As part of an information security program, an organization should perform IT risk assessments that provide reliable data about the threats the business faces and the consequent impacts. Many companies are turning to third-party risk assessment software to help monitor, prioritize, and respond to risk.
On June 26, 2023, the Office of the Comptroller of the Currency (OCC) published Bulletin 2023-22: Cybersecurity Supervision Work Program. Let's look at five things we think community banks should know about the Cybersecurity Supervision Work Program (CSW) exam procedures.
Managing information security policies is an ongoing task – it doesn't stop once the policy has been written and approved by the board. Storing policies in one long document and sharing that with everyone is not manageable long-term. As your business changes, it is important to make sure your policies and people can keep up.
Note: This article was updated on January 13, 2025. See the update log at the bottom of the article.
On June 6, 2023, the Federal Deposit Insurance Corporation (FDIC), Federal Reserve (FRB), and Office of the Comptroller of the Currency (OCC) published new Interagency Guidance on Third-Party Relationships: Risk Management. Here are eight things community banks need to know about it.
Having a plan to continue operations in the event of adverse circumstances is a key part of doing business. This plan is often referred to as a Business Continuity Plan or a BCP.
On March 1, 2023, the Federal Home Loan Mortgage Corporation ("Freddie Mac") published Bulletin 2023-6. The bulletin announced an update to Freddie Mac's information security and privacy requirements. Here's an introduction to the requirements, as well as a summary of what's new, what's changed, and what you may need to do about it.
"Quantum computing" started as a theory decades ago. Today it is becoming a reality with companies like IBM launching powerful quantum computers and the United States federal government issuing laws and guidelines on the topic.
The NCUA's 2023 Supervisory Priorities stated that "to strengthen the examination process for cybersecurity, the NCUA developed and tested updated Information Security Examination procedures tailored to institutions of varying size and complexity. Examiners will use these new procedures in 2023."
Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will tell you what you can expect in your 2023 exam and take you through a bit of the history of each acronym.