they're not picking off their neighbors to try to go after them when they're you know they may be an i.t programmer or something like that so it's always important to take these tips with the balance of how much of a target you are how well known you are how well-known your wealth is and the more prominent you are known the more wealthy you are perceived to be the more you need to be able to take these seriously right but so so these are the kind of tips that again i give to my family we practice so the first one is keeping your software updated it seems kind of obvious a lot of people don't do it so when i say keep your software updated your mobile phone comes with automatic updates there's an option use it right i'll say this for the average personal use device whether that be your laptop your mobile phone your ipad or any type of android device the standard software updates are more than enough to cover your biggest security risks and anytime there is a known vulnerability out there what they do is they basically push those security updates and you'll see in the notes sometimes you can see that it's really important to use automatic software updates and to be thinking about the software not just of you know automatically downloaded but other things that are in your system if you're using like a a norton or a mcafee kind of system make sure that they're automatically updated because any type of new malware gets automatically updated and they know how to block it the other piece which most people miss is make sure that your iot device your internet of things devices your thermostats your radiators your music systems are getting updated at least once a year and so that's a big ass because there's lots of them out there but you know this you're given essentially it's like leaving your windows unlocked in your house if you don't do the software updates you run the risk of somebody trying to open it up so the software updates are really important uh second point is to use strong passwords and so here you know when i talk about strong passwords i mean passwords that are long and complex and i'll cover passwords first and then i'll talk about the authentication second so the most common password the first one that a hacker tries is one two three four five six first one they try it's automatic they're done you're done in a second uh the second one is one two three four five six seven and then eight and nine right so those are the obvious ones people just drag their finger right across then the next level down is the q-w-e-r-t-y again not very original but this is what kind of is original and if you're using these passwords please take an action right now to redo your passwords right the next level down is password one just a password with the number one because a lot of the times it requires an uppercase a lowercase and a number easily hacked and then the other one that i kind of bring up to people even though passwords get longer it's um when they go to your social media and they see that you're a yankees fan for example they will go and try words that combine into your systems for example yankees 2009 uh because that's the last time they won the pennant and so those types of passwords are really risky even though yankees 2009 is a little longer it's still not good enough right so you really need to get creative with your passwords they should be memorable to some extent but here's an interesting statistic and i want you to think about password length think about your passwords to really critical like your banking accounts your finance things that really have important things to you and ask yourself how many digits you know how many characters does that have and here i'm going to give you an interesting statistic that i found if it has seven characters a hacker can target your account and and hack you in less than half a second crazy if it has eight characters they can get you in less than five hours if it has nine characters less than five days ten characters less than five months 11 characters less than five years and then 12 characters less than 50 years and again i'm saying less than because if you have yankees 2009 they will get you faster than an 11 character five-year kind of as you go forward so the length of the passwords being able to combine them at the different areas that's really important now the other thing is you should not be using the same passwords for all accounts i'm going to give you a really bad example so in 2016 i was hacked my gmail account i had an eight digit password this is 2016. i still should have known better but someone hacked my gmail account and i noticed back then i did have an iphone and i noticed all of a sudden my private account was getting ballooned with a ton of emails and so what happened is someone attacked a hacked my account they went in and signed me up for a bunch of spam and just totally bombarded my email i knew something was wrong i went into my gmail changed my password immediately it stopped adding more except now i was on all these subscribed loops that night i had to start cleaning up and going through everything well in my email i saw a email from atnt saying thank you for your order of your new iphone to ship to kentucky and so the hacker went in and again my mistake my att password was the same as my gmail password so they were able to use my username and password uh to be able to get in and be able to take take essentially order an iphone have it shipped to a bogus address which apparently this is a pretty typical thing it's not their own home they just ship it there and they swipe it off the front steps before somebody comes or something like that so i had to change my att password my linkedin password all the things at the time that we're using the same caller passwor key message here don't use the same password for a lot of important things and then the other point here is authentication