IT Examiner School

Results of On-site Discussions with Management, Part 2

Examiner: You are operating Fiserv’s telephone banking system on a Windows XX server. Why not upgrade to Windows XY? NA Fossil: The vendor just updated all of the servers to Windows XY except for the one handling the telephone banking system, which is why it located in the network versus the DMZ. The bank won’t update this system to run on XY since it will be deactivated sometime next quarter.

Examiner: Why is it being deactivated? NA Fossil: We are deactivating it due to lack of use by customers.

Examiner: So, does Fiserv have access to your internal network? NA Fossil: Yes

Examiner: Have you been officially designated the IT Security Officer? NA Fossil: Yes, by the Board last year.

Examiner: How do you process transfers and distribute Microsoft patches? NA Fossil: We recently installed the Federal Reserve’s FedAdvantage and we still use WSUS for Microsoft patches. There is only one desktop we use for wire transfers.

Note: You subsequently had a brief conversation with CEO Bose who confirmed that the bank recently installed the FRB’s FedAdvantage wire transfer system to bring domestic wires inhouse.

Examiner: Do you have modems? NA Fossil: Yes, but they were turned off, taken off the network, and sit in storage.

Examiner: What about those installed on the desktops or servers? NA Fossil: We just installed all new workstations and servers. They came without modems.

Examiner: Do you happen to have other servers? Maybe at the branches? NA Fossil: Yes. Each branch has a file and print server. It helps with bandwidth issues.

Examiner: Your information technology policies do no address some key platform/system guidance such as core banking controls, wire transfer, imaging, wireless, VPN, VOIP, instant messaging, portable devices, and routers. NA Fossil: We do not have any wireless, instant messaging, VOIP, or portable devices. The other items have just not been addressed yet.

Examiner: Do you know what the settings are for the ChexSystems VPN? NA Fossil: Yes. I updated it recently.