I was recently invited to speak on a panel regarding third party risk strategies for the Securities Industry and Financial Markets Association's (SIFMA) Internal Auditors Society. While there, I had the opportunity to meet and hear from two individuals who...
Are you familiar with the National Institute of Standards and Technology’s “Framework for Improving Critical Infrastructure Cybersecurity”? It’s often referred to as the “NIST risk management framework.” The interesting thing about the NIST framework is that it doesn’t work like...
Hot on the heels of the June 2015 Cybersecurity Assessment Tool, the Federal Financial Institutions Examination Council (FFIEC) has issued a revised Examination Handbook Management Booklet with updated Information Technology (IT) examination procedures. ((FFIEC Information Technology Examination Handbook. Federal Financial...
FINRA recently published its 11th annual Regulatory and Examination Priorities Letter to highlight both emerging and existing risks that could adversely affect investors and market integrity in 2016, if not properly addressed. They reported that issues that they highlighted in...
The newly proposed Dodd-Frank rewrite, which is currently part of the $21 billion funding bill being deliberated by the Senate, would cause a shakeup in the riskiness of third-party relationships with banks and financial services organizations which have less than...
(Reuters) - A weak link in many financial advisers' cybersecurity plans is the outside companies that help run their businesses, such as payroll companies and computer-repair firms. Shared Assessments Steering Committee member, Rocco Grillo, Managing Director and Global Leader for...
