354 articles · page 18 of 18
Week of 6 April 2020
Paycheck Protection: capital was easy, intake was hard
When the Paycheck Protection Program opened on April 3, 2020, the guarantee and the Fed facility solved funding. Lenders’ capacity was set instead by intake, verification and submission to SBA, and by how fast they could redeploy staff into a standardized process.
Week of 30 March 2020
Hospitals without walls still had to say where the care happened
CMS’s March 30, 2020, waivers let care move to new sites, new staff and video. Every claim and record still had to state where, by whom and how, and the systems that captured those facts had assumed the old answers.
Week of 23 March 2020
Forbearance on request: what the CARES Act asked of loan servicers
The CARES Act gave borrowers with federally backed mortgages forbearance on request and told lenders how to report accommodated accounts. Servicing built for case-by-case exceptions had to run intake, credit reporting and exit planning at volume, mostly from home.
Week of 16 March 2020
Hairpin traffic, distant data centers and the road to federal zero trust
When OMB told agencies to maximize telework, the binding constraint was a network design that sent remote traffic back through agency data centers and Trusted Internet Connections. Fixing it pushed federal security from location toward identity and device.
Week of 9 March 2020
Interoperability rules sent patient data beyond HIPAA’s reach
The ONC and CMS rules of March 9, 2020, prohibited information blocking and required standardized patient APIs. Together they moved patient data, at patients’ direction, into apps HIPAA does not cover, so health systems had to govern flows they could no longer refuse.
Week of 2 March 2020
Why the FFIEC’s pandemic statement was an evidence checklist
The FFIEC’s March 6, 2020, statement restated pandemic expectations from the avian flu era. Its value lay in what examiners would later ask institutions to show: staged decisions, critical operations run with fewer people, and service providers coping with the same disruption.
Week of 24 February 2020
Buildings intact, workforce gone: the scenario continuity plans skipped
As markets fell and federal health officials warned of community spread, most continuity plans still assumed the loss of a building. A pandemic removes people, suppliers and remote capacity at once, and plans had to be rebuilt and tested around those three losses.
Week of 17 February 2020
Morgan Stanley and E*Trade: wealth scale is a client-data problem
Morgan Stanley’s deal for E*Trade, months after Schwab agreed to buy TD Ameritrade, bet on joining self-directed, advised and workplace channels. Whether such scale pays depends on three layers of integration, and the client layer comes first for firms of any size.
Week of 10 February 2020
What the Equifax indictment changed for banks, and what it did not
The Justice Department charged four Chinese military officers over the 2017 Equifax breach. For banks, the indictment settled who did it and changed nothing that mattered operationally: the data stayed exposed, the entry point stayed ordinary and accountability stayed with the data holder.
Week of 3 February 2020
Iowa’s caucus app failed at rollout before it failed in code
The Iowa Democratic caucus app had a coding error, but the public failure came from hard installation, untrained users and a fallback phone line nobody had sized. Every agency launch carries the same three operational risks.
Week of 27 January 2020
A 90-day declaration that ran for three years
The federal public health emergency declared on January 31, 2020, looked like a precaution. Other authorities, new laws and agency systems came to depend on it, so agencies needed to track what rested on it from the start, not when it ended.
Week of 20 January 2020
Citrix gateways: the most exposed system in the hospital
The Citrix flaw exploited in January 2020 showed that the gateway clinicians used to reach the EHR from outside was a hospital’s most exposed system. Hardening it meant ownership, segmentation behind it and a hunt after every patch.
Week of 13 January 2020
Why a Windows crypto patch was an asset inventory test
CISA gave agencies ten business days to patch a Windows cryptographic flaw, on the day Windows 7 support ended. Applying the fix was the easy step. Knowing which systems needed it, who owned them and how to prove it was the hard one.
Week of 6 January 2020
Travelex’s outage was every white-label bank’s outage
When ransomware took Travelex offline, banks that sold its travel money under their own brands had no service and little to say. White-label dependencies carry the bank’s reputation, so they need the bank’s controls: communication, contract terms and concentration planning.