Susan Orr, CISA, CISM, CRP

President, Susan Orr Consulting

Susan Orr is a leading financial services expert with vast regulatory, risk management, and security best practice knowledge and expertise. During her 14 year tenure as a bank examiner, Susan held lead positions including Regional IT Examination Specialist, Special Assistant to the Regional Director, Special Assistant to the Director of DSC, and Special Assistant to the Vice Chairman of the FDIC. Susan was also a lead instructor for the FDICâ

Disaster Recovery and Business Continuity: Lessons Learned and Industry Best Practices

Presented by Susan Orr, CISA, CISM, CRP • June 22, 2007

Review of past disasters and how they affected financial institutions Discuss the workings of an effective business continuity plan Review lesson learned and how to be best prepared for future disasters when they occur

Preventing TJX Type Data Breaches

Presented by William Henley , Susan Orr, CISA, CISM, CRP • April 27, 2007

Lessons learned from TJX and previous data breaches to improve data protection Outline data protection regulations financial institutions face What regulators expect financial institutions to have in place for data protection Best practices in data protection from a regulator, banker and processor

Maintaining Compliance with the Gramm-Leach-Bliley Act Section 501(b)

Presented by Susan Orr, CISA, CISM, CRP • December 13, 2006

This workshop will expand on many of these areas and present practical and proven approaches many institutions have adopted in order to comply with Section 501(b) of GLBA and Section 216 of Fair and Accurate Credit Transaction Act. In the course of this workshop, we will provide detailed "best practices"...

Preparing for an Information Technology Regulatory Exam

Presented by Susan Orr, CISA, CISM, CRP • November 27, 2006

A look at what the regulatory agencies base IT exams on and how your institution can be best prepared Preparing for the pre-examination IT Questionnaire and the effect your responses will have How do GLBA Section 501(b), the Bank Secrecy Act, Patriot Act, and FACTA figure into a regulatory IT exam

IT Risk Assessments: Understanding the Process

Presented by Susan Orr, CISA, CISM, CRP • November 22, 2006

Examination of IT risk assessments and how they are vital to financial institutions A look at why IT risk assessments are important to your organization How an IT risk assessment is performed Sample assessment matrix included

The Challenging Role of a Director

Susan Orr, CISA, CISM, CRP • November 10, 2006

Security and internal controls now begin in the board room. Two laws have been passed by Congress, the Gramm-Leach-Bliley Act of 1999 (GLBA) and the Sarbanes Oxley Act of 2002 (SOX), which have refocused the spotlight on a financial institution's board of directors. The role of a board member has grown in importance...

So You Think You Are Secure?

Susan Orr, CISA, CISM, CRP • June 2, 2006

Exploitations that threaten security are on the rise. Every day, news stories document the rampant growth of attacks and exploits. The types of attacks vary - Denial of Service (DoS), buffer overflow, identity theft, session hijacking, website defacements, email viruses, worms, phishing scams, and the list goes on. ...