so most of you and anybody who's accessing bob schwab platforms knows it's a two-factor authentication system so essentially two-factor authentication is something you know and something you have okay so your password you know but when you're going into a new device a new laptop a new mobile phone it requires you to authenticate that device and so it'll send you a text message or an email saying i see a request coming for this new email from this new device please authorize right two-factor authentication is super important because it stops a lot of the hacking that happens out there and when you get a new device an ipad or a computer and you're like oh i gotta re-authenticate this is such a pain in the neck please know you're protecting yourself uh from the hackers because if they don't have your laptop and they're trying to get in they're going to be sending you an authentication request as well and when you deny it you know you're trying to be hacked and you should be careful but it means they found your password you got to change your password so my last comment here on passwords is you know you want them to be 12 characters or more you want to have different passwords for everything how the heck do you keep track of them right so i have now i checked this weekend bob i have 130 unique passwords for different accounts it's a huge number right and there is no way that i could put that on a piece of paper anymore or keep it in a file and so i have moved and we've as a family have moved to a platform called one password it's a password management system it is very safe and secure and it allows me to have my own personal passwords rosie my wife to have her own personal passwords brandon and charles can have theirs but yet we can also have family shared passwords for example netflix where we want everybody to be able to have access so that is by far one of them and there's several programs one password i'm happy with i'm not over endorsing it it's just something that i did my research on and i found it to work very well if you only have five or six passwords you can write them on a piece of paper if you only have 12 systems that you access you can put them onto a special document but don't save it on your your desktop as the name passwords you know make sure you conceal it because if anybody attacks your computer they're going to be looking for it call it grandma's recipe list or something so that they don't find it quite as obvious and you got enough time to respond so that's passwords really important item okay the third one is fishing so fishing ph and fishing essentially is a very very successful technique that hackers use where they send you an email pretending to be someone you may trust like amazon or fedex and they disguise their email to look like that or they misspell it by one letter and what they try to do is say track your package here click here track your order click here and if you didn't order anything from fedex or you're not sure it looks a little suspicious it's not like a normal amazon don't click it because when you click what happens is it then brings your computer through the internet because everything is super fast speed and it then downloads malware malicious software onto your computer that could be anything from ransomware to just simply monitoring software and start doing keystroke monitoring or just taking your data and watching something that you do all day long so phishing is super super dangerous at the company level it's the one thing we have a hard time protecting we can block outbound is the way we do it we can't stop people from clicking we can stop them from going to talk to a china server but at your level it's just really think before you click just delete the email and don't be worried about you know if it's that important they'll send you another one uh and you have a good chance of being able to follow up uh and the other thing is if you delete it uh it's not dangerous so it's not like if it sits in your deleted items that it can do something and fester in there phishing is only activated when you click on it and it deploys the malware software so really important think before you click i know my parents my mother-in-law have been really good about this occasionally my dad will send me a joke like click here or do something and i'm like no i'm not doing it dad i'm not doing it yeah i know they're your friends but i'm not doing it so that's an important one all right two more and again in priority order these become less critical but i want to make sure that you have this in your thoughts process um wi-fi so wi-fi if you're in europe you may have heard it called wifi um it's essentially wireless fidelity is what it stands for it's an 802.11 ieee standard that was developed a while ago and it's and it's based on 2.4 gigahertz and 5 gigahertz frequencies the key point is remember when you used to have to plug your computer into the wall you don't have to do that anymore right most homes restaurants i'm in a hotel like these all have wi-fi and so they have the ability to allow you to connect without cables wi-fi is different than your mobile again i want to differentiate mobile phone you hear about 3g 4g 5g that's mobile technology wi-fi sits and it's actually a local area networking technology the issue with wi-fi is free wi-fi is popping up everywhere i have it in my hotel um free wi-fi is generally not safe and i would encourage you to not use public wi-fi unless you have to that's the first thing walking into a starbucks you're like oh i don't have to use my data plan let me use the free wi-fi if you're a low profile user low risk it's fine but i can tell you that i've been on flights on planes with the wi-fi where people have been hacked because there's a hacker who basically brings up his laptop and he's able to see who's using wi-fi unprotected and can go in and start putting keepstroke software