Information Systems Update

Information Systems Security Policy Update - 08/30/06

Bankpolicies.com is proud to announce the immediate availability of our revised Information Systems Security (IT) Policy Template.

This product was revised in response to the Federal Financial Institutions Examination Council (FFIEC) Press Release dated July 27, 2006 announcing revised guidance for examiners and financial institutions to use in identifying information security risks and evaluating the adequacy of controls and applicable risk management practices of financial institutions. The guidance updates the 2002 Information Security Booklet and addresses changes in technology, risk assessments, mitigation strategies, and regulatory guidance.

http://www.ffiec.gov/press/pr072706.htm

What's New and Revised

This product has been completely revised and greatly expanded, and is now more uniform with the flow of the new FFIEC guidance. In addition, we incorporated guidance from the FFIEC's IT Audit Examination Handbook at the request of numerous clients. Click here to see detailed subject matter regarding new, revised or deleted topics.

Product Contents

Purpose and Contents - Topic 1

Introduction - Topic 2

Policy Description, Authority and Scope - Topic 3

Definitions - Topic 4

Organization, Responsibilities and Administration - Topic 5

Risk Management Program Overview - Topic 6

Information Security Program Risk Assessment - Topic 7

Information Security Strategic Plan - Topic 8

Basic Information Security Controls and Standards - Topic 9

Authentication Policy - Topic 10

Network Access Policy - Topic 11

Firewall Policy - Topic 12

Operating System Policy - Topic 13

Application Access Policy - Topic 14

Remote Access Policy - Topic 15

Physical and Environmental Protection Policy - Topic 16

Encryption Policy - Topic 17

Systems Development and Acquisition Policy - Topic 18

Maintenance and Patch Management Policy - Topic 19

Change Control Policy - Topic 20

Personnel Security Policy - Topic 21

Data Security Policy - Topic 22

Service Provider Oversight Policy - Topic 23

Security Monitoring Policy - Topic 24

Condition Monitoring Policy - Topic 25

Incident Response and Preparedness Policy - Topic 26

Security Process and Monitoring Update Policy - Topic 27

Core Processing Policy - Topic 28

Internet Access Policy - Topic 29

Audit Policy - Topic 30

Naming Convention Standards - Network - Topic 31

Naming Convention Standards - Users - Topic 32

Password and Authentication Control - Topic 33

Fax Machine Procedures - Topic 34

Wireless Network Procedures - Topic 35

Instant Messaging Procedures - Topic 36

Virus Control Procedures - Topic 37

Spyware Control Procedures - Topic 38

Voice Over Internet Protocol Procedures - Topic 39

Data Backup Routines and Operating Procedures - Topic 40

Service Requests and Problem Reporting Procedures - Topic 41

Staff Training - Topic 42

Retention of Documentation - Topic 43

Includes the following form templates:

Information Systems Contractor Protection Acceptance (1 page)

Information Systems Employee Protection Acceptance (1 page)

Information Systems Exception to Standards (1 page)

Information Systems Facilities Access Request (1 page)

Information Systems Intrusion Risk Assessment (4 pages)

Information Systems Patch Management Control Form (1 page)

Information Systems Problem Worksheet (1 page)

Information Systems Program Access Assessment (5 pages)

Ordering Information

This revised product is available to purchase from Bankpolicies.com for:

$475.00 - List Price

- or -

$150.00* - Update Price

*Applies only to clients who have purchased Information Systems Security (IT) Policy Template in addition to the following prior updates (if applicable):

Information Systems Security Policy Template Update - 08/05/05 - $50.00

Information Systems Security Policy Template Update - 04/04/05 - $25.00

Information Systems Security Policy Template Update - 08/09/04 - $50.00

Information Systems Security Policy Template Update - 01/11/04 - $25.00

If you have ordered this product after 07/30/06 you are eligible to receive the product update at no charge.

Click here to place an order for this product. Clients who are eligible for our Legacy Rewards Volume Discount can apply their applicable discount level to the update or list price (whichever ap