Friday, June 11, 2021
11:00 am – 1:00 pm Eastern
When it comes to information and cyber security the responsibility falls at several levels including the Board of Directors and Senior Management. The Board is to set the tone, provide governance, approve information security policies and designate an ISO. Senior Management is to ensure the Information Security Program is developed and maintained. The ISO; however, is responsible for overseeing and reporting on the management and mitigation of information and cyber security risks across the institution and is to be held accountable for the results of the oversight and reporting. The ISO is also responsible for seeing that the information/cyber security program is implemented and satisfies the regulatory Interagency Guidelines for Establishing Information Security Standards (GLBA). While once thought to be a technology function the role was typically delegated to the IT Manager or Officer but today the ISO is to be independent of IT operations and report directly to the board, board committee, or senior management. In fact, the independence of the ISO is stated in not just one of the FFIEC IT Examination Booklets but two. The September 2016 Information Security Booklet states “to ensure appropriate segregation of duties, the ISO should be independent of IT operations staff and should not report to IT operations management”. The November 2015 Management Booklet states “the ISO should be an enterprise-wide risk management rather than a production resource devoted to IT operations”.
Board, Senior Management, Auditors, IT Management, ISO, Risk Officers, IT Committee.
Susan Orr is a leading financial services expert with vast regulatory, risk management, and security best practice knowledge and expertise. As an auditor and consultant, Susan is dedicated to assisting financial institutions in implementing appropriate policies and controls to protect confidential information and comply with regulatory mandates and best practices. Her expertise as an auditor and former examiner provides her the knowledge and expertise to conduct comprehensive IT general control and data security reviews and assist de novo institutions in the vendor selection process, preparing policies and procedures, and instituting controls. She also consults for numerous security providers and vendors helping them align products and services to meet institution regulatory mandates. Susan is a Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified Risk Professional (CRP).
Attendance verification for CE credits provided upon request.
If you are having issues with registering online, please contact CBAO's Education, Training & Special Event Coordinator, Patti Webb, (614) 610-1877.
Live Plus Five ($265/$400) – Attend the live event and receive five business days of unlimited access to the OnDemand Playback and links to presenter materials and supplementary handouts.
Live Plus Five (Additional Hookup) ($175/$265) – Registering another banker from a different location for Live Plus Five.
OnDemand Recording ($295/$450) – Receive unlimited access to the OnDemand Playback for 6 months and links to presenter materials and supplementary handouts. This option does not include live session attendance.
CD-ROM ($345/$515) – Receive the webinar recording on a CD-ROM 7-10 business days after the Live event or your registration date (whichever is the latter). Receive unlimited access to the OnDemand Playback for 6 months and links to presenter materials and supplementary handouts. This option does not include live session attendance.
Live Plus Six ($365/$545) – Attend the live event and receive six months of unlimited access to the OnDemand Playback and links to presenter materials and supplementary handouts.
Premier Package ($395/$600) – Includes all three base options. Live attendance, OnDemand Playback for six months, and the CD-ROM.