Cyber protection in financial institutions: How can banks protect their assets?

In recent years, the financial and banking industry has faced a surge in both the frequency and sophistication of cyber-attacks. In 2023 alone, there were over 700 breaches in the financial industry, up from 566 in 2022.

This surge in attacks has affected hundreds of financial organizations, with each data breach costing financial institutions an average of $5.9 million USD.

So, how should banks respond? With an issue as pervasive as cybersecurity, it’s understandable that many look towards governments to intervene.

However, it is equally important that banks are independent, and that government intervention, even in the realm of cybersecurity, is restrained.

With this in mind, it is crucial to explore the need for a combination of government initiatives and private sector efforts to create a fortified defense against these evolving cyber threats, ensuring the security and resilience of banks and financial institutions.

US government initiatives such as Shields Up! are vital in this regard. As a conduit between private and public spheres, government cybersecurity initiatives can help disseminate new cybersecurity guidelines and prepare banks and financial institutions for incoming legislation. For example, Shields Up! issues cybersecurity guidance to business leaders on how to adopt a ‘heightened security posture’ in line with government rules.

In this way, they establish a baseline level of cybersecurity across the industry.

However, in terms of going above and beyond government guidelines, private sector and charitable organizations dealing in cybersecurity are truly best equipped to tailor to the specific cybersecurity needs of each bank.

Cybersecurity expert Rotem Farkash, who has spent years working with Nice Actimize, a platform that works with banks to tackle financial and cybercrime, remarked: "Banking infrastructure is a cornerstone of modern society, it is crucial that private cybersecurity consultancies are there to drive industry standards”.

Private consultancies have the added benefit of being able to troubleshoot cybersecurity issues within banks and financial institutions, without raising concerns about a conflict of interest.

However, it is essential that there is a synergy between government initiatives and private sector efforts. Clear communication and collaboration are key. Governments should provide the overarching framework and support, while private entities should focus on implementing specialized, adaptive solutions.

This collaborative strategy ensures that banks are not only compliant with regulatory standards, but also equipped with the best possible defenses against the sophisticated threats they face.