November 26, 2000
INTERNET SECURITY - Over the next few weeks we will cover the FDIC's
paper "Risk Assessment Tools and Practices or Information System
Security" dated July 7, 1999. This is our first selection for your
reading.
Whether financial institutions contract with third-party providers for
computer services such as Internet banking, or maintain computer services
in-house, bank management is responsible for ensuring that systems and
data are protected against risks associated with emerging technologies and
computer networks. If a bank is relying on a third-party provider,
management must generally understand the provider's information security
program to effectively evaluate the security system's ability to protect
bank and customer data.
The FDIC has previously issued guidance on information security
concerns such as data privacy and confidentiality, data integrity,
authentication, non-repudiation, and access control/system design. This
paper is designed to supplement Financial Institution Letter 131-97,
"Security Risks Associated With the Internet," dated December
18, 1997, and to complement the FDIC's safety and soundness electronic
banking examination procedures. Related guidance can be found in the FFIEC
Information Systems Examination Handbook.
INTERNET COMPLIANCE - Advertisement Of Membership
The FDIC and NCUA consider every insured depository institution's
online system top-level page, or "home page", to be an
advertisement. Therefore, according to these agencies' interpretation of
their rules, financial institutions subject to the regulations should
display the official advertising statement on their home pages unless
subject to one of the exceptions described under the regulations.
Furthermore, each subsidiary page of an online system that contains an
advertisement should display the official advertising statement unless
subject to one of the exceptions described under the regulations.
Additional information about the FDIC's interpretation can be found in the
Federal Register, Volume 62, Page 6145, dated February 11, 1997.
We hope you and your family had a wonderful Thanksgiving.
|