The FFIEC IT Exam Handbook states that "A financial institution establishes and maintains truly effective information security when it continuously integrates processes, people, and technology to mitigate risk in accordance with risk assessment and acceptable risk tolerance levels."
But the FFIEC doesn't tell financial institutions how to conduct an effective risk...
BankInfoSecurity.com is your one-stop portal for the latest news, insights and education on the top information security issues facing U.S. financial institutions today. Through articles, webinars, podcasts, customized training and sponsored content, our team is committed to providing up-to-date information on the security regulations, threats, solutions, training and career trends that most impact banks, credit unions and other related enterprises. Also, please check out our companion site, CUInfoSecurity.com.