5. Discuss with management or review MIS or other monitoring reports to determine the recent institution’s experience and trends for the Intrusions, both attempted and successful; Fraudulent transactions reported by customers; Customer complaint volumes and average time to resolution; and Frequency and duration of service disruptions. 6. Review audit and consultant reports, and management’s responses, tracking systems to identify issues for examination Possible sources include Internal and external audit reports and Attestation Report (e.g. SSAE-16) and other reviews for service providers, Security reviews/evaluations from internal risk review or consultants (includes and penetration testing), and Findings from GLBA security and control tests and annual GLBA reports to the board. 7. Review network schematic to the location of major e-banking components. Document the and the entity responsible for development, operation, and of each of the major system components. 8. Review the e-banking institution’s site(s) to gain a general
5. Discuss with management or review MIS or other monitoring reports to determine the institution’s recent experience and trends for the Intrusions, both attempted and successful; Fraudulent transactions reported by customers; Customer complaint volumes and average time to resolution; and Frequency and duration of service disruptions. 6. Review audit and consultant reports, management’s responses, and tracking systems to identify issues for examination Possible sources include Internal and external audit reports and Attestation Report (e.g. SSAE-16) and other reviews for service providers, Security reviews/evaluations from internal risk review or consultants (includes and penetration testing), and Findings from GLBA security and control tests and annual GLBA reports to the board. 7. Review network schematic to the location of major e-banking components. Document the and the entity responsible for development, operation, and of each of the major system components. 8. Review the institution’s e-banking site(s) to gain a general
ffiec_itworkprogram_e-banking.docx