SERVUS CREDIT UNION
DIGITAL REPORT 2020
Servus Credit Union: the changing landscape of cybersecurity IN ASSOCIATION WITH
02
Servus Credit Union: the changing landscape of cybersecurity
03
w w w.se r vus. ca / life
SERVUS CREDIT UNION
Jakub Mamos, Vice President of IS Risk Management at Servus Credit Union, discusses the evolution of cybersecurity and the adoption of innovative technology
J
akub Mamos has always been intrigued by both the security and technology spaces, especially where the two connect.
“I was always fascinated by computers, encryption 04
algorithms and cryptography in general, as well as the overall concept of security. I started my career working for a utility company in data security, working on systems that were still connected to mainframes. I have been very fortunate to work with very smart people within the industry, who helped me to combine technology and security in a meaningful and productive way. Over the years I have progressed from security analyst to security architect, through to private consulting, working for construction and financial companies,� says Mamos. Today, Mamos is the Vice President of IS Risk Management at Servus Credit Union, which he has been working for since 2011 with responsibilities including operating information risk management, cybersecurity, change management and disaster recovery.
05
w w w.se r vus. ca / life
SERVUS CREDIT UNION
Servus Credit Union: The Servus Origin Story CLICK TO WATCH
|
1:10
06
Servus Credit Union is a member-
good credit score, or to help financial
owned and community-based financial
businesses maintain security,” he adds.
institution which dates back to 1938.
Since joining the company nine years
“Servus Credit Union’s primary concern
ago, Mamos has seen the institution
is making sure its members are taken
go through several mergers, consoli-
care of and receive excellent financial
dating its operations in order to be as
products and services, as well as
effective and efficient as possible
committing to sustainability and giving
while maintaining its core mission
back to the community,” says Mamos.
and service to its members. “Over the
“Our vision is to ‘shape member finan-
years we have grown – when I started
cial fitness’, which can be applied in
we had just under $10bn of financial
multiple ways, be it to help people stay
assets, now we have over $16.3bn with
financially fit in terms of planning for
400,000 members, which we plan to
the future, saving and maintaining a
double in the next few years. We have
also evolved new initiatives in regards to innovative technology to provide the most value for our members.” Within the industry, Mamos has seen cybersecurity evolve many times over the years. “When I started in the industry, the primary focuses were internal matters such as file security, email security and spam. Compare that to today, where we have advanced levels of criminal activity such as phishing, fraudulent transactions and taking over accounts. Therefore it is important for organisations to remember that, while
“ Our purpose is to ‘shape member financial fitness’, which can be applied in multiple ways” — Jakub Mamos, Vice President IS Risk Management, Servus Credit Union
E XE CU T I VE PRO FI LE
Jakub Mamos Jakub Mamos is the Vice-President IS Risk Management with Servus Credit Union, and a passionate security practitioner. Jakub has worked in both the physical and information realms of the security industry for over 25 years. His leadership roles in the security space include stints in various industries, including utilities, consulting, non-forprofit, government and financial services. Jakub received his BA in Sociology and Political Science in 1998 and Master of Information Systems Security Management from Concordia University as a member of the first graduating class in 2007, and has held his CISSP designation since 2003.
w w w.se r vus. ca / life
07
1
hm
86
gk
8 04
lo na
8k kd
gjk
d
6e
2 3u
d nf
n
o
g
h0 j i r
w
rie
o rjg
8
4 10
6 t5
d fk e
n djg r
g
d jgo
fk
YOUR APPS ARE EVERYWHERE. YOUR APP SECURITY SHOULD BE, TOO.
