Adhering to the Gramm-Leach-Bliley Act (GLBA) includes maintaining a thorough understanding of your IT systems in order to protect consumers’ nonpublic personal information housed on them. To be compliant, your financial institution must:
- Maintain a clear picture of how consumer data is stored, accessed and maintained on your systems
- Identify and assess all current and foreseeable risks to your IT systems and the data stored on them
- Design and implement a plan to mitigate those risks
- Test the components of the plan and adjust as needed
Meeting GLBA Compliance with CSI
CSI's IT Audit provides you with a qualitative and comprehensive review and analysis of all the major information technology areas recommended by the FFIEC. This ensures you have a thorough picture of your entire network. From this vantage point, CSI identifies the current and foreseeable risks threatening your systems and the consumer data housed on them, and provides recommendations for mitigating those risks.
CSI's IT Audit
Our consultants execute three key audit stages, guided by the FFIEC’s IT Examination Handbook at each stage.
First, they conduct preliminary research to build trust with key personnel and to gain a sound understanding of your personnel and systems.
Second, they perform an exhaustive on-site analysis of your information system controls and procedures. This includes:
- Hardware & software inventory
|
- Management IT oversight assessment
|
- Interactive computer usage testing
|
- Day-to-day operational controls check
|
- Password protocols evaluation
|
|
- Electronic banking controls & procedures review
|
- System vulnerability identification
|
- Funds transfer processes & procedures analysis
|
- After hours walk through security assessment
|
- Personnel practices examination
|
|
Finally, our consultants provide a three-tiered audit report to put your institution on the right path for GLBA compliance. The report contains:
- A summary of priority issues and recommendations for senior management and your board
- A detailed list of implementation items for your IT department
- A current snapshot of your entire systems network and interconnectivity
With a CSI IT Audit, you benefit from the expertise and professionalism of our consultants, as well as the sophisticated technology and manual techniques they use to assess your information technology systems. Strengthen your GLBA compliance with a CSI IT Audit. Call CSI today.
Brochure - IT Audit