The Cybersecurity & Payments AI Project Team (formerly known as the Cybersecurity Response Project Team) develops tools and resources to help organizations understand evolving threats related to potential cyberattacks. The team will also be focusing on artificial intelligence.

Most Recent Update

The Project Team has released a new resource, Let’s Talk Turkey, designed to help consumers recognize and avoid common mobile device scams. This easy-to-follow guide covers key tactics used by fraudsters, including suspicious texts, calls from unknown numbers, and impersonation of law enforcement or government officials.

October 2024 Update

In recognition of Cybersecurity Awareness Month, the team released new materials focused on protecting consumers from AI-based scams, such as deepfakes and voice cloning. These sophisticated frauds are becoming more common, with criminals using AI to impersonate trusted sources and request money or access to financial accounts. Payments and Artificial Intelligence: Protecting Yourself Against AI-based Scams provides essential tips for securing accounts and data before being targeted, as well as guidance on what to do if you are approached or victimized by an AI-based scam. Did You Know? There are Two General Categories for Defining Artificial Intelligence explains the different opportunities and challenges presented by generative and predictive AI. 

July 2024 Update

The project team developed a Business Email Compromise Response Action Plan, a comprehensive guide providing invaluable insights for companies impacted by business email compromise (BEC) and offering proactive steps to prevent such incidents.

May 2024 Update

The project team released the Security Incident Response Procedure Guide for Companies, a free tool to help organizations address suspected data breaches. The Guide provides steps for evaluating incidents and determining necessary notifications to stakeholders, including customers and regulators. Emphasizing the importance of a prompt response, it offers time-sensitive actions to mitigate breach impacts and costs. The document can be tailored to fit specific organizational needs and integrated into comprehensive disaster recovery and incident response plans.

2023 Update

As part of the Alliance’s Cybersecurity Awareness Month activities, the project team released a new tabletop exercise to help small to medium-sized businesses prepare for a cyberattack. The exercise is being offered as part of the Alliance’s Cybersecurity Awareness Month activities.

The objectives of the tabletop exercise are to increase organizational preparedness, response, and recovery efforts related to cyberattacks, advance the understanding of management and key internal and external stakeholders, provide actionable approaches for leadership to direct and bolster the organization’s resilience and identify enhancements requiring attention from company leadership. The exercise also establishes a framework for compliance by fostering understanding of the laws, regulations and rules that apply, making it easier for participating companies to implement programs that can address the company’s obligations.

The kit includes the Tabletop Exercise Leader’s Guide for facilitators, which covers planning, conducting, and evaluating the exercise and responses, providing a framework that can be adaptable to a variety of cybersecurity threats.  It also includes a Cybersecurity Scenario, containing a set of facts for the exercise, which can be customized by the company as appropriate, a Participant Workbook for capturing notes during the exercise and a Leader’s Guide for Evaluating the Tabletop Scenario. The initial exercise focuses on ransomware, with additional scenarios being released in the coming months.

Cybersecurity Tabletop Exercise for Small to Medium-Sized Businesses

Additional Resources

COVID-19 Best Fraud Protection and Cybersecurity Practices