The approach to cybersecurity at the Federal Reserve Bank of Boston, a financial institution that is part of the central bank of the United States, is two-fold: Start with a solid foundation, but remain adaptable as technology evolves.
Or at least that’s how Zarina Nip, an associate cyber security analyst, would describe it.
“The advantage of working on a relatively new service like FedNow is we can build security in from the start, rather than retrofit it,” Nip said of the instant payment infrastructure. “So, security was integrated into the bones of our development.”
Despite this strong security base, Nip said that staying agile is critical for any cybersecurity team — now more than ever
“The rapid pace of technological change – especially AI – can bring opportunities and challenges for our team,” Nip said. “We need to make sure guardrails are in place but don’t hinder development of new products and services.”
Cybersecurity threats are increasing, and the U.S. Deputy National Security Advisor for cyber and emerging technologies said that cybercrimes will come with a $23-trillion price tag in 2027.
Want to learn more about how the cybersecurity team at the Boston Fed stays resilient in a changing threat environment? Built In spoke with Nip about her team’s best practices for protecting company growth, customer trust and operational resilience as threats and compliance needs evolve.
As part of the central bank of the United States, the Federal Reserve Bank of Boston works to promote sound growth and financial stability in New England and the nation.
What’s it like to work on the cybersecurity team at your company?
When I started about a year ago, it was a firehose of information. But the team helped me focus on what I needed to know so I could learn it quickly.
We have a startup mentality whenever our security team supports a newer service. We work to take advantage of cutting-edge technology, but we also have the advantage of being part of a larger organization. This lets us embrace agile, innovative approaches while benefitting from the resources and expertise within the Federal Reserve.
What is it like to work on a cybersecurity team at Federal Reserve Bank of Boston
“We have a startup mentality whenever our security team supports a newer service. We work to take advantage of cutting-edge technology, but we also have the advantage of being part of a larger organization. This lets us embrace agile, innovative approaches while benefitting from the resources and expertise within the Federal Reserve.”
— Zarina Nip, Associate Cyber Security Analyst
How does your team help the company stay resilient as security risks change?
The advantage of working on a relatively new service like FedNow is we can build security in from the start, rather than retrofit it. So, security was integrated into the bones of our development. And as we build more processes, security is prioritized every step of the way.
It’s a proactive approach and it means that as new features and capabilities are developed, our team isn't a checkpoint to pass, it's a partner throughout the process. We help the organization adapt to new risks, rules and regulations.
This adaptability is essential in an environment of evolving threats, technologies and requirements. Our ability to integrate security seamlessly into FedNow’s development helps us maintain resilience without slowing innovation.
What should candidates know about the impact cybersecurity has on your company’s growth or customer trust?
Our service is new and we want to gain customer trust, so it’s critical to integrate cybersecurity every step of the way. The rapid pace of technological change — especially AI — can bring opportunities and challenges for our team. We need to make sure guardrails are in place but don’t hinder development of new products and services. Technology can be good and bad. It might enhance the abilities of bad actors, but it also gives us better tools to address risk.
Cyberthreats change daily and customer expectations continue to rise. So, our approach to integrate security from the start allows us to protect not just systems and data, it also builds the trust that underpins the entire financial system.
