FFIEC Issues Updated Information Security Handbook

By Adam Stone, Principal Consultant
September 9th, 2016

The Federal Financial Institution Examinations Council (FFIEC) today announced a revision to their venerable Information Security booklet. As a part of the FFIEC Information Technology Examination Handbook, the updated Information Security booklet addresses “the factors necessary to assess the level of security risks to a financial institution’s information systems.”

For U.S. financial institutions and others responsible for complying with section 501(b) of the Gramm-Leach-Bliley Act of 1999, the updated booklet provides greater clarity on the role of risk management as an integral part of a robust information security program. It is likely that examiners will begin referencing the updated booklet immediately.

For more on how you can effectively integrate these new guidelines into your information security program, contact Secure Digital Solutions at 952-544-0234.