Author Archives: RESULTS Technology

Vulnerability and Patch Management for Community Banks: What Examiners Expect

professional meeting to review bank patch management process

Quick Answer: Vulnerability management and patch management are related but distinct disciplines: vulnerability management identifies and prioritizes weaknesses across a bank’s systems, while patch management is the process of actually applying the fixes. Patch management doesn’t get the same attention as firewalls, MFA, or incident response plans, but examiners treat it as a core pillar […]

Before Your Bank Turns On Copilot: How to Clean Up SharePoint, Teams, and OneDrive Permissions

red and white bank buildings representing Copilot data security

Quick Answer: Microsoft 365 Copilot doesn’t create its own access model—it surfaces and summarizes whatever a user can already see across SharePoint, Teams, and OneDrive. That’s good news from a security-boundary standpoint, but it means any existing permission problems become instantly more visible and more exploitable the moment Copilot is turned on.  Most community banks […]

Why Free Cybersecurity “Audits” May Not Be True Audits for Community Banks

men working at desks on bank cybersecurity audit

Quick Answer: Many “free” or low-cost cybersecurity audits offered to banks today are actually vulnerability scans, not audits. A scan uses automated tools to flag technical weaknesses; a true audit involves a human expert evaluating whether your bank’s overall security program is actually working. If a bank relies on a free scan believing it received […]

How Corporate Account Takeover (CATO) Works and How Community Banks Can Stop It

password-login-on-computer-screen with phishing-resistant MFA

Quick answer: Corporate Account Takeover (CATO) is a type of bank fraud where attackers use stolen or compromised credentials to gain direct access to business accounts. Unlike scams that rely on tricking employees, CATO gives attackers real account access. Prevention requires multi-factor authentication, active account monitoring, and a clear incident response plan. Corporate account takeover […]

Phishing-Resistant MFA for Banks: Where It Matters Most

bank employee using phone for mfa to enhance banking cybersecurity

Quick answer: Phishing-resistant MFA uses cryptographic methods, such as FIDO2 security keys and WebAuthn, to verify identity without any codes a user has to read or approve. For community banks, the highest-priority deployments are privileged access, remote access, and cloud-based platforms like Microsoft 365. Most community banks already have some form of multi-factor authentication in […]

DDoS Attacks on Community Banks: What They Are and How to Defend Against Them

block letters about how to stop DDOS attacks

Quick answer: A DDoS attack can take a community bank completely offline. Attackers flood your systems with illegitimate traffic until real users can’t get through, knocking out online banking, bill pay, and sometimes internal systems. Outages can last minutes or hours depending on the scale of the attack and the defenses in place. Community banks […]

How to Build a Threat Intelligence Program for Your Community Bank

build a cyber threat intelligence program at your community bank

Quick answer: A cyber threat intelligence program for community banks is a structured process for collecting, analyzing, and acting on information about cyber threats before they cause harm. It requires four core elements: trusted sources, a distribution channel, a prioritization process, and an action process. Most small banks can run one without a dedicated security […]

What Should Community Banks Use Now That the FFIEC CAT Tool Is Gone?

cybersecurity assessment tool for banking

Quick answer: The FFIEC retired the Cybersecurity Assessment Tool (CAT) on August 31, 2025, and did not replace it with an equivalent. Community banks should now choose from FFIEC-recognized alternatives: NIST CSF 2.0, CISA Cybersecurity Performance Goals, the CRI Cyber Profile, or CIS Controls guided by their size, risk profile, and examiner expectations. If your […]

RESULTS Technology Ranked on 2026 MSP 501—Tech Industry’s Most Prestigious List of Global Managed Service Providers

RESULTS Technology ranks as top Managed IT Service Provider in Kansas. JULY 7, 2026: RESULTS Technology has earned a coveted spot among the world’s elite managed service providers, securing recognition on the 2026 MSP 501—the technology industry’s most rigorous and respected ranking of MSP excellence.  In a year marked by unprecedented competition and rapid industry […]

What Is Identity Threat Detection & Response (ITDR) and Why Community Banks Need It Now

professional colleagues talk in a modern office

Quick answer: Identity Threat Detection and Response (ITDR) is a cybersecurity approach focused on spotting and stopping the misuse of user identities, like stolen passwords or hijacked admin accounts. For community banks, ITDR matters because attackers increasingly log in with legitimate credentials instead of breaking down digital doors. Most cyberattacks today don’t look like attacks […]