Protecting Our Communities' Financial Futures
This training is designed specifically for Native CDFIs. Cybersecurity isn't just about technology; it's about upholding the sacred trust placed in us by our communities. We are the guardians of our people's financial data and economic sovereignty. This guide will provide an interactive path to understanding threats and building a strong, resilient defense.
The Modern Cyber-Threat Landscape
The digital world presents unique challenges. Below are the most common threats your CDFI may face. Click each one to learn how to spot it.
Select a threat above to see the details.
The Five Pillars of a Strong Cyber Defense
We can build our defense using the nationally recognized NIST Cybersecurity Framework. It provides a complete approach to managing risk. Click on any pillar in the chart below to learn the specific actions you can take.
Your Defense Framework
This framework provides a holistic view of managing cybersecurity risk. The five pillars represent the full lifecycle of a potential incident, from preparation to recovery.
Building a Cyber-Aware Culture
Technology is only one part of our defense. Our people are our "human firewall," and fostering a culture of awareness is our greatest strength.
Ongoing Training
Cybersecurity isn't a one-time event. Provide regular training, updates, and reminders to keep awareness high for all staff members.
Storytelling
Share real-world examples and stories of cyber threats. This powerful, culturally relevant teaching method makes risks tangible and lessons memorable.
See Something, Say Something
Create a safe environment where employees feel comfortable reporting suspicious activity immediately, without fear of blame or repercussion.
Lead by Example
Leadership must actively champion cybersecurity. When leaders follow security protocols diligently, it sets the standard for the entire organization.
Your Action Plan And Resources
You are not alone on this journey. Use these resources and next steps to begin strengthening your defenses today.
Your Next Steps
-
1
Start the Conversation: Discuss cybersecurity at your next staff meeting using this tool as a guide.
-
2
Take the First Step: Pick one action item from the "Protect" pillar and implement it this week.
-
3
Develop a Plan: Use the NIST Framework to begin outlining a long-term cybersecurity plan for your CDFI.
Infographics
-
1
Email Security: https://cdfi.freestate.photography/EmailSecurity.html
-
2
Malvertising: https://cdfi.freestate.photography/Malvertising.html
-
3
Social Engineering: https://cdfi.freestate.photography/SocialEngineering.html