About Us | Contact Us
View Cart

The FFIEC’s Technology Education Requirements

By Vigilize | Wednesday, April 17, 2013 - Leave a Comment

Mark your calendars! Dan Hadaway will be delivering a workshop with the Indiana Bankers Association to review FFIEC statements involving technology training.
The workshop will be on June 6th starting at 9:00 AM and ending at 4:00 PM.

For information on how to register, visit the IBA’s website.


The FFIEC’s Technology Education Requirements

In just the last two years the FFIEC has released at least three guidance’s that include certain education requirements. Of course, the official names of these guidance’s vary depending upon your federal regulator, but most people recognize the following names of these guidance’s: The Supplement, the Statement on Cloud Computing, and the recent Bulletin on Social Media.

Meanwhile, handbooks long established on the FFIEC website (ffiec.gov) call for various training objectives to be met. This workshop will review all FFIEC statements related to technology training, and help attendees develop a risk-based approach towards deciding exactly how to comply in the areas of:

  • Board of Directors Education
  • Customer Education
  • Management Training
  • User Awareness Training and Comprehension Exercises
  • Training for Technical Staff
  • Vendor Guidelines
  • Awareness Activation

Because IT Governance is a team effort, awareness is the most important control. Though this workshop is focused on risk-based compliance decisions, the tools and ideas revealed will help your bank mitigate technology risk as well as compliance risk.

Seminar Topics

  • The Targeted Audiences for Technology Compliance Training
  • What the FFIEC actually says for each target audience
  • Deciding What To Do (or . . . . How to integrate training into your risk management program.)
  • Strategy, Tactics, and Planning
  • The Supplement: Customer Education as a Critical Control
  • Social Media: Regulating Behavior in the Public
  • Social Media: Compliance Concerns
  • Vendor Management: Training your vendors as well as your vendor owners
  • The Statement on Cloud Computing
  • Awareness Goals: Education, Motivation, Activation
  • Delivery: the layered approach to training
  • What other banks are doing

Deliverables:

  • Customer Education Kit
  • Social Media Kit
  • Comprehension Exercises, Posters, Puzzles, Games, etc.
  • Boilerplates and templates to create your own program

Consider Sending More Than One Person!
Technology Compliance Training works best when a programmatic approach is developed through an organic, multi-disciplinary process. The best program is the one designed by a team including technology, compliance, security, and branch personnel. This workshop comes with deliverables that can be customized to your bank’s needs.

Location
IBA Center for Professional Development
6925 Parkdale Place
Indianapolis, IN 46254

For more information on how to register and to get a look at the schedule, visit the IBA’s website.

Latest News
    You’ve heard it from every MSSP you’ve met: the definition of a SIEM is in the eye of the beholder. But at infotex, we are not talking about the database – an asset whose definition is continuously evolving. We’re talking about the way three teams collaborate in an overall Technology Risk Monitoring process. And whether […]
    A new study shows organizations are responding to cyber attacks faster than ever, so why is that bad news? An article review. When it comes to cyber attacks, the sooner an organization can begin to respond to an attack the better, so the results of a new study showing a drop in the amount of […]
    …a Crash Course of Security Measures The first article by Sara Fultz, Creative Assistant of infotex! Introduction: As the managing partner of infotex, I am proud to introduce the “debut article” for Sara Fultz.  I told Sara “write an article showing us what you’ve learned that the technical staff will appreciate.” As I read her […]
    infotex Programming Coordinator, Michael Hartke, introduces a high level overview of the upcoming update to the infotex SIEM. Look for more movies in the coming months informing our Clients, and those just now learning about us, about the SIEM and its features and functions.
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape)   You are welcome to print out and distribute this around your office.  
    As the investigation of the SolarWinds Hack was ongoing, another hack stole some of the limelight… This is the final update on the SolarWinds hack unless a major development comes to light. You can see the previous article here: “Autopsy of the SolarWinds Hack Update“. One of the largest cyber-espionage campaigns in the history of […]
    Employees working from home may find it more difficult to follow security policies… An article review. The surge in employees working from home during the pandemic created many headaches for IT departments around the world, many of whom had no telecommuting policies or procedures before the start… but what about the employees who had to […]
    A Webinar-Movie infotex presents the 2021 update of a previously released webinar presented by our Lead Non-Technical Auditor, Adam Reynolds. This movie-short is intended for those who are planning to participate in an infotex Incident Response Test. Not sure about the importance of an Incident Response Test? Check out onetest.infotex.com for more information! Please let […]
    PRESS RELEASE – FOR IMMEDIATE RELEASE BUSINESS NEWS INFOTEX PROMOTES BRYAN BONNELL TO DIGITAL MEDIA MANAGER infotex, the Managed Security Service Provider, announced Bryan Bonnell’s promotion from Senior Data Security Analyst to Digital Media Manager.  “He will continue his normal DSA duties on a limited basis, because we want everybody to stay in touch with […]
    PRESS RELEASE – FOR IMMEDIATE RELEASE BUSINESS NEWS RYAN HENSLER OF INFOTEX, EARNS CISSP CERTIFICATE Ryan Hensler, Senior NOC Associate of infotex, Inc., recently received the CISSP certification. “Ryan has proven himself to be a seasoned security professional both in his work for infotex and now through achieving this certification.” said Sean Waugh, Information Security Officer. […]