Program Template Includes

• Cover inserts for 3-ring view binder
• Table of contents for 15-tab divider system
• 79 policy pages organized as table of contents, policy overview, policy sections, response to industry standards and index to appendices
• 20 appendices subsection headers with appendices samples included for
    Organizational chart
    Employee confidentiality agreement
    Network user guideline form
    Hardware & software inventories
    Network administrator’s checklist
    Technology service provider list
    Policy responses to FDIC IT-RMP Examination Officer’s Questionnaire
    Incident response procedures
    Suspicious activity reporting guidelines
    Checklist for customer notices

Template Benefits

• Comprehensive information security policies based on guidelines released by the FFIEC, FDIC, FRB, NCUA, OCC, OTC and NIST
• Response to industry standards provides a cross reference to over 60 laws and regulatory guidelines so examiners can quickly find the applicable policies
• Each policy section clearly identifies roles and responsibilities for
    Board of Directors
    Technology Steering Committee
    Network Administrator
    Business Continuity Coordinator
    Information Security Officer
    Internal Auditor
• Policy sections are organized according to latest FFIEC IT examination work programs
    Risk Assessment
    Information Security Policies
    Network Documentation
    Business Continuity Planning
    Internal Audit
• Detailed security policies are included for

  - network users - physical security - system access controls - border security configuration - website and banking system security - network health & security maintenance

  - network change management - vulnerability & security monitoring - technology service provider oversight - proper disposal of information - problem resolution & incident response

• Documents are customizable using Microsoft Word
• Scalable pricing based upon financial institution asset size

Update Subscription Benefits

Timely policy updates and expansions per new guidelines released by the FFIEC, FDIC, FRB, NCUA, OCC, OTC and NIST (During 2005, 12 new regulatory guidelines resulted in updates or expansions of 50 policies) Subscription members are notified of available policy updates at least quarterly; thereby allowing the technology steering committee to plan implementation prior to guideline effective dates Policy updates and expansions can easily be downloaded from the subscription website and inserted into existing policies

Subscription service now includes 1 hour of telephone or email template support annually

Before Purchasing

• Have you considered the staff hours required for creation and maintenance of a Network Information Security Program which is this comprehensive?
• When will your staff have the time to do the necessary research to create and maintain comprehensive policies without a template?
• Where can you find another template which cross references to specific guidelines the examiners will use during your examination?
• With TAN/ASC’s low pricing, can you really afford not to use this Network Information Security Program template and subscription service?

Click for Pricing