51
Information Security Booklet  July 2006 FFIE C IT Examination Handbook P ag e 1 INFORMA TION SECURITY WORKPROGRAM EXAMINATION OBJECTIVE: Assess the quantity of risk and the effectiveness of the institution’s risk management processes as they relate to the security measures instituted to e n- sure confidentiality, integrity, and availability of information and to instill accountability for ac- tions taken on the instit ution’s systems . The objectives and procedures are di vided into Tier 1 and Tier II:  Tier I assesses an institution’s process for identifying and managing risks  Tier II provides additional verification where risk warrants it. Tier I and Tier II are intended to be a tool set examiners will use when selecting examination procedures for their particular examination. Examiners should use these procedures as necessary to support examination objectives. T IER I  P ROCEDURES Objective 1: Determine the appropriate scope for the examination. Work Paper Reference Comment 1. Review past reports for out- standing issues or previous problems. Consider  Regulatory reports of ex- amination  Internal and external audit reports  Independent security tests  Regulatory, audit, and se- curity reports from service providers 2. Review management’s r e- sponse to issues raised since the last examination. Consid- er  Adequacy and timing of corrective action  Resolution of root causes rather than just specific is- sues  Existence of any outstand-  

Info Sec Work Program

Embed Size (px)

Citation preview

Page 1: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 1/51

Page 2: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 2/51

Page 3: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 3/51

Page 4: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 4/51

Page 5: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 5/51

Page 6: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 6/51

Page 7: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 7/51

Page 8: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 8/51

Page 9: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 9/51

Page 10: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 10/51

Page 11: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 11/51

Page 12: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 12/51

Page 13: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 13/51

Page 14: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 14/51

Page 15: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 15/51

Page 16: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 16/51

Page 17: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 17/51

Page 18: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 18/51

Page 19: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 19/51

Page 20: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 20/51

Page 21: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 21/51

Page 22: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 22/51

Page 23: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 23/51

Page 24: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 24/51

Page 25: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 25/51

Page 26: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 26/51

Page 27: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 27/51

Page 28: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 28/51

Page 29: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 29/51

Page 30: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 30/51

Page 31: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 31/51

Page 32: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 32/51

Page 33: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 33/51

Page 34: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 34/51

Page 35: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 35/51

Page 36: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 36/51

Page 37: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 37/51

Page 38: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 38/51

Page 39: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 39/51

Page 40: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 40/51

Page 41: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 41/51

Page 42: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 42/51

Page 43: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 43/51

Page 44: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 44/51

Page 45: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 45/51

Page 46: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 46/51

Page 47: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 47/51

Page 48: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 48/51

Page 49: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 49/51

Page 50: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 50/51

Page 51: Info Sec Work Program

8/4/2019 Info Sec Work Program

http://slidepdf.com/reader/full/info-sec-work-program 51/51