Content area
In an interview, FDIC bank examiner Susan Orr talked about what she has been seeing at client sites and what her sense is of current concerns and issues. She said on the whole, the security stance of the banks are doing a pretty good job safeguarding digital information and protecting systems. Companies that are the most proactive are doing things like monitoring employee Internet usage and blocking specific sites to prevent abuse. The need for an overall picture of security status is one reason why vulnerability assessments are required by regulators on a quarterly basis. Client data protection and information protection is still an area that many bank staffs are struggling to learn. Banks should devote a section of policy to customer data -- for instance not copying information from a desktop record to a laptop or storing it on a USB stick.