IT Policy
Yes. Unlike some other policies, a professional, practical Incident Response Policy and Plan is actually a useful executable guide to dealing with chaos that can surround a breach. If done properly, the IRP is a manual that creates a team of bank executives that have roles to execute that are important to protecting the bank and the bank's customers. The IRP will tell your team exactly what they need to do, who they need to contact, and what to say and not say. During a breach and in the ensuing aftermath, your bank will need clarity and direction and an Incident Response Policy and Plan created by CBC will provide both.
Yes, and we are seeing the examiners becoming more strict about it. FFIEC guidelines require your community bank to have a policy and plan to respond to breaches of information security at your bank. Incident response policy and plans must be independent of particular hardware platforms, operating systems, and applications. The primary focus of the document is detecting, analyzing, prioritizing, and handling incidents. The plan identifies and describes the roles and responsibilities of the Incident Response Team.
Depending on the type of breach you experience, it is an area of knowledge your technology staff will need to identify and remediate the cause of the breach. Digital forensics is the investigation and analysis of material found in digital devices. It requires a high level of knowledge and experience with various software and hardware.
If your community bank needs help investigating and remediating an incident or breach of your information security, we have experienced engineers that can come and help your bank resume normal operations.
If you have an immedaite problem or just want to learn more about CBC, you can contact:
Paul Elder 614-848-3189 ext 121 or email Paul Larry Krietemeyer 614-848-3189 ext 143 or email Larry