Proprietary & Confidential © 2011 Fidelity National Information Services, Inc. and its subsidiaries. Risk Assessments Scott Yoshimura, Risk Management.

Proprietary & Confidential © 2011 Fidelity National Information Services, Inc. and its subsidiaries. Risk Assessments Scott Yoshimura, Risk Management Consultant Title Slide Title and Date Font: Calibri, 28 pt Color: 85 percent black Subtitle & Presenter Name Font: Calibri, 16 pt Color: 79/111/25 Optional Copyright Should only be included on title slide and only if necessary No Page Number Click on the corner of this text box to delete Title Slide Title and Date Font: Calibri, 28 pt Color: 85 percent black Subtitle & Presenter Name Font: Calibri, 16 pt Color: 79/111/25 Optional Copyright Should only be included on title slide and only if necessary No Page Number Click on the corner of this text box to delete

Proprietary & Confidential Background FIS Managed IT Services (formerly ProNet Solutions) – Provides outsourced technology platform management solutions to independent community banks. – Virtual Network Management Services – Managed Security Services – Hosted Services Advisory Services Group – Provides facilitative solutions for IT related risk management programs and business continuity. In 2013 we completed 262 assessments for 66 banks in 13 states Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Agenda Risk Assessment Overview In Depth Look – GLBA/Information Security – Vendor Management – Online Banking – Business Continuity – New Product Development In Depth Look – Facilitative Solution – What Examiners Are Looking For – Questions Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Purpose of a Risk Assessment Quantify risk into a measurable format Designed to – Evaluate risks Impact Likelihood – Prioritize risks – Evaluate the effectiveness of controls – Identify gaps Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Benefits of a Risk Assessment Improve decision making – Identifying areas of weakness or concern – Valuation of risk to determine risk/return benefit Measure change – Changes in controls – Changes in environment – Changes in risk Risk awareness Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Creating a Risk Assessment Board and Executive support – Risk awareness and mitigation within the culture – Leadership and guidance – Understanding and expertise Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Creating a Risk Assessment Knowledge and resources – Develop – Identify – Evaluate – Remediate – Manage Research Applicable Regulations and Guidance – FFIEC – OCC – FRB Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential How to create a risk assessment What is the driving force? – Your purpose will define the quality and benefit of your assessment Do you have the knowledge? Is there new guidance? – Utilize your available resources to ensure you have the required/recommended criteria Have a sound methodology – Ensure your process meets your criteria, but is understandable and explainable to staff, your board and examiners Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Creating a Risk Assessment Quantitative vs Qualitative – Quantitative: Requires numerical values for both impact and likelihood using data from a variety of sources – Qualitative: Assessing risk and opportunity according to descriptive scales Inherent vs Residual – Inherent Risk: The risk that an activity would pose if no controls were in place – Residual Risk: The risk that remains after controls are taken into account Risk Formula – Inherent Risk = Impact x Probability – Residual Risk = Inherent Risk x Control Risk Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Weak vs Strong Assessment Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete AssetImpactLikelihoodRisk ServersHigh Mobile DevicesModerateHighModerate-High Shred BinModerate AppraisalsLow AssetConfidentialityIntegrityAvailabilityLikelihoodInherent Risk Strength of Controls Residual Risk ServersHigh Moderate Mobile Devices Moderate – High ModerateModerate – Low HighModerate – High HighModerate – Low Shred BinsHighLow Moderate LowModerate – High AppraisalsLowModerate LowModerate – Low HighLow

Proprietary & Confidential Creating a Risk Assessment Does your assessment do the following? – Identify subjects – Identify and evaluate threats – Identify and evaluate controls – Determine impact and likelihood – Determine areas of concern – Prioritize order of importance Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Tips for Performing a Risk Assessment Ensure everyone involved in the process understands the purpose Relate it to their line of business Ensure everyone evaluates based on the same risk appetite level Challenge and pose questions Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Board Reporting Understanding of the process Understanding of the risks Understanding of the position of the bank and strength of controls Understanding of the areas of concern Understanding of recommendations and action plan Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential What Examiners are Looking For Based on guidance Sound methodology Management involvement Clear board communication Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential GLBA/Information Security – Regulatory Guidance IT Examination Handbook – Financial institutions must maintain an ongoing information security risk assessment program that effectively – Gathers data regarding the information and technology assets of the organization, threats to those assets, vulnerabilities, existing security controls and processes, and the current security standards and requirements; – Analyzes the probability and impact associated with the known threats and vulnerabilities to their assets; and – Prioritizes the risks present due to threats and vulnerabilities to determine the appropriate level of training, controls, and assurance necessary for effective mitigation. Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Information Security Risk Assessment – Valuation Table Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Information Security Risk Assessment – Asset Analysis Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Information Security Risk Assessment – Risks & Controls Worksheet Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Information Security Risk Assessment – Vendor Analysis Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential What Examiners Are Looking For Inherent vs Residual Risk Evaluation of threats Evaluation of controls Identification of key controls Testing of controls Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Information Security Risk Assessment – Controls Analysis Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Vendor Management – Regulatory Guidance FIL-44-2008 – Guidance for Managing Third Party Risk – This guidance outlines the potential risks that may arise from the use of third parties and addresses the following four basic elements of an effective third-party risk management program: Risk assessment Due diligence in selecting a third party Contract structuring and review Oversight OCC Bulletin 2013-29 – Third Party Relationships, Risk Management Guidance Federal Reserve SR 13-19/CA 13-21 – Guidance on Managing Outsourcing Risk Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Vendor Management – Program Review Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Oversight New Vendor Selection & Due Diligence Ongoing Monitoring & Due Diligence

