What You Need To Know About the New FFIEC Guidance : Revised Best Practices for Protecting Online Transactions

Download or Preview

The FFIEC's recent supplemental guidance establishes a new "best practice" standard for mitigating risks to online banking systems by calling for a much more comprehensive risk management approach than ever before.

This paper breaks down the specifics of the 3 key components described in the new guidance, plus provides several recommendations on how to best prepare to meet the new compliance standards before the January 2012 deadline.

• Section 1: Background of the FFIEC Guidance
• Section 2: Key Components of the New FFIEC Guidance
• Section 3: What Examiners Will Be Evaluating in 2012
• Section 4: Recommendations to Prepare for Compliance

Mitigating IT Security Risks with Penetration Tests:
The First Step in Total Network Protection

Download or Preview

Penetration testing is much more than a necessary process to satisfy compliance obligations: it is a critical first step in the information and network security lifecycle and an important component of a full IT Security Compliance program.

This white paper defines the different types of penetration tests and clearly explains the reasons why an organization should perform the tests. Readers will not only find out the benefits penetration tests can provide, but also where they tend to fall short. Finally, this resource will provide guidance for organizations on choosing the right vendor to perform penetration tests.

Risk Assessments: The Key To Continuous Compliance

Download Now

Most financial institutions lack internal resources or the technical expertise necessary to identify all of the risks to information security, making a correct evaluation of risk extremely difficult if not impossible. Therefore, without knowing where threats exist, or their potential severity, within their information systems, a financial institution is ill prepared to combat a threat, mitigate the costs of a breach or even face a Federal or State examiner’s prying eyes.

This white paper explains the value of having qualified experts properly identify and evaluate information risk through a comprehensive risk assessment.  It also shows how developing a continuous risk management program, thus “continuous compliance”, can benefit the entire organization in a cost-effective manner.

IT GRC for Banks and Credit Unions

Download Now

This white paper explores where most institutions are today on the “risk management continuum” and how they can successfully evolve over the next few years to a risk management best practice culture that delivers a competitive edge for the institution.

The People Problem – Five Best Practices for Mitigating Human Factors in IT Security

Download Now

This white paper explains why it is so important to complement investments in security technology with the adoption of policies that mitigate human factors. It also explains the five particularly critical best practices. By implementing these, organizations of all kinds can more effectively mitigate information risk, fulfill compliance requirements and ensure that their security expenditures are more closely aligned with their actual security vulnerabilities.

Preparation by Automation: Reducing the Cost, Pain, Time and Risk of IT Security Audits

Download Now

Every company must be prepared to submit to audits. Preparedness for audit is, in fact, the distinguishing characteristic of a well-governed company. A company that is prepared to be audited is one that both complies with accepted practices and knows that it complies with those practices. It is a company that does the right thing and can prove so. This white paper explains how IT organizations can use automation to better prepare themselves for IT security audits, thereby significantly reducing the cost, pain, time and risk associated with said audits.

Security Compliance Management – A Renewed Focus in Healthcare

Download Now

This paper provides forward-looking thought leadership on the events that are driving increased attention and activities for enabling security compliance management of electronic personal health information within the healthcare industry. We review the trends of new HIPAA guidance and enforcement activities, summarize the key aspects of a proactive security culture for a healthcare organization, and offer recommendations for technology solutions that can help.

Strategic Alignment of IT & Security: Yield Compliance by Default

Download Now

TraceSecurity and Reymann Group teamed up to provide a new educational resource to help your institution adopt a culture of continuous risk management. Discover how to take control of your network security program, maintain administrative costs and exceed regulatory requirements.