Riding into the Sunset: A Community Financial Institution’s Guide to IT Asset End-of-Life
Everyone loves a good sunset……. when it's out in nature. 🌄
Posts about:
Vendor Management
How to Write an AI Policy
As artificial intelligence (AI) becomes more integrated with business operations, it's increasingly important to develop clear policies to manage AI-related risks, maintain compliance, and uphold ethical standards. A well-crafted AI policy helps define expectations, protect data, and guide employees on the responsible use of AI tools. Here's what you should consider when creating an AI policy for your organization.
What are the Regulators Saying About Artificial Intelligence (AI)?
Artificial Intelligence (AI) has transformed industries, boosting efficiency while simultaneously presenting substantial risks—a true double-edged sword.
Model Risk Management FAQs for Community Banks & Credit Unions
Model risk management is an evolving topic for community banks and credit unions. While models have been around for a long time, their prevalence in artificial intelligence (AI), machine learning (ML), and other software applications makes understanding and managing them more important than ever. Let's dive into some frequently asked questions about model risk management.
A Vendor Manager’s Guide to Service Level Agreements (SLAs)
What is an SLA?
A service level agreement (SLA) is a specific type of contract between a vendor and a business. It defines performance measures and compensation options for the times when a vendor can't hold up their end of the bargain. Let's dive into some specifics about what this looks like and what you (as a vendor manager who cares about information security) need to do about it.
Regulation S-P: An Overview of the SEC’s Latest Cybersecurity Amendments
On June 3, 2024, the Securities and Exchange Commission (SEC) published a final rule titled Regulation S-P: Privacy of Consumer Financial Information and Safeguarding Customer Information. The rule amends 17 CFR Part 248 and enhances the SEC's cybersecurity and incident response requirements. 📃
The New Third-Party Risk Management Guide for Community Banks
On May 3, 2024, three of the federal banking agencies published a new Third-Party Risk Management Guide for Community Banks. This guide was published as a supplement to the agencies' Third-Party Relationships: Risk Management guidance ("TPRM Guidance"), published in June 2023.
6 Key Updates in the NIST Cybersecurity Framework (CSF) 2.0
On February 26, 2024, the National Institute of Standards and Technology (NIST) published an update to their Cybersecurity Framework (CSF). A decade since the framework made its first appearance, the NIST CSF 2.0 includes several significant changes. In this article, we'll cover six of those key updates and talk about what it means for you.
Updated Ransomware Self-Assessment Tool (R-SAT 2.0)
On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an updated version of the Ransomware Self-Assessment Tool (R-SAT). In this blog, we'll discuss what the R-SAT is, what got updated, and what you need to do about it.
The Vendor Manager’s Guide to Subcontractor Risk Management
Subcontractors (also known as "fourth parties" or "nth parties") are an important factor when it comes to vendor management. Through the vendor management process, you take steps to make sure your vendors are secure and resilient, but what about their third parties? Do your vendors hold their subcontractors to the same standard of excellence? How can you know?