Wednesday, December 11, 2013
10:00 am – 11:30 am HST
12:00 pm – 1:30 pm PT
1:00 pm – 2:30 pm MT
2:00 pm – 3:30 pm CT
3:00 pm – 4:30 pm ET
Recently, FFIEC announced the formation of a working group to further promote coordination across federal and state banking regulatory agencies on critical infrastructure and cyber-security issues. Cyber security breaches are at an all-time high. More hackers are attacking networks than at any other time in our nation’s history. The Gramm-Leach-Bliley Act requires credit unions to design, document, and implement an information security program to fend off these attackers. In fact, eighteen months ago, the FFIEC issued guidance titled Supplement to Authentication in an Internet Banking Environment to further develop the documentation requirement of the information security program at credit unions. This important guidance reinforces the reality that credit unions must have a documented risk management framework and a documented layered information security program commensurate with identified risks.
This seminar will outline what credit unions should do to design and document an effective information security program. It will review the important regulation to ensure your credit unions can produce the necessary documentation for management, auditors, and examiners. Many credit unions struggle with efficient ways to document security policies, procedures, standards, and guidelines. This informative seminar will aid your credit unions in documenting an information security program that meets regulatory scrutiny, yet is maintainable even with limited resources.
Continuing Education: Attendance verification for CE credits upon request
- Blueprint for an information security program customized for credit unions
- Leveraging risk assessment and IT auditing to define and test your information security program
- Review minimum documentation set
- Security policy, procedures, plans, and standards
- Configuration standards
- Construction of a network diagram
- Meeting minutes
- Security awareness documentation
- FFIEC IT handbooks to create information security program documentation
- FDIC officer’s questionnaire
- Information security documentation best practices
- Information security program documentation tool demonstration
- TAKE-AWAY TOOLKIT
- Sample policy template
- Minimum documentation checklist
- Employee training log
- Quiz you can administer to measure staff learning and a separate answer key
WHO SHOULD ATTEND?
This informative session is best suited for COOs, CEOs, chief risk officers, chief information officers, chief technology officers, information security officers, chief auditors, chief compliance officers, operations officers, board members, IT personnel, and anyone responsible for internal audits.
Webinar content is subject to copyright and intended for your individual credit union’s use only.
MEET THE PRESENTER
Dr. Kevin Streff
Secure Banking Solutions