ABSTRACT

Gramm-Leach-Bliley Act (GLBA)

Sarbanes-Oxley Act (SOX)

“Information Security for Banking and Finance” (ISO/TR 13569)

FFEIC examination guidelines

It is important for an effective risk management program to have generally acceptable controls that can be mapped back to industry guidelines, regulatory requirements, applicable laws, and best practices.