y u0
9
k fg
k fg
t5
n djg
na
7
r
m mh
9 86
3 lo9
9 alo
3
u
u
o 0y
m 2r
r u2
m
r
h
0 ijh
0 m1
1 hm
04
ie wr
48
6 t5
5 8t
6e
e
n djg
n g j d
g
g
Your apps’ data—usernames, passwords, business development plans, IP—is your business’s most valuable asset. It’s valuable to attackers, too. Today’s fast-evolving threats often evade traditional defenses. Protect your data and your business—think app security first. Protect your business ›
“ When I started we had just under$10bn of financial assets, now we have over $16.3bn with 400,000 members, which we plan to double in the next few years” — Jakub Mamos, Vice President IS Risk Management, Servus Credit Union
money around, and while this is a positive for customers, it is important to be responsive in an innovative way to combat criminals and ensure that interconnectivity remains a positive.” To enhance cybersecurity within its own operations, Mamos explains the importance of of data for the company.. “If you don’t know, then you can’t respond. At Servus Credit Union we are heavily investing in data gathering, monitoring, analysis and automation. We are using a combination of machine learning, artificial intelligence, data analytics, advanced analytics and predictive analytics to detect anomalies and stay
everybody wants to deliver innova-
ahead of potential threats.”
tions and provide their customers and
However, Mamos highlights that
members the best experience as fast
within the world of technology, people
as possible, companies need to ensure
tend to focus on the ‘coolest’ or ‘lat-
that securing those innovations isn’t
est’ technology, sometimes forgetting
overlooked,” says Mamos.
about the principles. “It’s not that we
Other challenges within cybersecu-
don’t use innovative technology, but
rity that Mamos has faced include the
perhaps it is better to call it innovative
lack of borders with digital clients:
approaches. Being able to be respon-
“If you wanted to rob a bank you would
sive is something that in this space is
have to physically be there in order to
unfortunately not a common occur-
execute a robbery. With the intercon-
rence. It is important to go back to
nectivity of different countries and
basics to ensure that the simple things
jurisdictions it’s much easier to move
are in place to build a strong foundation w w w.se r vus. ca / life
09
SERVUS CREDIT UNION
10
“ If you don’t know, then you can’t respond. At Servus Credit Union we are heavily investing in data gathering, monitoring, analysis and automation” — Jakub Mamos, Vice President IS Risk Management, Servus Credit Union
for digital transformation.” In addition to this approach, Mamos states that Servus Credit Union is working to truly integrate security within every aspect of the organisation, as well as authenticating all internal communications. “It’s more than just an add on - security provides value in ways that people may not have originally thought. Security technology monitors for potential anomalies in vast amounts of data, and sometimes anomalies are not always security related. Sometime the analysis w w w.se r vus. ca / life
11
WE GET CYBERATTACKS CAN HAPPEN ANYWHERE. CDW can help you stay protected no matter where your employees are working from. Our specialists can help you determine a comprehensive and secure plan by identifying risk and building a solution to ensure your remote workforce is securely enabled to conduct business.
Learn more at CDW.ca or by contacting your CDW account team at 587.441.5156
of data can lead to business opportunities, adding more than just assurance and security to a business.” When it comes to security management, Mamos highlights the importance of managing the ‘human element’ of cybersecurity. “In our environment, security is people, process and technology, and they all have to work in unison. No matter how good your process and your technology is, you need to invest in people in order to see the biggest value. Which is why we invest in education, working with people and explaining the purpose of a new
process or technology to increase the
Big Data, data analytics, machine
effectiveness of our security.”
learning and artificial intelligence are
Key trends Mamos is seeing within
really important. Data governance is
data analytics, Big Data and data gov-
the same in terms of maintaining data,
ernance are the increases in pragmatic
managing it and providing direction in
approaches. “In today’s economic
order to enable business disruption,
climate you have to be able to show the
while ensuring you are compliant with
value. We have been entrusted with all
rules and regulations.”
that data to make security decisions
When reflecting on the organisa-
and offer protection, so we need to
tion’s operations, Mamos highlights
look beyond assurance, protection and
that he is “very fortunate to have a
security, to look at how we can utilise
core group of partners that I can rely
it even further. Which I think is where
on no matter what. Our partners are an important part of our operations to drive innovation and success.” When forming these partnerships Mamos explains that, although it’s a simplistic approach, he looks for companies that “treat people how they want to be treated. “I am very transparent and direct with our partners while maintaining ethics,” he says. Accordingly, Mamos believes that Servus Credit Union’s biggest strengths are “being a diverse, member owned organisation.”
w w w.se r vus. ca / life
13
DIGITAL REPORT 2020 www.servus.ca/life
P0WERED BY