in there a lot of times they'll send them a message just busting chops but it's dangerous free wi-fi can be dangerous now the way you get around it is to use a vpn a virtual private network so if you use a vpn you actually can tunnel in a free wi-fi area and you don't have to worry about it the other thing you do is you just basically use it on devices that are not that critical but ultimately i would say your data plan is more important than you realized because free wi-fi in addition to monitoring and understanding what you're doing and everything else it is very dangerous in our house i'll just kind of show you how over the top i am in our house we have three networks of wi-fi and this is our own house i have one for rosie and i i have one i call guest network it's called uh guest and that's for the guests to be able to use because if they have any type of software malware i don't want to get it on our computers and then i have a separate wi-fi for our internet of things devices all of our other networks there so if they are hacked it doesn't come to rosie and i going forward so that's an extreme example and again i consider myself a corner case but i want to bring it up just to say even in my own home we take wi-fi very seriously because it can be a big area of breaching and then my last point is maintaining backups today's devices laptops ipads everything automatic backups are fairly common uh i strongly encourage you all of our family over iphone devices automatic icloud backups because this way if you lose your device if you drop it in the toilet you know whatever happens you know that you have a backup ready to go when you get your new device and if you ever bought a new device you know they forced you to get a fresh backup before you able to go forward if ransomware hits having an offline backup is also important so another thing that i do twice a year rosie and i take our our computers and we back them on to actually a physical hard drive separate from all the clouds because ransomware will actually if it's good it will get into your cloud backups as well and that's why the city of atlanta was shut down for so long even though they had backups it got into all of their backed up systems so being able to do a backup physically be able to move it off the network and be able to do that once a year we do it twice a year that's really recommended in a worst case armageddon kind of situation for ransomware and you know you think about it that's worth a hundred three or three thousand dollars for you um that's you know that's obviously important so bob you know um so to kind of wrap it up we talked about the internet um amazing you know potential it's changing the way we we get entertained the way we live our lives but there are risks associated to it and i think each of these five tips keeping your software updated strong passwords and two-factor authentication think about clicking or think about your click before you're worried about phishing choosing your wi-fi carefully and maintaining backups that is my recommendation so we can open it up for questions now yeah great i'm sure yeah brian thank you very much awesome presentation uh appreciate it um we do have a couple of questions that have been sent in and um let me kind of go over those so one of the questions that's come in is you know how often should i change my password or past words in this case because you've suggested having multiple passwords can you give us some guidance there general rules of thumb sure well if your password is one two three four five six change it tomorrow um i and what i would say is uh basically the stronger your passwords the less you need to change them at the corporate level we our company requires every 90 days you have to change your password no matter what the length is at a personal level that's over the top you know i would say your most sensitive systems uh you may want to consider more often once a year for 12 to 14 digit passwords is fine uh when you get to 16 to 20 i mean again people can guess anything so it's still a matter out there but i would say once a year for you know banking accounts the really important stuff is prudent and then where you already mentioned where should i store my passwords you kind of answered that question certainly not on your desktop because a hacker can get in there but you know we i myself have many passwords you know people keep them in three ring binders offline but certainly not on a device it sounds like right other than one pass thing as an app yeah yeah so so there are software products to be able to do it bob and again i i think if you think about the internet and what you're doing the number of accounts are just going to grow if you think about having different passwords for everything it's too complex to manage on a piece of paper uh and and if you're if somebody if you drop that piece of paper somebody's got access to everything right so so these systems really do make sense if you have more than 12 accounts you should have more than 12 passwords and that's probably the right time one password it's uh three bucks a month it's not that expensive so you know for for sanity and having that secure is really important um another question are services like life lock or in some cases where someone's been hacked um you know we see we've seen offers from experian or transunion to give you you know protection for one to three years um if you've been hacked are they are they worth it do you think yeah so i definitely think so rosie and i have experience so you know so they they track in addition to your credit if anybody's applying for your credit all those kinds of things if your social security number starts going on the dark web it reports it right um so we had um you know emails that were being reproduced in a couple of areas one of my old yahoo email and again i think i'm probably much higher risk than your