FFIEC Bank & Credit Union Compliance Help presented by Safe Systems – Compliance Guru http://www.complianceguru.com Keeping Financial Institutions Informed Wed, 22 Feb 2012 22:20:42 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 The single most important vendor management control http://www.complianceguru.com/2012/02/single-most-important-control-in-the-outsorcing-process/ http://www.complianceguru.com/2012/02/single-most-important-control-in-the-outsorcing-process/#comments Wed, 22 Feb 2012 19:59:42 +0000 Tom http://www.complianceguru.com/?p=2600 Pop quiz…according to the FFIEC Handbook on Outsourcing Technology Services…

“The ________ is the single most important control in the outsourcing process”:

  1. Initial due diligence process
  2. Review of third-party
    3. …
    Read the rest of the article
]]> http://www.complianceguru.com/2012/02/single-most-important-control-in-the-outsorcing-process/feed/ 0 FDIC changing annual IT report to Board? http://www.complianceguru.com/2012/02/fdic-changing-annual-it-report-to-board/ http://www.complianceguru.com/2012/02/fdic-changing-annual-it-report-to-board/#comments Thu, 16 Feb 2012 16:26:46 +0000 Tom http://www.complianceguru.com/?p=2581 Based on recent examination findings, it would appear that the FDIC is changing what they expect to see in the annual information security report to the Board of Directors.  The …
Read the rest of the article

]]> http://www.complianceguru.com/2012/02/fdic-changing-annual-it-report-to-board/feed/ 0 NIST releases new Cloud Computing Guidelines http://www.complianceguru.com/2012/02/nist-releases-new-cloud-computing-guidelines/ http://www.complianceguru.com/2012/02/nist-releases-new-cloud-computing-guidelines/#comments Mon, 06 Feb 2012 20:56:21 +0000 Tom http://www.complianceguru.com/?p=2542 Although not specific to the financial industry, the new guidelines provide a comprehensive overview of the privacy and security challenges of this increasingly popular computing model.  It’s worth a look …
Read the rest of the article

]]> http://www.complianceguru.com/2012/02/nist-releases-new-cloud-computing-guidelines/feed/ 0 Bank Directors and Officers targeted in 2011 http://www.complianceguru.com/2012/01/bank-directors-and-officers-targeted-in-2011/ http://www.complianceguru.com/2012/01/bank-directors-and-officers-targeted-in-2011/#comments Wed, 25 Jan 2012 17:31:16 +0000 Tom http://www.complianceguru.com/?p=2520 The final numbers are in for 2011, and it was a record year for Director and Officer (D&O) lawsuits by the FDIC.  In 2011 alone, 264 defendants were named in …
Read the rest of the article

]]> http://www.complianceguru.com/2012/01/bank-directors-and-officers-targeted-in-2011/feed/ 0 2012 Compliance Trends, Part 5 – Uncertainty (UPDATE) http://www.complianceguru.com/2012/01/2012-compliance-trends-part-5-uncertainty/ http://www.complianceguru.com/2012/01/2012-compliance-trends-part-5-uncertainty/#comments Mon, 16 Jan 2012 19:05:49 +0000 Tom http://www.complianceguru.com/?p=2465 Similar to my previous post on Risk Assessments, I believe Uncertainty is also a 2-part trend:

- Uncertainty about future regulatory changes, and
- Uncertainty about the interpretation of existing …
Read the rest of the article

]]> http://www.complianceguru.com/2012/01/2012-compliance-trends-part-5-uncertainty/feed/ 0 Another incident management table-top training exercise http://www.complianceguru.com/2012/01/another-incident-management-table-top-training-exercise/ http://www.complianceguru.com/2012/01/another-incident-management-table-top-training-exercise/#comments Mon, 09 Jan 2012 22:22:02 +0000 Tom http://www.complianceguru.com/?p=2455 I’ve mentioned before that financial institutions would be wise to use news reports of security incidents as “what if” table-top training exercises.  Here is another one that just occurred a …
Read the rest of the article

]]> http://www.complianceguru.com/2012/01/another-incident-management-table-top-training-exercise/feed/ 0 2012 Compliance Trends, Part 4 – Risk Assessments http://www.complianceguru.com/2012/01/2012-compliance-trends-part-4-risk-assessments/ http://www.complianceguru.com/2012/01/2012-compliance-trends-part-4-risk-assessments/#comments Wed, 04 Jan 2012 19:02:42 +0000 Tom http://www.complianceguru.com/?p=2431 Information security, business continuity, vendor management, ID theft, RDC, Internet banking…it seems that every time you do anything these days you’re expected to perform a risk assessment. This is nothing …
Read the rest of the article

]]> http://www.complianceguru.com/2012/01/2012-compliance-trends-part-4-risk-assessments/feed/ 0 Top Topics for 2011 http://www.complianceguru.com/2011/12/top-topics-for-2011/ http://www.complianceguru.com/2011/12/top-topics-for-2011/#comments Wed, 28 Dec 2011 19:05:10 +0000 Tom http://www.complianceguru.com/?p=2395 With every one else doing their end-of-the-year top ten lists, I thought I might join in and see what topics were most popular with visitors to the Compliance Guru site …
Read the rest of the article

]]> http://www.complianceguru.com/2011/12/top-topics-for-2011/feed/ 0 FDIC offers “Insight” on Mobile Banking http://www.complianceguru.com/2011/12/fdic-offers-insight-on-mobile-banking/ http://www.complianceguru.com/2011/12/fdic-offers-insight-on-mobile-banking/#comments Thu, 22 Dec 2011 15:24:01 +0000 Tom http://www.complianceguru.com/?p=2342 Although not considered official supervisory guidance, the most recent FDIC Supervisory Insights newsletter offers an instructive early look into how the agency might examine this emerging electronic banking delivery method …
Read the rest of the article

]]> http://www.complianceguru.com/2011/12/fdic-offers-insight-on-mobile-banking/feed/ 0 2012 Compliance Trends, Part 3 – Management http://www.complianceguru.com/2011/12/2012-compliance-trends-part-3-management/ http://www.complianceguru.com/2011/12/2012-compliance-trends-part-3-management/#comments Mon, 19 Dec 2011 20:48:40 +0000 Tom http://www.complianceguru.com/?p=2325 I’ve written about the importance of this before, and from many different angles, but I want to recap and explain why I think management (both IT and enterprise) will be …
Read the rest of the article

]]> http://www.complianceguru.com/2011/12/2012-compliance-trends-part-3-management/feed/ 0