1 / 11

Compliance Outlook

Compliance Outlook. Cloud Computing. Cloud Computing. Cloud computing is a technological advancement that can be advantageous to credit unions because of potential benefits such as: cost reduction, flexibility, scalability, improved load balancing, and speed. Cloud Computing.

ezhno
Download Presentation

Compliance Outlook

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Compliance Outlook Cloud Computing

  2. Cloud Computing Cloud computing is a technological advancement that can be advantageous to credit unions because of potential benefits such as: cost reduction, flexibility, scalability, improved load balancing, and speed.

  3. Cloud Computing The Federal Financial Institution Examination Council (FFIEC) considers cloud computing to be another form of outsourcing with the same basic risk characteristics and risk management requirements as traditional forms of outsourcing.

  4. Cloud Computing • When considering a cloud computing solution it is required that credit unions evaluate: • Data Classification; • Data Segregation; and • Recoverability.

  5. Cloud Computing The credit union may have to provide additional controls to manage a cloud computing service provider.

  6. Cloud Computing The credit union must have agreements that are specific as to the ownership, location and format of the credit union’s data, and dispute resolution processes.

  7. Cloud Computing The FFIEC states that “Financial institutions that contemplate or use a cloud computing model in which all or part of the service is outsourced have to consider the fundamentals of risk and risk management defined in the FFIEC Information Technology Examination Handbook, especially the Outsourcing Technology Services Booklet.”

  8. Cloud Computing The credit union’s management process for cloud computing resources should include effective monitoring of security-related threats, incidents, and events on both credit unions and servicers networks; comprehensive incident response methodologies; and maintenance of appropriate forensic strategies for investigation and evidence collection.

  9. Cloud Computing Often these solutions are provided overseas, due to the cost benefits. If this is the case the provider may not be aware of or comply with the myriad of regulatory requirements credit unions must comply with, including: privacy, security incidence response, record retention, and information technology requirements.

  10. Thank you for joining me for this review of Cloud Computing. Shawn Wolbert, CIA, CUCE Director CU System Relations 101 S. Washington Square, Suite 900 Lansing, MI 48933-1703 (800) 262-6285 Ext. 486 (734) 658-5427 Mobile Follow me on Twitter – Shawn Wolbert @ Go2CUGuru

  11. Cloud Computing Resources: FFIEC Guidance: http://ithandbook.ffiec.gov/media/153119/06-28-12_-_external_cloud_computing_-_public_statement.pdf FFIEC IT Handbook: http://ithandbook.ffiec.gov/it-booklets.aspx FFIEC Outsourcing Technology Services: http://ithandbook.ffiec.gov/it-booklets/outsourcing-technology-services.aspx

More Related