We are excited to have a guest presenter, David Schneier, Director with Fidelity’s Customer Protection Center of Excellence - who also leads the Client Security Insights team - join us for this CyberWellness for Retirement Plan Sponsors webinar. This is a 45-minute webinar.
David Schneier has been with Fidelity since 2013. He is an accomplished IT professional with nearly forty years of experience, the past twenty-eight of which have been focused on Cyber Security. Prior to joining the Customer Protection team, he led a team responsible for assessing cybersecurity programs for Fidelity suppliers and third parties. He possesses the Certified Information Systems Security Professional (CISSP) and Certified Third Party Risk Professional (CTPRP) certifications.
NOTE: If you are a client of ours who also uses Fidelity, your organization has access to a complimentary Cyber Assessment. See the form below if you’d like to complete this.
In this webinar, you will learn about the following:
Cybersecurity Threat Landscape and Emerging Risks
Increasingly dangerous threats target retirement data and assets, with significant growth in cybercrime activities.
Criminals profit from accessing employee data and retirement assets.
Threats include ransomware, supply chain attacks, zero-day vulnerabilities, and scams.
Phishing, smishing, vishing, and compromised credentials are common attack methods.
Deep fake and AI-based threats are emerging, with a 1265% increase in phishing emails since ChatGPT launch.
Over 24 billion usernames and passwords are available on the dark web, with a 65% increase over two years.
Protecting Accounts and Personal Identity
Key practices to prevent unauthorized access and impersonation.
Create unique login credentials and passphrases; avoid common passwords.
Use a vault or manager for high-risk accounts.
Enable two-factor and multi-factor authentication.
Secure mobile devices and services with privacy settings, remote lock, and security apps.
Use biometrics where available.
Avoid clicking untrusted links; verify website authenticity.
Be alert to scams like remote access, romance, and lottery scams.
Securing Devices Against Cyber Threats
Protect devices from malware, hacking, and unauthorized control.
Regularly apply security patches and updates.
Use personal firewalls and anti-virus software; keep them updated.
Use trusted devices for sensitive transactions.
Avoid public Wi-Fi without a VPN.
Update or patch Internet of Things (IoT) devices; change default settings.
Turn off devices when sensitive conversations occur.
Safeguarding Data, Mail, and Online Shopping
Prevent data ransom, theft, and fraud during online activities.
Back up data to secure cloud storage.
Ensure websites are secure before online shopping.
Use trusted payment systems; avoid debit cards online.
Shop with reputable vendors.
Protect physical mail from theft, especially checks and credit cards.
Monitoring and Managing Credit and Accounts
Detect and respond to suspicious activity and potential identity theft.
Regularly monitor credit scores and account activity.
Check for suspect transactions, profile, and contact changes.
Review alerts and recent credit report updates.
Freeze credit if necessary; add or remove security freezes.
Retrieve PINs and give creditor access as needed.
Personal Security Checklist and Action Steps
Encouragement to proactively implement cybersecurity measures.
Recognize that cyber incidents are routine; act intentionally.
Make yourself a difficult target through proper defenses.
Partner with trusted firms for account protection.
Understand how to protect accounts, devices, and data.