New FFIEC Information Security Booklet
Chad Knutson
Chad Knutson is a co-founder and Senior Information Security Consultant for SBS CyberSecurity, a premier cybersecurity consulting and audit firm dedicated to making a positive impact on the banking and financial services industry, and has served as President of the SBS Institute since 2013. Chad maintains his CISSP, CISA, and CRISC certifications, and received his Bachelor of Science in Computer Information Systems and his Master of Science in Information Assurance from Dakota State University.
Chad is dedicated to educating industry professionals about cybersecurity. While consulting with financial institutions, he saw the need to empower employees to be better prepared to confidently handle cybersecurity threats, create and manage strong information security programs, and understand ever-changing regulations at their institution. He was a driving force in the development of the SBS Institute certification program, which is uniquely designed to serve the banking industry by providing banking specific, role-based certifications cyber education. The SBS Institute has grown to include over ten certifications and State Association partners in over 30 states.
Chad's Other Events
The FFEIC has completely re-written and significantly changed the Information Security Handbook. The Handbook represents an integration of concepts from Cybersecurity Guidance, Management Guidance, and other elements released in the past 10 years. The FFIEC Information Security Handbook is the most comprehensive resource from the FFIEC on constructing an adequate Information Security Program.
Information Security Programs are created based on risk assessment processes. The Handbook focuses on the governance, culture, and responsibilities to make Information Security Programs successful. The creation of these programs are based on risk assessment processes that assist the institution in making control decisions; these decisions are then documented in policies, standards, and procedures. The last component of a successful program is to ensure the controls are effectively implemented with assurance, testing, and auditing processes.
Governance of the Information Security Program
Information Security Program Management
Information Security Program Effectiveness
Information Security Officer, IT Manager, Risk Officer, Internal Auditor, Board members, or other management team members looking to understand the new FFIEC requirements and expectations.
This 1.50 hour event was recorded on Thursday, March 23rd, 2017.
2 CE Credits