-
Services
- Information Security Program (ISP)
-
Information Security Assessment Services (ISAS)
- Internal Security Assessment (ISA)
- External Vulnerability Assessment/Penetration Testing (EVA/PT)
- Physical Security Assessment (PSA)
- Remote Internal Vulnerability Assessment (R/IVA)
- Wireless Vulnerability Assessment (WVA)
- Branch Controls Assessment (BCA)
- Virtual Vulnerability Assessment (VVA)
- Website Penetration Testing Assessment (W/PTA)
- Mobile Device Management Assessment (MDM)
- Risk Management/Business Continuity Program
- CastleGarde NetAudit (CNA)
- Remote Social Engineering (RSE)
- Bank Secrecy Act/Anti-Money Laundering (BSA/AML) Audit
- Website Compliance Assessment (WCA)
- Resources
- Company
Annual Information Security Program Updates and Support
Annual Information Security Program Updates and Support
(ongoing support for existing clients)
Information Security Program Review & Assessment
CastleGarde conducts a review of the credit union’s existing information security policies and procedures to assess their comprehensiveness, identify specific weaknesses, and evaluate their compliance with information security rules, guidelines, and federal regulations including NCUA’s 12 CFR Part 748 Appendix A and Appendix B. A report is produced that summarizes the findings and makes recommendations for improving the credit union’s information security program.
Update of All Information Security Program Documents
Based on the Information Security Program Review & Assessment, the information security policy and the information security standards & procedures are updated to reflect CastleGarde’s recommended changes.
A conference call is held to review the recommended changes and the reasoning behind those recommended changes.
Once the credit union has decided to accept or reject the proposed changes, CastleGarde produces the final copy of the updated documents which include:
Information security policy
Information security standards & procedures
Information security user guidelines
Information Security Training
Online web-based training with 24/7 unlimited use