Holly Hooks – Compliance Guru • FFIEC Guidance

Role of the Information Security Officer

Get a Copy

Managing Risk with Vendor Management

Get a Copy

Top IT Areas Where CEOs Should Focus

Get a Copy

By Holly Hooks | In Ask the Guru

Ask the Guru: Do We Need to Perform a review on a New Vendor in a Foreign Country?

Hey Guru! Our institution works with a third-party that has recently engaged with a company in a foreign county to begin assisting them in taking care of our institution’s IT matters. Do we need to perform a review on this new foreign third-party? When evaluating this situation, the first step is to understand the parties […]

By Holly Hooks | In Ask the Guru

Ask the Guru: “The Cybersecurity Assessment Tool… Do we have to?”

Hey Guru! Management is asking why we have to complete the FFIEC Cybersecurity Assessment Tool when it is voluntary. They feel it is too much work if it is not mandatory. I think it is still needed even though it is voluntary. Is there any documentation as to why it is still necessary for OCC […]