FFIEC handbook

TheFORCE

Is anyone using this FFIEC handbook to make recommendations to their company on how to improve information security in their organization? I know its industry specific but just wanted to know if anyone here has used or using this handbook. I'm trying to get some preparations in case we have to do something.

jcundiff

Being in the industry, the FFIEC is way more than recommendations... FFIEC auditors travel in hordes :O FFIEC, PCI, SSAE-16, etc,etc, etc... And then there are the customer audits... it's a never ending revolving door of auditors. Mostly, they are all about the same... Sound security practices are sound security practices. Its amazing( at least to me) how many companies can not get the basics right.

Is there something specific you are looking for?