Finosec Selected for ICBA ThinkTECH Accelerator

The Hidden Costs of Spreadsheets in Exam & Audit Preparation

by Zach Duke | Mar 6, 2025

Preparing for audits and exams can be an unnerving task, especially when spreadsheets are at the heart of the process. While spreadsheets have long been a go-to tool for many organizations, they often come with hidden costs that hinder efficiency. In this blog, we'll...

Sunsetting Of The Cybersecurity Assessment Toolkit: Next Steps

by Zach Duke | Feb 21, 2025

The Risks of Spreadsheets in Cybersecurity and Why It’s Time to Move On As regulators phase out legacy tools like the Cybersecurity Assessment Toolkit (CAT), it’s the perfect opportunity for institutions to rethink their approaches to governance and risk management....

Breaking Free from Spreadsheets: Simplifying Cybersecurity and Workflow Management

by Zach Duke | Feb 13, 2025

In an industry where cybersecurity threats continue to evolve, community banks must ensure that governance and oversight processes are airtight. Yet, many still rely on spreadsheets to manage critical security tasks, compliance tracking, and risk assessments. While...

Why Spreadsheets Are Risky for Managing Cybersecurity and Risk Management

by Zach Duke | Jan 24, 2025

In the world of cybersecurity and third-party risk management, spreadsheets have become a popular tool. Institutions often use them for tasks such as tracking exceptions from audits, managing access rights, and conducting risk assessments. Despite their frequency of...

Why Management’s FDICIA Attestation Must Include an Understanding of Access Reviews

by Zach Duke | Dec 17, 2024

For financial institutions subject to FDICIA, the Federal Deposit Insurance Corporation Improvement Act, the annual management attestation is a critical declaration of compliance. It signifies that the institution’s internal controls over financial reporting (ICFR) are effective. One key control to validate is how user access reviews are performed.

The Critical Link Between Third-Party Risk Management (TPRM) and Access Management

by Zach Duke | Nov 7, 2024

As highlighted in a recent article from the Federal Reserve, managing third-party relationships and the access associated with those relationships is a critical component of Third-Party Risk Management (TPRM). The associated access third party vendors have to banking systems is known as Access Management and is foundational for mitigating risks associated with third-party relationships. Access Management may be easy to overlook because it does not always reside with the same person or team as TPRM; making it difficult to provide critical oversight.

With increased regulatory focus, how should institutions be thinking of Access Management? Here are five steps your institution can take today to strengthen your third-party governance.

Finosec Selected for ICBA ThinkTECH Accelerator

By Finosec

More from Finosec