I have to perform a Website Audit prior to year end and have never audited this before. I was not able to locate any reference materials in the BIAM Audit Guide. Is there anyone that can direct me to a point of reference on what to review for in a Website Audit?

I used this checklist which is right here on bankersonline
http://www.bankersonline.com/compliance/webchecklist.html

It provides a good tool for assessing compliance on your websit.

I've used the compliance review form provided here http://www.bankersonline.com/tools/compliance/webpagecompreviewform.html.

This is a Walleye Woman Woe (get it) as she has a link to an audit sheet but the period at the end is seen as part of the link. That gives you an oops page. http://www.bankersonline.com/tools/compliance/webpagecompreviewform.html

You can also buy the Website Audit webinar which has another set of audit workpapers, most common violations, etc.

Thanks for the correction, Andy!

I used the FFIEC's E-Banking Audit Procedures....here's the link....

FFIEC's Examination Procedures

http://www.bankersonline.com/tools/compliance/webpagecompreviewform.html

Just curious - regarding the above mentioned checklist - in section 18 (weblinking)of the checklist. Do you think it is calling for written contracts for all web linking arrangements or only those where services are provided or sold? Reading through the background and scope of the OCC bulletin reference in section 18 it seems that the focus on arrangement with vendors that provide services or products.

Our bank has a link to an investment office which is informational only. The link provides information about what the investment office offers. There is a link to contact the investment office on the linked site. There is a standard warning about the bank not endorsing the business etc. when the link is chosen. But, shouldn't the bank have a web linking agreement as described in the the OCC bulletin even though no products or services can be directly purchased through on the linked site?



--------------------

I would risk-weight these and when you have a revenue sharing agreement rate them higher. Most links you add on a discretionary basis and which you can delete without any issues probably are not big deals.

Can anyone provide examples of what a weblinking agreement should cover?

Off the top of my head, a timeframe, content, remuneration, conditions and actions in case of default, notice of cancellation requirements.