|
|
Program |
|
To see PDF versions of speaker presentations (when available), please click on the links below. |
Program
Highlights
Methodology & measurement processes, Project delivery success (time/budget), Application portfolio mix, Business to IT alignment
“Today’s
Regulatory Hot Buttons: Panel Discussion and Q&A” Participants: Mark Snyder, Federal Reserve Bank; Paul Worthing, FDIC; Meg Cronin, OCC; Paley Pang, OTS Here's your opportunity to sharpen your focus. With hardware and software upgrades, user education and security issues, what else should be on your plate? Let the regulators tell you! Issues to be discussed include; Testing your Disaster Plan, Vendor Management, Security Risk Assessment, Check 21, and Software Patch Management CONCURRENT SESSIONS: “Secrets
from the Hacking World: How They Target Your Community Bank” Discover why your community bank is more at risk today than ever before. Find out what are some of the more sophisticated attackers out there capable of. This presentation will provide a case study that involves the story of how one community bank got hacked and exposed. Learn how you can use Defense-in-depth to protect your bank's network from hacker attacks. What are some of the more sophisticated attackers out there capable of? How are attackers finding targets today? Where are these attacks coming from and why? What can you do to keep the bad guys out? Take away 5 practical tips that your community banks can implement to stop these hackers from entering your network.
“IT Compliance and
Encryption Issues” This session will focus upon the need for protection of customer information through encryption. Covered issues will include limitations and liabilities under the Gramm-Leach Bliley Act, the Digital Millennium Copyright Act, the Terrorist Act, the Government’s Escrow Encryption Standard (EES), as well as related state and federal laws. In conclusion, we will discuss the moral debate between national security and the government’s right to peek into your personal encrypted messages.
“Network Best
Practices” The Nature of Network Best Practices has changed from technical matters to alignment of technology business requirements. Join Andy Greenawalt, as he discusses how the technical requirements measure what matters in order to grow your bank and optimize the use of your IT resources.
“Managing
Vendor Relationships: Turning Vendors into Partners” Regulatory compliance requires community banks to actively manage their vendor relationships. But banks should not maximize their vendor relationships simply to meet regulatory obligations. In fact, banks should look not only to “manage” their vendor relationships, but to turn those relationships into partnerships, leveraging the collective knowledge and experience of the vendor’s expert staff. During this session, participants will: Consider the new competencies required by the regulators in managing and maintaining successful vendor relationships; Share successful strategies for turning service management into increased productivity and enhanced business strategy; and, Explore methods and tools for transforming vendor relationships into partnerships
“Security
Risk Assessment” Information Security Risk Management is the process of identifying, assessing, analyzing and reducing information security risks to an acceptable level by implementing the right mechanisms or countermeasures to maintain a level of risk that the business has justified. The first step in starting a Risk Management practice is to perform an Information Security Risk Assessment. Bill Moore will discuss this practice and the regulations and events that have driven the need for a robust risk assessment practice.
“Secrets
From the CFO World: How to Get the Money You Need for IT” Presentation
Hot Forum Sessions"Integrating
Positive Pay Into Your Fraud Prevention Strategy" Preventing check fraud is a topic of interest for financial institutions of all sizes, and positive pay can be an invaluable tool to curb this activity. When analyzing options, bankers must consider strategic issues such as competitive positioning and target market as well as technical considerations such as degree of automation, ecommerce integration and leveraging imaging. Join us for an interactive discussion on positive pay including participation from WIB members who have proactively integrated ecommerce and automated positive pay to formulate a comprehensive fraud prevention strategy.
"Has
Your Information Grown Legs?" Do you realize all your banks confidential information is leaking out of your network every day? Completely bypassing all your firewalls, virus filters and network monitor systems, gigabytes of data are walking out the front door at 5pm each evening. If your bank is using laptops and other portable devices (i.e. Blackberry’s) your customer information, loan documents, emails and internal memos and other confidential information is walking out the door unmonitored and unencrypted everyday. Products and policies can help mitigate these risks. We'll touch on such solutions as Information encryption, digital rights management, offline storage, VPNs and physical security. By deploying these techniques, you can make sure all your information remains confidential.
"Internal
Controls Beyond Sarbanes Oxley, Compliance
Tools & Solutions for Small-&-Mid-Cap Entities" Section 404 of the Sarbanes-Oxley Act requires an assessment of a company’s internal control structure and the procedures they use to create financial statements. These procedures invariably involve Information Technology systems, so the assessment invariably includes IT. Auditors and financial professionals are not often equipped to perform this function, neither by training, nor by experience. This presentation is intended to offer a few tools to assist financial and technology professionals and an explanation of how to use them. In-depth discussion items include the importance of documentation of controls in IT, especially consistency in the understanding and use of different types of documents, and CobiT, the most accepted framework for implementing and assessing controls within an IT department.
Vendor Showcase Presentations"Cash
Management - A Value Proposition. Are You Missing Out?
" Community Banks are talking about the strategic importance of online Cash Management services. Today, banks are investing heavily in technology. Microbanker recently reported that cash management is the most popular technology initiative at banks these days. A full 51% of Microbanker readers plan to implement new cash management technologies over the next year. This session provides some basic guidelines on reviewing Cash Management systems and developing a strategic plan to implement them.
"Image
Item Processing Fraud Prevention Services
" Datatronix Financial Services, Inc., provides leading edge Image Item Processing and Image based Fraud Prevention services. In this showcase Datatronix will demonstrate the power of today's sophisticated and intuitive software to automatically scan and analyze check images looking not only for signature fraud but phony check stock, fonts, and layout. The software also tracks and analyzes check volume, out of norm dollar amounts, out of range, duplicate, and out of sequence check serial numbers and tracks ach and e-payments as well.
"Cost
Effective Security" Is your company feeling the financial burden of implementing an information security program to comply with all the regulatory requirements, such as GLBA and SOX? Do you want to secure your corporate and customer information without spending a fortune? If the answer to either of these questions is yes, or you are a cost conscious manager, you need to attend this session. iRisk Management has been implementing information security for financial institutions on shoestring budgets for 10 years. Hear about a simple, cost effective approach to security. Find out how you can have your own Chief Security Officer On-call to help manage your information security risk. Walk away with a clear understanding of the critical components of a good security program. Don’t miss this session, because keeping information secure doesn’t need to break the bank!
Summit Advisory Committee
|