09/03/2001
In a recent audit by the OTS I was asked to provide a seperate Strategic Plan for the IT area. Do you know where I can get a copy of one to use as a guideline, or an outling or format. I appreciate any help that you can provide.
07/23/2001
Information Security Policy
Sample 2
07/23/2001
INFORMATION SECURITY PROGRAM
DIRECTIVE
Bank management shall, through an effective Information Security Program (the Program):
06/04/2001
Does anyone have guidance for what should be the penalty for violation of your in-house virus protection policy? For example, our policy says employees can’t bring software from home and install it, but occasionally someone will do it anyway.
03/05/2001
Do you have any suggestions for keeping a good inventory of hardware and software? We have a lot of "Frankenstein" machines that have had so much stuff changed out on them (motherboard, memory chips, video card, sound card) that they are almost unrecognizable from the original specs, yet when it's time to figure out if a particular new piece of software will run on them, we need to know the current configuration. I'm hoping there's an easy way to do this.
03/05/2001
We are considering the creation of a Web page and the offering of electronic banking services to our customers. Do you have any guidelines or a checklist of the items we should be taking into consideration? I am concerned that we are overlooking some basic items as we move into this new type of products.
01/15/2001
I've heard the term ASP quite a bit recently, but I'm not sure I understand the concept. Could you give me a quick description or explanation?
01/02/2001
Can you refer me to anything that would assist me in knowing what should be performed for monitoring our online banking Web site? I've been through bank security seminars that cover non-technology security. Our external auditor was not able to assist us.
01/01/2001
12/18/2000
Cracking and Hacking:
Are you doing enough for your network security?
by Seamus Phan