CSBS BAI Course Catalog

Cyber Scenario: Insecure APIs 15 minutes This brief, scenario-based course walks learners through an insecure application programming interface (API) attack on a financial institution with the opportunity to make key decisions throughout the attack and intervention methods. Aimed at IT/IS leadership and staff and the C-suite team, this course provides information on how to recognize, address, and avoid API attacks. 15 minutes Aimed at information security and IT managers and staff, this brief, scenario-based courses takes learners through an email phishing attack on a financial institution, with key decision points where they must decide how to proceed to monitor and mitigate the attack. 15 minutes This scenario-based course takes learners through a series of suspicious emails that may or may not involve phishing and asks them to decide how to respond in each case. Aimed at all financial institution employees, the scenarios help learners recognize characteristics of phishing attacks, avoid them, and take the rights steps if they're a victim of such an attack at work. 10 minutes This brief, scenario-based course looks at a financial institution's role in assisting a client who has been the victim of a ransomware attack, with key decision points where learners must decide the best way to proceed. Aimed at frontline employees and relationship managers, the course looks at issues of spotting red flags, eliciting more information from clients, and providing guidance in mitigating and preventing ransomware attacks. 25 minutes If you don't know how to protect yourself, cybercrime can cost your institution millions of dollars each year. Upon completion of this course, you will be able to explain how the cybercrime black market operates and just how much cybercrime can affect an organization's bottom line. In addition, you will recognize how sensitive information is compromised and identify specific ways to protect yourself and your organization. 20 minutes This course, intended for all employees, provides an overview of common computer threats, like malware, and identifies basic security precautions that can be taken to combat these risks, including how to protect computers and choose strong passwords. 10 minutes This mini course provides an overview of the final rule on computer-security incident notification requirements for banking organizations and their bank service providers. 15 minutes This course, intended for all employees, provides an overview of common social engineering tactics, including phishing email scams, and highlights best practices for combatting these attacks and protecting sensitive information. 20 minutes This course, intended for all employees, provides an overview of the unique threats presented by social media sites for both users and financial institutions and identifies best practices for protecting sensitive and personal information. Cyber Scenario: IT’s Response to a Phishing Attack Cyber Scenario: Phishing Attacks on Financial Institution Employees Cyber Scenario: Ransomware and Financial Institution Clients Cybercrime Essentials for Financial Institutions Cybersecurity: Computer Security Basics Cybersecurity Incident Notification Requirements Cybersecurity: Phishing and Social Engineering Cybersecurity: Social Media Security

67