IT Examiner School eBook

CSBS Non-Bank Workprogram (WP) Overview

Used by state examiners to assess the cyber preparedness of non-depository entities

Provides in-depth risk evaluation of the four critical components of the URSIT (Audit, Management, Development and Acquisition, & Support and Delivery). Questions contain applicable Gramm-Leach-Bliley Act (GLBA) Safeguards Rule citation and document request list reference.

The Baseline (v1.0) WP & Enhanced WP were both released in May 2022

An update Baseline WP (V1.1) was released in March 2023

Internal Use Only

Components of CSBS Nonbank Cyber Exam Programs Pre-Examination Resources Work Programs

Baseline Nonbank Workprogram

Exam Notification Letter

Enhanced Nonbank Workprogram

Pre-Exam Document Request List (DRL)