eBanking Audit

Answered by:

Question:

I have read and perused literally "tons" of info obtained from the Net regarding e-banking activities, including viewing the sites of the OCC, FRB, and FDIC for e-banking exam procedures.....I guess I want a distinction regarding when conducting an e-banking audit, does this include a comprehensive review of all e-banking areas (wire transfer, ACH, internet banking, telephone banking, etc.) or separate audits of these areas? If separate, then would an e-banking audit solely be a review of the controls?

Answer:

The most specific answer may be that if you have risks in these areas, they should all be audited at one time or another with penetration testing based on the degree of risk.

It wouldn't be so much an issue as to what audit was conducted, but rather that an audit was conducted.

First published on BankersOnline.com date 1/6/03