Information Security Risk Assessment Software
The Graham-Leach-Bliley Act (GLBA) and the Interagency Guidelines Establishing Information
Security Standards require financial institutions (banks, savings associations,
credit unions, and trust companies) establish an Information Security Risk Assessment.
The development and maintenance of an Information Security Risk Assessment is a
complex process that must identify threat likelihood, potential damage and risk
level, define controls to mitigate identified threats and establish a compliance
plan.
tandem Risk Assessment
CoNetrix offers an online solution to help you create your Information Security Risk Assessment. The online Risk Assessment software includes:
- An easy to follow multi-step process
- A location management module to assist in identifying likelihood and potential damage based on physical locations
- A threat questionnaire broken into seven sections (Structure & Responsibility,
Size & Complexity, General Controls, Previous Experience, Natural Disaster/Elemental,
Contracts, Legal & Regulatory, and Audit & Security Testing) to assist in quantifying
the likelihood and potential damage associated with threats
- More than 60 pre-defined "common" threats to financial institutions, including
Biological Pandemic, Remote Deposit Capture, Internet Banking, and Wireless
- A confidential information management module to manage data classification and
data flow and to document the location of customer information and/or vital records
- A threat management module to manage controls, compliance, impact, and guidance
associated with identified threats
Features
The CoNetrix Information Security Risk Assessment software is feature-rich, including:
- A storm event statistics report tool
- Created and updated by security and compliance experts
- Downloadable documents in Microsoft Word and/or Adobe PDF formats
- A one year subscription to updates
- Free training workshops to help familiarize you with the software
- Integration with other CoNetrix online software
- Anywhere/anytime Internet access through a secure online portal
- Multi-user access
- No software installation or equipment costs
- The ability to manage several companies' Risk Assessments with one login (requires
a subscription for each company)
Links