unleashing the power of grc

16
© 2020 Jack Henry & Associates, Inc. ® Unleashing the Power of GRC Viviana Campanaro, CISSP Gladiator Security Sales Engineer Faith Wray, CISA Gladiator Risk and Compliance Consultant, Advisory June 2, 2020

Upload: others

Post on 15-Oct-2021

8 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Unleashing the Power of GRC

Viviana Campanaro, CISSP – Gladiator Security Sales Engineer

Faith Wray, CISA – Gladiator Risk and Compliance Consultant, Advisory

June 2, 2020

Page 2: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Cybersecurity Webinar Series

• Multi-part, educational series

• Proactive Cybersecurity: Staying Ahead of Threats

1. Assessing Your Biggest Security Risks Before It Is Too Late – October 29th

2. Machine Learning and the Latest Protection methods – December 12th

3. Cyber Threats and Trends for 2020 – January 14th

4. Ransomware is alive and well: are you? – February 12th

5. Gone Phishing: Tips, Tricks and Lessons Learned in the Battle of Social

Engineering – March 18th

6. Unleashing the Power of GRC - June 2nd

Page 3: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

About Us

Viviana Campanaro, CISSP

Gladiator Security and Compliance Sales Engineer

Tampa, FL

- 20+ Years in Information Security

- CISSP since 2005

- 10 Years in Banking

- Security Education and Training

- Love swimming and dancing

Page 4: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

About Us

Faith Wray, CISA

Gladiator Risk and Compliance Consultant, Advisor

Atlanta, GA

- 19 years IT and Information Security

- FDIC IT Exam Analyst

- CISA since 2016

- Enjoy spending time at the beach

Page 5: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Discussion Topics

GRC in Community FIs

Benefits

Technology

Unleash the Power

Page 6: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Aligning people, processes and

technology with business objectives

to effectively manage risk and

meet compliance requirements.

Governance

Risk

Compliance

Page 7: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Set business strategy & objectives

Determine risk appetite

Establish culture & values

Develop internal policies

Monitor/measure performance

Governance

Page 8: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Risk = Possibility of loss or damage

created by an activity or person

Risk Management

Seeks to Identify and Assess risks in

order to Mitigate, Accept, Avoid or

Transfer them

Page 9: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Observance of relevant laws,

regulations, and corporate policies

Compliance

Relies on governance standards and

risk tolerance

Page 10: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Today’s Banking Security Dilemma

Sophisticated Threats Complex IT Environments Talent Shortage

Page 11: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Business

Continuity

Management

Risk

Assessments

Vendor

ManagementPolicies

Training AuditsIncident

Response

GRC in

Community

Financial

Institutions

Page 12: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

GRC Strategy

Rethink your GRC Strategy

Regulations that

apply to you

Increased Complexity

of your environment

New Technologies

available to you

Data Breaches and

their impact to

your FI

Accountability

across your FI

Page 13: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Automate GRC

Security

Training

Audit/

Exam Info

Vendor

Management

Incident

Response

Info Security

PoliciesBusiness

Continuity

Risk

Assessments

Reporting

Business Continuity

Risk Assessments

Vendor Management

Information Sec Policies

Security Training

Audit/Exam Information

Incident Response

Reporting

HOLISTIC VIEW

Common Database

Page 14: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

GRC Strategy

GRC Platform Benefits

Significant time and financial savings

Reduce guesswork

Lessen employee burden

Operate more efficiently

Break down silos

Page 15: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Establish your GRC

Accountability model

and Asset Inventory

Unleash the Power of GRC

Align Risks and Controls

with your Risk Appetite

and Regulatory

requirements

Leverage third party

expertise and a GRC

SaaS platform

Page 16: Unleashing the Power of GRC

© 2020 Jack Henry & Associates, Inc.®

Thank You!

Q & A