article thumbnail

Operational Resilience Self-Assessment: Achieving the March 2022 Deadline

Castellan

In March 2021, The Bank of England, the Prudential Regulation Authority (PRA), and the Financial Conduct Authority (FCA) published policy documents about operational resilience. This was explained in May by Lyndon Nelson Deputy CEO of the Prudential Regulation Authority. DOWNLOAD NOW.

article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Within the ISO 27001 family, there are many other vital documents. Perform a Gap Analysis. A gap analysis gives you a high-level summary of what needs to be done to attain certification and allows you to examine and compare your organization’s current information security arrangements to the ISO 27001 standards.

Audit 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Most Overlooked Security Issues Facing the Financial Services

Solutions Review

The rise – and sophistication – of ransomware attacks has been documented by all parties concerned. The NIST Special Publication 800-209; Security Guidelines for Storage Infrastructure (co-authored by Continuity) is an excellent resource for those looking to develop their storage infrastructure knowledge.

article thumbnail

Audit Checklist for SOC 2

Reciprocity

A SOC 2 Type 1 report attests to the design and documentation of a service organization’s internal controls and procedures as of a specific date. Processing integrity: System processing is complete, valid, accurate, timely, and authorized to meet your service organization’s objectives. Perform a SOC 2 Gap Analysis.

Audit 52
article thumbnail

The SEPA Cyber Attack a Case Study

Plan B Consulting

Attacks on English local authorities, such as Hackney, I believe have not been paid, but the consequence of this is that three months later they still do not have all their systems back online. My view was that SEPA was never going to pay a ransom , regardless of the impact of the cyber incident.

article thumbnail

The SEPA Cyber Attack a Case Study

Plan B Consulting

Attacks on English local authorities, such as Hackney, I believe have not been paid, but the consequence of this is that three months later they still do not have all their systems back online. My view was that SEPA was never going to pay a ransom , regardless of the impact of the cyber incident. For more information click here.