|
IT Security Checklist
Question: After a recent IT examination the regulators recommended the IT policy be revised to include security standards that could be audited. Is there a check list to review for our policy?
Answer: IT policies have undergone considerable changes the past two years to accommodate changing IT environments, and increased emphasis on information security. In addition to digital information, all information in the bank should be included. With regard to digital information, we offer the following check-list:
- Outer wall or first line defense: fire walls.
- Designate firewall to be used. (make, model)
- Who is to have access to firewall?
- How often are settings to be reviewed?
- Document reviews
- Second line of defense, access to network
- Who has access to network?
- physical access
- Logical access
- Set levels of access for those with access
- administrative rights
- read, write access
- read only
- password requirements
- time network available
- Third line of defense: Applications: Specify acceptable applications on network.
- Set level of security for each application.
- Core processing, set levels of access within core processing applications, password requirements
- Other Applications - who has what access
- Fourth line of defense: review usage reports, and document reviews for unusual and improper access.
Stout & Deines, Inc.
Stout & Deines is a consulting firm specializing in all areas of regulatory compliance. We provide sound, credible solutions to regulatory issues, through hands on assistance, staff education, and consistent follow-up.
First published on BankersOnline.com 5/1/06
Privacy Policy Disclaimer Recommend This Site ! Contact Us
BankersOnline is a free service made possible by the generous support of our advertisers and sponsors. Advertisers and sponsors are not responsible for site content. Please help us keep BankersOnline FREE to all banking professionals. Support our advertisers and sponsors by clicking through to learn more about their products and services.
|
|
|
Print Friendly!
Email This Article!
Discuss NOW!