
Vendor Management
Vendor management refers to all the systems, strategies, and techniques used to get more value from every vendor and third-party service provider
AML Compliance
The AML in AML compliance stands for anti-money laundering. AML compliance means following regulations designed to deter money laundering through both

RTO Meaning
RTO is defined as the maximum tolerable length of time that a computer, system, network or application can be down after a failure or disaster occurs.
GLBA Compliance
The Gramm Leach Bliley Act went into effect in 1999. Also known as the Financial Modernization Act, it mandates that financial institutions explain to

Risk Management In Healthcare
Risk management is essential in any business, but risk management in healthcare, it can involve components unique to the medical community.

The Gramm-Leach-Bliley Act
The Gramm-Leach-Bliley Act (GLB Act or GLBA), also known as the Financial Modernization Act, helps control the way financial

Vendor Management Best Practices
Learn vendor management best practices ranching from good communication to having the correct procedures in place.

Risk Management Planning
While you may think that common sense could help businesses avoid risk, there are several risk management standards in place making this process more
Business Continuity Planning
Businesses can face several risks, some of which can be more devastating than others. In extreme cases, these risks can put your business

Lessons from a Fintech O.G.
When Phil Meinert began his career in computer programming, the first wave of fintech development had just begun. If you think it’s hard to implement new

3 Spooky Contract Clauses That Will Raise Eyebrows
You think horror movies are scary? Try reading some of the most hair-raising items that managed to make it into actual FI third-party vendor contracts.

Are You Ready for the Next Economic Downturn?
It’s inevitable that another downturn is coming. That’s why it’s important to make sure green risk management teams have the right tools and expertise to

3 Types of Vendor Monitoring
How do you know whether your vendors are actually doing what they say they are doing? It comes down to three key types of vendor monitoring...

Coming to a GSE Near You: Better Third-Party Risk Management via FHFA Guidance
If you’ve been holding off on formalizing your approach to vendor management, this is another sign that you need to get on board.

Sharing BSA Resources with Another Institution? Third-Party Vendor Management Rules Apply
Regulators have given financial institutions a green light for sharing BSA resources in some situations, but proper third-party vendor management practices

Monkey Business: What Two Gambling Monkeys Can Teach Us About Risk
Did you hear about the monkey gambling for drops of juice in a casino? It’s an actual experiment that gives us insights into risk and decision making...

Ammo for the Budget Battle: How Risk Management Delivers ROI
Need help communicating return on investment (ROI) for risk management software? Here are arguments to help make the case to management and the board

OCC: Cybersecurity, Commercial/Retail Credit & BSA Will Be 2019’s Top Supervisory Priorities
Risk and cybersecurity remain top supervisory priorities at the OCC for a second year in a row, the agency reports in its latest supervision operating plan

7 Things You Need to Know Before Buying Cybersecurity Insurance
Cybersecurity insurance doesn’t always cover your institution the way you expect. Consider these 7 things before you buy...

FDIC Proposes Retiring Half Its Risk Management FILs—But Don’t Get Too Excited
It sounds like every banker’s dream come true. The FDIC has proposed retiring 374 of the 664 risk management supervision-related Financial Institution

Laws vs. Regulations vs. Guidance: What's the Difference?
What's the difference between laws vs. regulations vs. guidance? We're breaking it down into a simple explanation in this blog.

Free Your Inner Luddite & Find Risk Management Peace
If you think of yourself as a risk management Luddite, consider this fresh perspective. It will make your job easier if you’ll let it.

Discovering a Vendor Data Mistake: A Lesson from the Fiserv Flaw
Have you ever swapped out a number or letter in a URL to skip to another page? Cybersecurity researcher and ethical hacker, Kristian Erik

Poor Vendor Risk Management Costs Bank $4.75 Million
Compared to other agencies, the Fed hasn’t handed down very many enforcement actions for unfair and deceptive practices violating the FTC Act. Why then is

How to Set Up a Risk Committee
The risk committee helps ensure that management and the board understand each other. Here're tips on setting up a risk management committee.

5 Lessons from HUD's "Digital Redlining" Complaint Against Facebook
Last week, the Department of Housing and Urban Development announced a formal complaint against Facebook for alleged digital...

Risk Assessments 101: The Role of Probability & Impact in Measuring Risk
Risk assessment methodology for banks aren’t nearly as subjective as they may seem. Here, we walk you through exactly what you need to evaluate.

5 Features Every Vendor Management Software Solution Should Have
Here are the top five features to look for when selecting a vendor management software solution...

FS-ISAC Offers Free Cyberattack Exercise
When was the last time your incident response team practiced its response to a cyberattack? If it’s been awhile, you may want to look into the CAPS

Is Your Third-Party Vendor Contract Specific Enough When It Comes to Cybersecurity?
If you’re assuming your third-party service provider is following cybersecurity best practices because it’s smart business, think again...