IT Examiner School

information.

every night.

Information being left on a copier, printer or fax machine at the end of the day

MED

Any and all offsite storage facilities are locked and secured. Any family members that enter the bank are escorted by an employee and left alone. All machines are cleared at the end of the day. Proof room is locked up at night so no one can interfere with the server or other equipment. Any suspicious activity is reported on the Suspicious Activity Report. Any violations are reported on the GLBA incident report. Controls (How is it protected)? Employees are instructed to make a conscious effort to maintain customer privacy. Employees have signed a Confidential Documents are retrieved in a prompt manner. Information is backed up daily.

LOW

Burglary.

INFORMATION

Threats and Vulnerabilities

Inherent Risk

Effectiveness of Control ALL EFFECTIVE

Customer information: During a disaster and outside the bank

Disaster occurs.

LOW

Information being taken out of the bank. Employees talking with customers and being hear by others

MED

MED