IT General Controls and Data Security Audit

Comprehensive review of IT based on FFIEC

  • Management
    • Board oversight
    • IT strategic planning
  • Risk assessment
  • Network security and controls
  • Core processing security and controls
  • Information security and internal controls
  • Policy review
  • Regulatory compliance, including GLBA
  • Business continuity
  • Vendor management
  • Incident response plan
  • EFT
  • Electronic banking
  • Branch capture
  • RDC
  • And more

Remote Deposit Capture Audit

Comprehensive review of RDC operations to ensure compliance

  • Review of the RDC planning process
  • Review of the risk assessment process
  • Review of RDC policy and written procedures
  • Review of customer due diligence and suitability process
  • Review of customer contracts/agreements
  • Review of the RDC application
  • Oversight and monitoring
  • Vendor management
  • Training
  • Change management
  • Fraud mitigation
  • Business continuity planning

Other Services

  • ACH Risk Assessment
  • Assistance in addressing and responding to enforcement actions
  • Policy Review
  • Risk Assessment Evaluation and Development Assistance
  • Business Continuity and Disaster Recovery Plan Evaluation and Development Assistance
  • Incident Response Plan Evaluation and Development Assistance
  • Vendor Management Program development assistance
  • Regulatory Compliance and Security Training and Education - webinars, seminars
  • New Bank IT Consulting

GLBA Compliance Review

Information Security Program

  • Risk assessment
  • Board oversight
  • Administrative, technical, physical controls
  • Identification of weaknesses
  • Recommendations for improvement
  • Work program tailored from FFIEC Interagency guidelines and examination procedures

IT Pre-examination Review

High level risk based review

  • Policies, procedures, controls including BCP/DRP, Incident Response Plan
  • Risk assessment
  • Audit program
  • Board oversight
  • Identification of weaknesses
  • Recommendations for improvement
  • Work program tailored from FFIEC agency examination procedures