Baseline Nonbank Cybersecurity Exam Program

Question 22

If a vendor has access to the institution's network, does the IT staff monitor their access? Is access limited to business needs?

21

Question 28

Are vulnerability scans conducted? How often? By whom? What, exactly, is scanned?

22