Proprietary & Confidential Vendor Management – Valuation Table Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Vendor Management – GLBA Analysis Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Vendor Management – Significant Vendor Rating Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Vendor Management – Critical Vendor Review Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Risk Assessment Strategic Review Due Diligence Contingency Planning Contract Structuring and Review Audit Requirements Monitoring & Oversight

Proprietary & Confidential Vendor Management – User Controls Considerations Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Vendor Management – New Vendor Review Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Risk Assessment Due Diligence Contingency Planning Contract Structuring and Review Monitoring & Oversight

Proprietary & Confidential What Examiners Are Looking For Risk assessment and proper due diligence prior to the selection of a vendor Consumer protection – Risk third party poses regarding consumer complaints – UDAAP/Fair Lending risks Ensure completion of enhanced due diligence (SSAE16) Review and documentation of compliance with User Control Considerations Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Vendor Management – Consumer Protection Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Online Banking – Regulatory Guidance 2005 FFIEC – Authentication in an Internet Banking Environment – The 2005 Guidance provided a risk management framework for financial institutions offering Internet-based products and services to their customers. 2011 FFIEC – Supplement to Authentication in an Internet Banking Environment – The purpose of this Supplement to the 2005 Guidance (Supplement) is to reinforce the Guidance’s risk management framework and update the Agencies’ expectations regarding customer authentication, layered security, or other controls in the increasingly hostile online environment. Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Online Banking Risk Assessment – Program Review Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Website Review Vendor Due Diligence & Suitability Contracts & Agreements Customer Eligibility & Review Risk Assessments Account Origination & Customer Verification Layered Security Programs Effectiveness of Certain Authentication Techniques Monitoring & Reporting Customer Awareness & Education

Proprietary & Confidential Online Banking Risk Assessment – Valuation Table Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Online Banking Risk Assessment – Transaction Analysis Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Online Banking Risk Assessment – Risks & Controls Worksheet Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential What Examiners Are Looking For Consumer protection – UDAAP – GLBA Other considerations – Distributed Denial-of-Service (DDoS) Attacks – Corporate Account Takeover (CATO) Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Business Continuity – Regulatory Guidance FFIEC IT Examination Handbook – A business impact analysis (BIA) is the first step in the business continuity planning process and should include the: Assessment and prioritization of all business functions and processes, including their interdependencies, as part of a work flow analysis; Identification of the potential impact of business disruptions resulting from uncontrolled, non-specific events on the institution's business functions and processes; Identification of the legal and regulatory requirements for the institution's business functions and processes; Estimation of maximum allowable downtime, as well as the acceptable level of losses, associated with the institution's business functions and processes; and Estimation of recovery time objectives (RTOs), recovery point objectives (RPOs), and recovery of the critical path. Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential Business Continuity – Business Impact Analysis Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential What Examiners Are Looking For Impact to the bank Recovery Time Objectives (RTOs) Recovery Point Objectives (RPOs) Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential New Product Assessment – Regulatory Guidance OCC Bulletin 2004-20 – Risk Management of New, Expanded, or Modified Bank Products and Services – An effective risk management process includes (1) performing adequate due diligence prior to introducing the product, (2) developing and implementing controls and processes to ensure risks are properly measured, monitored, and controlled, and (3) developing and implementing appropriate performance monitoring and review systems Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential New Product Risk Assessment Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Strategic Review Personnel Risk Management Review Regulatory Compliance Information Security Vendor Due Diligence Business Continuity Policies & Procedures Reporting Performance Monitoring

Proprietary & Confidential New Product Risk Assessment Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Proprietary & Confidential What Examiners Are Looking For Risk assessment on all new products/services Third Party involvement Consumer protection – Consumer complaints – UDAAP/Fair Lending Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete Slide with Body Copy Heading (All Slides) Font: Calibri, 28 pt Color: 85 percent black Title case Text box at.42” and.35” from top left corner Subhead Font: Calibri, 18 pt Color: 79/111/25 Title case Bullets Font: Calibri, 18 pt Text color: 85 percent black Bullet color: 79/111/25 Text box at.42” and 1.89” from top left corner Sub-bullets 1 Font: Calibri, 16 pt En-dash color: 141/198/63 Sub-bullets 2 Font: Calibri, 14 pt Bullet color: 128/127/131 Sub-bullets 3, etc. Font: Calibri, 12 pt Alternate bullet/dash Bullet/dash color: alternating 79/111/25, 141/198/63, 128/127/131 Click on the corner of this text box to delete

Scott Yoshimura, Risk Management Consultant Advisory Services Group 602.337.3347 Scott.Yoshimura@fisglobal.com Thank You Closing Slide Header Font: Calibri, 28 pt Color: 85 percent black Subhead Font: Calibri, 16 pt Color: 79/111/25 No Page Number Click on the corner of this text box to delete Closing Slide Header Font: Calibri, 28 pt Color: 85 percent black Subhead Font: Calibri, 16 pt Color: 79/111/25 No Page Number Click on the corner of this text box to delete

Proprietary & Confidential © 2011 Fidelity National Information Services, Inc. and its subsidiaries. Risk Assessments Scott Yoshimura, Risk Management.

Similar presentations

Presentation on theme: "Proprietary & Confidential © 2011 Fidelity National Information Services, Inc. and its subsidiaries. Risk Assessments Scott Yoshimura, Risk Management."— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

Proprietary & Confidential © 2011 Fidelity National Information Services, Inc. and its subsidiaries. Risk Assessments Scott Yoshimura, Risk Management.

Similar presentations

Presentation on theme: "Proprietary & Confidential © 2011 Fidelity National Information Services, Inc. and its subsidiaries. Risk Assessments Scott Yoshimura, Risk Management."— Presentation transcript:

Similar presentations

About project

Feedback