Click to return to BOL home page
Banker Store eCard Exchange Vendor Connect Career Connect Learning Connect Bankers Information Network

   

















    Site Map

    Our Sponsors

    Home











Lending Gurus
Operations Gurus
Security Gurus
Marketing Gurus
Technology Gurus
eBanking Gurus

Print Friendly! Email This Article! Discuss NOW!


About an information security risk assessment

Question: Can an information security risk assessment be done without spending a fortune and chewing up weeks of my time?

Answer: Yes, it's possible. First, there are a few foundational elements of information security programs that can be assessed in a day or two. These are your Employee Security Awareness program, Change Management, Vendor (3rd Part Service Provider) Management, and Incident Response/Customer Notification. It is a relatively simple task to review the policy, procedure, and records related to these activities and determine whether improvement is needed.

The more difficult part is to assess the risks associated in information systems. There are some very good free tools for doing network and system scans, if you have a trained technician on staff to run them effectively. For the smaller community banks, the most expedient solution may be to hire an external IT Audit specialist to do network scans and an attack/penetration test. This can be accomplished for as little as $2000 if you find somebody with a reasonable rate. Larger banks may have these capabilities in house, but if not, the costs go up with the size and complexity of the networks and systems.


Applied Intent, LLC Boilerplate Applied Intent, LLC helps banks solve compliance challenges inexpensively. Information security regulations can be a heavy burden for regional and community banks. But our products provide solutions that are easy to implement and maintain. Our services introduce a balance between people, process, and simple technology so compliance is sustainable and affordable.

Visit us at www.appliedintent.com or call 480-247-3022.



First published on BankersOnline.com 8/01/05







Home | Compliance | Lending | Operations | Security | Marketing | Technology | eBanking
BOL Archives    Privacy Policy    Important Disclaimer   Recommend This Site !   Contact Us


BankersOnline is a free service made possible by the generous support of our advertisers and sponsors. Advertisers and sponsors are not responsible for site content. Please help us keep BankersOnline FREE to all banking professionals. Support our advertisers and sponsors by clicking through to learn more about their products and services.