Information Security

Evaluate the risk of compromising member information in fulfillment of the NCUA Regulation 748 Appendix A and B in accordance with section 501 and 505(B) of the Gramm Leach Bliley Act (GLBA) to include physical, administrative, and technical security guidelines and standards as well as e-commerce services that are provided to your members. This service also includes an Information Security Policy & Program ready for board approval.

Multi-year contracts include ongoing compliance assistance with regards to information security.

With cyber threats increasing in both number and sophistication, the Federal Financial Institutions Examination Council (FFIEC) developed the Cybersecurity Assessment Tool as a way to help institutions identify risks and determine cyber security preparedness. The Assessment provides a repeatable and measurable process that measures preparedness over time.  We use it to incorporate security-related principles and for regulatory guidance including the National Institute of Standards and Technology (NIST) Cybersecurity Framework.

Assess current Internet connections to identify points of weakness that leave the credit union exposed to external threats that may be a result from hackers, network viruses and more in fulfillment of NCUA’s Letter to Credit Unions, e-Commerce Guide to Credit Unions 02-CU-17.

In-depth review of a credit union’s overall Information Systems & Technology Program concentrating on NCUA’s questionnaire in efforts to prepare you for an exam, satisfy IT audit requirements, and establish a baseline for your IT infrastructure.

Provide information security consulting services, vendor management, and project management to assist in achieving both short and long term strategic goals as well as improving the credit union’s cybersecurity posture.

Perform safety evaluations on outdoor ATMs to include light meter readings, obstructions such as shrubbery, crime statistics for the area of the ATM, and a detailed diagram of the ATM area. The evaluation is in fulfillment of the Texas Administrative Code Rule 91.115 and Texas Finance Code Sections 59.301 – 59.310.