About Us | Contact Us
View Cart

One Year of TRAC

By Dan Hadaway | Thursday, November 6, 2014 - Leave a Comment

The SBS/Infotex Partnership Turns One!


The year in review!


So frightened were we about the reputational risk of an audit firm endorsing, much less reselling, a technology, that when we first reached out to seven ERM providers in October of 2012, we made it clear that we just wanted to learn about their application on behalf of our Clients.  But by the time we had whittled the field to the two finalists, both had talked us into giving a re-seller agreement a try, and the main reason we felt we could do it was because as an audit firm we do need to fully understand risk assessing.

And so we gave it a try with Secure Banking Solutions, and announced our partnership on 11/06/13.  (The announcement is here:  trac.infotex.com).

In the past year we have learned:

  • TRAC is indeed following through on their pledge to modify software and make fixes as we find them.
  • The helpdesk at TRAC is amazing.
  • You might not really need as much help from infotex as we had thought . . . . once we get you pointed in the right direction, the rest is pretty intuitive.
  • The board reports need to be summarized, but what a great paper trail for auditors and examiners!
  • TRAC can be used for non-financial institutions and there is a
  • Healthcare version of TRAC.

Of course we learned a lot more as well, but the NUMBER ONE LESSON WAS:

  1. We’re glad we entered the partnership!

Original article by Dan Hadaway CRISC CISA CISM. Founder and Managing Partner, infotex

“Dan’s New Leaf” is a “fun blog to inspire thought in the area of IT Governance.”

 


same_strip_012513


 

Latest News
    Why It Rhymes With SEEM (And its Not the I Before E Rule) Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . It’s the Gestalt. The idea that the whole is greater than the sum of it’s parts. That’s not something that is often brought […]
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape)   You are welcome to print out and distribute this around your office. Interested in one of ours […]
    Questions about China’s new disclosure laws only highlight the uncertainty about disclosure in general… An article review. China recently made waves in the security world by announcing a new set of data security laws, one of which has added new fuel to a long running debate: how and when should security vulnerabilities be disclosed…and to […]
    Four Conditions … …For Why a Network Can be Anything But a Network! Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . I have to admit that infotex is being called into engineering meetings with larger organizations these days that are NOT community based banks.  We […]
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape)   You are welcome to print out and distribute this around your office. Interested in one of ours […]
    If Zero days need Zero clicks, are there any secure devices in the mix? Tanvee Dhir explores the Pegasus spyware. Another technical post, meant to inspire thought about IT Governance . . . . Introduction Over the past couple of weeks, we have seen multiple stories regarding a powerful piece of spyware called Pegasus sold […]
    Our Lead Non-Technical Auditor takes a look at the new AIO Guidance… Architecture, Infrastructure, and Operations (AIO) is the latest booklet released by the Federal Financial Institutions Examination Council (FFIEC) in their line of  IT Examination Handbooks. It is an update to their 2004 Operations booklet and, as the name implies, expands into the areas […]
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape)   You are welcome to print out and distribute this around your office. Interested in one of ours […]
    Many organizations still fail to consider the unique risks posed by cloud computing… An article review. Last month thousands of Western Digital MyCloud device owners learned about the risks of cloud-based solutions the hard way: their data had been wiped remotely due to a flaw in the internet-facing component of their external hard drives. While […]
    infotex does not use Kaseya… We are protecting our Clients! Another blog post meant to inspire thought about IT Governance . . . . To all infotex managed security service Clients: As you may be aware there was a large ransomware attack recently that leveraged a remote management tool called Kaseya that is used by many […]