Threat Intelligence, Phishing Testing, and Monitoring

Protect your company from cyber attacks

Cyber threats are constantly evolving, so it’s important to stay on top of new threats and address them as quickly as possible. We provide cyber alerts and ongoing monitoring to help protect your company from cyber attacks. We also offer phishing testing and monitoring services to protect your business.

CONNECT WITH US


CONNECT WITH US


Our solutions

Phishing Testing and Training

One of the simplest ways a hacker can penetrate your network is via email using a tactic called phishing, or, in a targeted effort, spear-phishing.  Successful phishing, vishing (telephone-based phishing), and spearphishing can lead to ransomware, payment fraud, and other cyber crimes. The FBI has reported that people lost $57 million to phishing schemes in 2019.

We deploy targeted email campaigns that are designed to test your employee’s ability to identify phishing threats. We use the results of our phishing tests as part of our staff security training, which covers phishing identification and other essential skills and tools for identifying threats and preventing data breaches.

We periodically issue timely alerts on cyber events and technology concerns that may be relevant to your business. Our alerts provide strategic guidance to help you protect your company and understand how to best prevent or remediate issues.

Subscribe to receive our cyber alerts

Domain Registration Monitoring & Paste Site Monitoring

Over 100,000 domains are registered every day, many for malicious purposes. We monitor newly registered domain names and alert you when a domain name that resembles your firm’s domain is registered so that your firm can take action to combat attempts to steal sensitive information or infringe on your firm’s intellectual property.

Hackers often post sensitive data about their victims or targets on anonymous paste sites to share with the broader hacker community. We monitor select anonymous paste sites for mentions of your firm’s domain or IP addresses, as these could be indicators of an upcoming or ongoing attack.

1 of
Solution Spotlight

Aponix Protect™ comprehensive cybersecurity and technology risk solution

Aponix Protect helps firms address evolving cyber risks and threats to ensure that their cybersecurity needs are covered year-round. This solution is available in three tiers, each one designed to provide firms with a flexible, robust, responsive, and cost-effective cybersecurity program. 

Latest insights

ACA Threat Intelligence Alert Blog Image

SEC OCIE Warns of Increased Risk of Credential Stuffing

The SEC OCIE has issued an alert warning of an increase in the use of the “credential stuffing” tactic in attacks against SEC registrants, including broker-dealers, investment advisers, and investment companies. Credential stuffing can significantly increase financial, regulatory, legal, and reputational risk to firms and OCIE has made recommendations for protecting client accounts.

Cyber Alert
  • Cybersecurity
  • Phishing
ACA Threat Intelligence Alert Blog Image

FINRA Warns of Fake Agency Website

FINRA issued an alert regarding the appearance of a fake website purporting to be from the authority. The fake website uses the domain “finnra.org” in which the letter “n” appears twice.

Cyber Alert
  • Cybersecurity
  • Phishing
2020 NSCP Aponix Survey

Highlights from the 2020 NSCP / ACA Aponix Cybersecurity Compliance Programs Survey

Benchmarking your firm’s cybersecurity program against those of your peers is a smart way to identify the compliance gaps your firm should address. Here are the results of the 2020 NSCP / ACA Aponix Cybersecurity Compliance Programs Survey.

Survey
  • Cybersecurity
cyber code

Is It Time to Reset Your Password Reset Policy?

Many authorities are questioning whether mandatory password reset policies are worth the hassle. Get ACA's guidance on when, if ever, you can remove or relax your password reset policy.

Article
  • Cybersecurity
tprm vmos

Third-Party Risk Management: Collaborating for Results

Running vendor management or third-party risk management (TPRM) programs can be a complicated process for both consumers and providers of services. Here are some of the current challenges with due diligence and opportunities to improve the process for all parties involved.

Article
  • Cybersecurity
abstract image with a lock and shield

Critical Vulnerability Identified in Windows Servers

The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert identifying a critical vulnerability affecting all versions of Microsoft® Windows Server® configured with the Domain Name System (DNS) role enabled. The vulnerability could potentially allow a remote attacker to gain control of affected systems.

Cyber Alert
  • Cybersecurity

News

ACA Mirabella Celebrates Ninth Consecutive Year of Success at With Intelligence HFM European Services Awards

We are proud to announce we have secured victory in three prestigious categories at the With Intelligence HFM European Services Awards.

ACA Announces Expansion of the Executive Leadership Team with Key Appointments

ACA Group announces the addition of two distinguished professionals to its executive leadership team, Jaime Klein as Chief Human Resources Officer and Alex Fischer as General Counsel.

Highlights From the 2024 ACA Conference

As the curtains close on the 2024 ACA Conference, the echoes of transformative dialogue and insightful revelations resonate, shaping the trajectory of GRC in financial services.

Upcoming events

Wealth Management EDGE

Join the ACA Wealth and ACA Foreside teams in Hollywood, FL at the Wealth Management EDGE Conference.

Conference

2024 FINRA Annual Conference

Meet-up with ACA's team at the FINRA Annual Conference, FINRA’s premier event which provides the opportunity for practitioners, peers and regulators to exchange ideas on today’s most timely compliance and regulatory topics.

Conference