Baseline Nonbank Cybersecurity Exam Program

Question 11

Does the institution have an up ‐ to ‐ date data flow diagram that shows the flow and storage of PII data, throughout its lifecycle?

17

Question 12

Is information security awareness training provided to all employees (including managers, senior executives, and contractors) as part of initial training for new users and annually thereafter?

18