Introduction Beginning an internship in cybersecurity at Tower Federal Credit Union has opened my eyes to the real-world aspects of protecting digital environments. The purpose of this paper is to provide an overview of the dynamic field of information security by sharing the worthwhile experiences, difficulties, and lessons I encountered during my internship. Through…
Inter-Office Memorandum
Date: August 22, 2023 To: Nicholas Malley, Intern Through: Phil Mellinger, VP/Director Information Security & Information Security Officer From: Craig White, AVP Information Security Subject: Internship Report (June 22, 2023 to August 23, 2023) This report provides a summary of the internship of Nicholas Malley. During his internship at Tower, Nicholas Malley’s…
API Security Standard
Standard for API Security This document establishes the requirements for Application Programming Interface (API) Security, assuring connection of services and transference of data within Tower Federal Credit Union remains absolute and confidential.
Incident Response Summary
Incident Report Summary – IMSI Vendor Compromise This report reviews events associated the ransomware attack against Tower third-party vendor IMSI that holds sensitive information of several members and employees of Tower, specifically 70,000 credit cards. IMSI’s cloud provider, IMS Cloud, was subject to a ransomware attack. There is no evidence that data was ex-filtrated from…
Reflection Paper 6
Nicholas Malley CYSE 368 18 November 2023 Reflection 6 During the last two weeks of my internship for Tower Federal Credit Union’s information security department I continued to work and aid the SOC desk. During the last week I also got the privilege of going to TFCU’s data center and assisting my coworker Andrew…
Reflection Paper 5
Nicholas Malley CYSE 368 18 November 2023 Reflection 5 During the fifth week of my internship for Tower Federal Credit Union’s information security department I continued to work on the incident response summary report. Throughout the week more information was revealed to TFCU regarding the ransomware attack on IMSI’s cloud provider. Specifically, IMSI hosted…
Reflection Paper 4
Nicholas Malley CYSE 368 17 November 2023 Reflection 4 During the fourth week of my internship for Tower Federal Credit Union’s information security department I was assigned to write an incident response summary report of a third-party vendor cyber-attack. IMSI, Tower Federal Credit Union third party vendor that holds sensitive information of Tower Federal…
Reflection Paper 3
Nicholas Malley CYSE 368 6 November 2023 Reflection 3 During the third week of my internship for Tower Federal Credit Union’s information security department, I began to make corrections to my playbooks. As I gathered more information and knowledge of the different processes and began to see different directions I can go with the…
Reflection Paper 2
Nicholas Malley CYSE 368 19 October 2023 Reflection 2 During the second week of my internship for Tower Federal Credit Union’s information security department, I was assigned the task of creating playbooks for the different operations and processes of our department. The project specifically aimed to heighten my understanding of the different programs used…