Vendor Management

Analysis of the FFIEC’s Statement on Cloud Computing

On July 10th, 2012, the FFIEC published a “Statement on Cloud Computing” in a new section of the ffiec.gov resource library for guidelines related to information technology governance.  This statement served to declare that cloud computing providers are simply another form o...

Sharpening Your Vendor Management Tools

Dan Hadaway will be presenting a workshop titled “Sharpening Your Vendor Management Skills” through the Community Bankers Association of Ohio on Thursday, August 23rd, 2012. Because financial institutions rely heavily on vendors to perform tasks involving confide...

FFIEC Statement on Outsourced Cloud Computing

The Federal Financial Institutions Examination Council (FFIEC) has issued a statement on outsourced cloud computing activities. The statement discusses key risk considerations associated with outsourced cloud computing activities and identifies applicable risk mitigation con...

Understanding SOC Reports (For Beginners)

As part of our certifications through ISACA (CISA, CISM and CRISC), we regularly flip through the ISACA Journal dog-earring the pertinent articles and other learning materials available to us through this organization. In looking at one of the prior issues the other day, I ...

Social Media Development Standards

Social Media Development Standards:   This document provides guidance to social media site developers so that all vulnerabilities exposed in the social media risk assessment process are properly addressed.  Customizing this document to your organization will help your team ...

Vendor Management Program Kit

With all we’re doing to prevent technology incidents, what if your vendors have a breach? If your management team understands the risk exposure of vendors to your bank, you are definitely heading in the right direction.  If your “vendor owners” are conducti...

FDIC Issues Warning About Risky Payment Processors

The Federal Deposit Insurance Corporation (FDIC) has issued guidance for banks and other financial services institutions, warning that certain third-party payment processors could prove to be security liabilities. Attached is revised guidance describing potential risks assoc...

Protected: Simplifying Vendor Management 2016

Upon completion of the Vendor Management Workshop, infotex grants attendees permission to use these boilerplates and will turn over copyright of the resulting documents to your financial institution. By using any of the boilerplates, you signify agreement to the terms and co...

Sharpening Your Vendor Management Skills

Dan Hadaway will be presenting their workshop titled “Sharpening Your Vendor Management Skills” through the Community Bankers Association of Ohio on Wednesday, August 10, 2011. Because financial institutions rely heavily on vendors to perform tasks involving con...

Sharpening Your Vendor Management Tools

Dan Hadaway is presenting a workshop titled “Sharpening Your Vendor Management Tools” through the Indiana Bankers Association. This workshop is scheduled for May 4th. Program Overview Because financial institutions rely heavily on vendors to perform tasks involvi...