Latest Compliance - Information Security Guidelines Topics

Insuring against fraud losses

02/11/2018

We have a cyber rider as part of our bank’s insurance policy. Won’t that cover any losses we have due to wire transfer fraud?

Confirming wire-transfer controls

02/04/2018

Do we need to confirm that our commercial wire transfer clients have controls in place to prevent wire transfer fraud?

Sharing wire transfer risk info

01/28/2018

Can information-sharing help prevent wire-transfer losses?

Is tracking complaints necessary?

07/09/2017

What might happen if we don't have a system to track complaint resolutions?

Privacy and Outsourcing Loan Reviews

10/04/2004

What are the privacy issues related to having a contract person providing loan analysis as opposed to a full-time employee? This person would be required to see financial statements, credit reports, and other personal information about existing customers.

Strengthening Your Customer Information Policy & Procedures

01/20/2003

We have a policy and procedures on Safeguarding Customer Information. My problem is, FDIC EDP examiner wants more meat on it, such as; address logical and physical access controls to CIF. No incident response policies? I can't find the information in the Federal Register. Vendor oversight requirements have not been formalized, Can you direct me to any site that will have examples or answers to these questions?

Required Employee Training

02/11/2002

I'm a new compliance officer and I need to know what regulations require employee training. I'm in the process of putting together a compliance training calendar for my bank.

Surprises in the Final Information Security Guidelines

01/15/2001

The federal banking regulators have agreed to on final Interagency Guidelines Establishing Standards for Safeguarding Customer Information ("Guidelines"). You previously wrote two articles for us on the proposed guidelines. (See <a href="gurus_technology1211.html">Part 1</a> and <a href="gurus_technology1218.html">Part 2</a>.) Were there any surprises for you in the final version of Interagency Guidelines Establishing Standards for Safeguarding Customer Information? And could you give us a quick heads-up on what the final guidelines provide?