Does anyone have an Info Sec Risk Assessment & Response program that they could share with me? I just need one to look at as a guide. We have examiners coming in June and we don't have one in place. Please HELP!!

If you are a member of the ABA, they have an excellent GLBA tool box that has an assessment in Excel format that can be tailored to your instituion.

Unfortunately for me, my bank is not a member. I thought that someone would be able to help on BOL as many members as there are but no responses and I'm running out of time. I don't know what I'm going to do.

Try this. Scroll down to operational risk.

It was developed by the Financial Services Roundtable. It is very big bank oriented but we just scaled it down for our needs. There is a discussion document as well.

Check out the FFIEC's website too-I used their workprograms and did fine in the last FDIC exam. FFIEC Info Sec Workprogram It is kind of lenthy, but there is a boatload of info. Good luck, but yeah, you had better have one done before the examiners get there. It would be good for it to have gone to your Board before they arrive so at least you can say "Yup, we did one!"

Thanks so much for the information. I will check those out. Again, thank you.

FSBT