We will be offering internet banking soon, and I need to do some policy research. I need to develop a structured method of handling online compliance and internal controls. I'd appreciate any tips than anyone can offer!!

Steve:
We are in the same situation right now, the beginning stages. Look in the tools section for an Intrusion Risk Assessment Policy and some other policy samples. Also contact Andy and see if he could share his Internet Policy and regulatory guidance grid with you. This will help you get started too. It appears that there may be a few of us just getting started on the internet process. I am a bit concerned since I do not feel that we have completed the information security program and risk assessment sufficiently yet. I would like to see us accomplish these tasks first before going further.

Maybe we can share our processes. I am going to a bank tommorrow that utilizes the same servicer that we are going to use. This will give me some first hand information.

Good Luck!

Opinions are mine not my employer.