Information and Cyber Security for Directors

RELEASE DATE: MARCH 25, 2024
ESTIMATED DURATION: 60 MINUTES

Since 2020 the Federal Regulators, the FBI, CISA, and NSA have all issued numerous alerts and guidance relating to the increase in cyber-attacks and need for increased awareness and security.  Understanding information and cyber security and protecting the credit union and its members confidential information is not just a fiduciary responsibility but a regulatory requirement.

To help ensure your Director’s understand their responsibility, the threats, and what controls the credit union should have in place, they need to receive annual training.  This annual training is also a regulatory requirement.

Do your Directors know the top threats for financial institutions?  Do they know they are 10 times more likely to be a target of a cyberattack?  Do they know what policies and programs the credit union is required to have in place to protect confidential assets and information systems?  What security and controls should be in place?

This training session will provide:

• An overview of the Gramm Leach Bliley Act of 1999
• The required policies and programs
• Threats and risks
• Security and controls

MEET THE SUBJECT MATTER EXPERT

Susan Orr is a leading financial services expert with vast regulatory, risk management, and security best practice knowledge and expertise. During her 14-year tenure as an examiner, Susan held numerous lead positions including Regional IT Examination Specialist, Special Assistant to the Regional Director, Special Assistant to the Director of DSC, and Special Assistant to the Vice Chairman of the FDIC. Susan was also a lead instructor for the FDIC’s technology school and was instrumental in key industry initiatives such as the FDIC E-Risk Strategic Initiatives Risk Monitoring Committee, the Chicago Region Interagency Technology Group, and the Federal Financial Institutions Examination Council (FFIEC) IT Handbook rewrites.

Prior to launching her consulting practice, Susan was Vice President of Regulatory Compliance for an Internet security company where she advised staff, customers, and partners on regulation, security, and risk management.