IT Examiner School eBook May 2025

Internal Use Only

CSBS Non-Bank Cybersecurity Workprogram

CSBS Non-Bank Workprogram (WP) Overview

Used by state examiners to assess the cyber preparedness of non-depository entities

Provides in-depth risk evaluation of the four critical components of the URSIT (Audit, Management, Development and Acquisition, & Support and Delivery). Questions contain applicable Gramm-Leach-Bliley Act (GLBA) Safeguards Rule citation and document request list reference.

The Baseline (v1.0) WP & Enhanced WP were both released in May 2022

An update Baseline WP (V1.1) was released in March 2023