average client um but you know we definitely use it um if your password like so facebook for example when facebook was compromised i got an alert that your password is active before they were hacked and so what you have is the request to basically change your password and alert you for those kinds of things which are very valuable um you know we've sent out and have to send out because we're registered investment advisory firm secure emails and i'm looking at my brother-in-law he loves this system absolutely loves the system so but we're required to send out secure emails to protect your information so can you explain not just for my brother-in-law's benefit but for all of our clients benefit why why would we send out an encrypted email that has an attachment on it yeah yeah and bob i get it right especially when you want something quick and you're on the road you're like listen just send me this document i want to get it quickly uh i mean the reality is email uh people choose you know they could have a five digit password with no two factor authentication and you're sending in that you know things that include their social security numbers and a lot of really precious information so your system is protected by two-factor authentication so by sending it through that secure system you are guaranteeing that whoever is receiving that has something they know something they have to be able to access through to it the great question here what if the password aggregator i guess one pass is hacked i've asked that we we talked about that i guess in theory it could be hacked um any response there yeah so i mean i've been around this whole thing i used to have an excel spreadsheet that was hidden inside and all this funky stuff going on i mean you got to do something so having a 25-digit password with two-factor authentication should help you sleep at night uh if nothing else um and you know one of the nice things about the password you know it can generate um uh some of its own passwords and it makes it a lot easier on the other side you can have it generate its own you just gotta keep track of that one password and the other thing maybe bob you kind of hope for everybody and one password it opens with my facial recognition so my major you know once my device is uh once the device is authenticated i use my face to actually open it up so i don't have to type this 25 digit password all the time either and that's what makes it better once we get to retinal scanning for passwords then that's really going to be amazing the issue that all of us have is my laptop is not the same as my iphone so you know you still need to be able to have you know different ways to get to your your platforms brian what another question here what about texting is that vulnerable from hacking great question um so yes the answer is phishing exists in email as well as texting ups is you know i've seen them where they say ups tracking number click here i didn't have a ups shipping they expected and you click there and it could try to open up something i will say that mobile devices ibm apple specifically is much more secure android is a very open platform so it's very flexible that's an advantage to the platform the disadvantage is it's not as locked down secure wise so iphones tend to be more secure than android devices you just need to overlay a norton antivirus or something into the android device and then it also gets very secure but just be careful on what you clicked okay and one last question would you recommend a vp vpn would i yes you should have a vpn um vpn express is kind of again plain vanilla version that's actually good it's easy it's not too expensive but yes there's a variety of different public bp or you know commercially available vpns explain what a vpn is brian explain what a vpn is uh vpn is virtual private network and what it does is it sets up an encrypted tunnel between your device and what you're communicating to and so it prevents anybody if i think about the wi-fi here i'm currently running on a vpn through the public wi-fi in the hotel to get to the internet so anybody on this wi-fi network in this hotel can see that i'm communicating from my room to the internet but they can't see what's inside of it and so that's kind of it's an encrypted think of it as like kind of canister that allows you to put your data in there all they can do is see the outside of the canister it's encryption hey brian i think we're up against the clock here a little bit um but um what i wanted to do is just thank you first for um first of all coming to the event um and offering you know i think what was valuable insight i have everyone on mute but can i get an acknowledgement with a nod that you felt this was helpful today okay great so so thank you very much brian your your mother's nodding she's gonna nod at anything we do okay yeah yeah it's it's mom you know it we gotta love mom gotta love mom so he's gonna not at anything so stone any event though but uh listen um i wanted to thank you um again for just a fantastic session here again um in the future events what we're going to be doing is a wine tasting uh kind of a fun event where where we'll send you some wine if you register and we'll have you participate in that it could be fun other events like this the future of travel this year residential real estate market updates and more videos that we'll do on the markets as well um again to everyone out there both clients and friends of clients i certainly wanted to say um thank you for your attendance thank you for your commitment to solution-driven wealth it's very much appreciated um we don't take our your commitment to us lightly and that's why we're doing events like this uh to protect you and your friends and your family and um again we wish you a great start to the new year a healthy and happy start and we look forward to speaking with you real soon thank you again everyone