CUNA News
  • LOG IN
  • Create Account
  • Sign Out
  • My Account
  • LOG IN
  • Create Account
  • Sign Out
  • My Account
  • Credit Union Magazine
    • Buyers' Guide
    • COVID-19
    • Digital Edition
    • Credit Union Hero
    • Credit Union Rock Star
    • Subscribe
    • Advertise
    • Contact
  • Advertise
  • Topics
    • Community Service
    • Compliance
    • Credit Union Hero
    • Credit Union Rock Star
    • Credit Union System
    • Directors
    • Human Resources
    • Leadership
    • Lending
    • Marketing
    • Operations
    • Policy & Issues
    • Sales & Service
    • Technology
  • Awards
    • Nominate Credit Union Hero
    • Nominate Credit Union Rock Star
  • Podcasts
  • Videos
  • Contact

News

Home » Identify security gaps with testing
Technology

Identify security gaps with testing

‘Purple team testing’ brings defenders and attackers together.

September 11, 2019
Bill Merrick
No Comments
09-11-19_SecuritySummit_116600

Peter Misurek, Royal Credit Union, explains how testing can identify security gaps during the CUNA Technology Security Summit Tuesday in Chicago.

Certain testing exercises can enable credit unions to gauge their internal controls, and find and fill their security gaps, according to two security experts.

Peter Misurek, information security engineer at Royal Credit Union in Eau Claire, Wis., and Dave Rebman, cybersecurity engineer at Alliant Credit Union in Chicago, addressed the CUNA Technology Council’s 6th Annual Security Summit Tuesday in Chicago.

They cited three types of testing exercises credit unions can employ to identify security gaps:

1. Blue team testing, where internal security personnel must react to simulated security attacks to provide insights into the credit union’s defensive capabilities.

2. Red team testing, where internal or third-party security professionals conduct targeted attacks on the credit union to test its security technologies and staff readiness.

These attacks can be something as simple as calling the credit union’s call center to obtain sensitive information or attempting to access a branch after hours, Rebman says.

Alliant, for example, conducts fake email campaigns each month to see how staff responds to phishing messages.

“Testing your defenses is very important,” Rebman says.

3. Purple team testing, or when defenders and attackers work together to identify vulnerabilities.

“This is more collaborative,” Misurek says, “and it’s more of a learning process. It brings people together instead of against each other.”

‘Testing your defenses is very important.’
Dave Rebman

Other highlights from the Security Summit included a panel discussion on identity and access management and roundtable discussions about information security issues facing credit unions.

The summit concludes Wednesday, followed by the start of the co-located CUNA Technology Council and CUNA Operations & Member Experience Council Conferences.

►Click here for more conference coverage from CUNA News, and get live updates on Twitter via @cumagazine, @CUNA_News, @CUNACouncils, and by using the #TechCouncil and #OMECouncil hashtags. Learn more about the CUNA Councils, a member-led professional society for credit union executives, at cunacouncils.org.

KEYWORDS CUNA Technology Council cybersecurity security

Post a comment to this article

Report Abusive Comment

Credit Union Magazine: Spring 2023

Spring 2023

Credit Union Magazine’s Spring 2023 issue features the 2023 Credit Union Heroes and examines CUNA-League advocacy priorities, board leadership, the impact of financial well-being efforts, fee-related compliance issues, predictions for the year ahead, and more.
Digital Edition •  Subscribe

Trending

  • Compliance: FinCEN issues issue BOI reporting guidance

  • Bill would establish ‘appropriate compliance timeline’ for section 1071

  • CUNA Mascot Madness: One semifinal set; Vote for the best in the West

Tweets by CUNA_News

Polls

CUNA Mascot Madness: Which South Region mascot is your favorite?

View Results
More

Champion for the Credit Union Movement

Credit Union National Association is the most influential financial services trade association and the only national association that advocates on behalf of all of America's credit unions. We work tirelessly to protect your best interests in Washington and all 50 states. We fuel your professional growth at every level and champion the credit union story at every turn.

More CUNA

  • Membership
  • Contact Us
  • Careers

Resources for

  • Credit Union Advocates
  • Leagues
  • Press
  • Providers

Our Affiliates

  • American Association of Credit Union Leagues (AACUL)
  • Credit Union Awareness
  • Credit Union House
  • CUNA Strategic Services
  • National Credit Union Foundation
GET CUNA UPDATES
© 2023 Credit Union National Association | ADA Compliance Notice & Legal
Email Us