With all eyes focused on AI regulations and the sunset of the Cybersecurity Assessment Tool (CAT), the recently released FFIEC Development, Acquisition, and Maintenance (DA&M) has almost slid under the radar. However, this new booklet is a complete rewrite...
Finosec Tools and Resources to Empower You and Your Team
Finosec BlogTopics
Get notified on new insights from Finosec now!
Be the first to know about new Finosec blogs to grow your knowledge of the cybersecurity governance industry today!Resources for:
FFIEC
Why You Need to Know Every System for Every Employee
Are you confident that your bank has clear and thorough visibility to every employee’s physical and digital access to systems? If you’re like most banks we work with, the answer to this question is “no”. There are many challenges that make tracking employee access...
Navigating Cyber Insurance: Are You Really Covered? Critical Lessons Learned
In the evolving state of cybersecurity, financial institutions grapple with the challenge of safeguarding their digital and financial assets against cyber threats. Cyber insurance has emerged as a critical component of risk management strategies. However, the complexities surrounding these policies, particularly regarding coverage in the event of a breach, can leave many organizations vulnerable.
Integrating FFIEC Authentication Guidance: A Blueprint for Your Next Exam With Insights from Recent Regulatory Actions
The Federal Financial Institutions Examination Council (FFIEC) Authentication Guidance update in August 2021 has marked a significant step towards enhancing authentication and security access measures within financial institutions. This update expanded upon previous handbooks from 2005 and 2011, emphasizing a broader scope that now includes employees, third-party vendors, and system-to-system communications via APIs.
What Auditors and Examiners Expect You to Have Implemented For the Updated FFIEC Authentication Guidance
What do you need to have implemented for the updated FFIEC authentication guidance? Get a comprehensive overview in our blog.
FFIEC Releases AIO Booklet
The FFIEC AIO (Architecture, Infrastructure, and Operations) is an update to the operations handbook that was released on June 30, 2021.